Privacy Policy

This policy explains what personal data Pixel Perfect UG (haftungsbeschränkt) ("we", "us") processes when you use the FitDrop app and the website fitdrop.app, why we do it, and the choices and rights you have.

1. Who is responsible

Pixel Perfect UG (haftungsbeschränkt), Stettiner Str. 41, 61348 Bad Homburg, Germany, represented by its managing director Patrick Rousselet, is the controller of your personal data. More details are in our imprint. For anything related to privacy, including requests to exercise your rights, contact us at hello@fitdrop.app.

2. Data we process

Account data

Your email address, username and the method you use to sign in (email and password, Sign in with Apple or Google Sign-In). If you sign in with Apple or Google, we receive the name, email address and profile picture that provider shares with us. Passwords are handled by our authentication provider and are never stored by us.

Profile data

What you choose to add to your profile: display name, profile picture, bio, birthday and style preferences, and whether your account is public or private.

Content

The photos, videos, captions and comments you post, songs you attach to posts, clothing tags, likes, saves, follows, blocks, your Fit of the Week votes, and your answers and votes on FitDrop stories.

Usage and device data

Which posts and stories you view, used to rank your feed and to avoid showing you the same posts repeatedly; your time zone and language; a push notification token if you allow notifications; and technical data such as IP address, app version, device type and error reports needed to keep the app running and secure.

Purchases

If you buy a Supporter Membership, the App Store or Google Play processes the payment. We receive the status of your purchase (product, renewal and expiry dates), but never your payment details.

Reports and safety

Reports you submit or that are submitted about you, and the outcome of moderation, such as removed content, warnings and bans.

We do not collect your precise location, your contacts or advertising identifiers, we do not show ads, and we do not sell your personal data or share it for targeted advertising.

3. Why we use it, and on what legal basis

• To provide the app: your account, profile, posts, stories, notifications, Fit of the Week and Supporter Membership. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To keep FitDrop safe: automated screening of text and images for content that breaks our Community Guidelines, handling reports, preventing spam, fake accounts and abuse, and checking that requests come from the genuine app. Legal basis: our legitimate interest in a safe platform (Art. 6(1)(f) GDPR) and, where applicable, legal obligations (Art. 6(1)(c) GDPR).
• To improve and personalise the app: ranking feeds, fixing errors and measuring performance. Legal basis: our legitimate interest in a working, relevant app (Art. 6(1)(f) GDPR).
• To communicate with you: verification codes, security and account emails, and replies to your requests. Legal basis: performance of our contract (Art. 6(1)(b) GDPR).
• Push notifications, camera and photo library access: only with your permission, which you can withdraw at any time in your device settings (Art. 6(1)(a) GDPR).
• To comply with the law: responding to valid legal requests and reporting child sexual abuse material to the competent authorities (Art. 6(1)(c) GDPR).

Content that clearly breaks our guidelines can be blocked automatically when it is uploaded. If you think this happened by mistake, contact us and a person will review it.

4. Who can see your data

Other users see your username, display name, profile picture and bio. If your account is public, anyone using FitDrop can see your posts; if it is private, only the followers you approve can.

Service providers process data on our behalf, only as needed for the service they provide and under contracts that require them to protect it:

• cloud hosting, databases and media storage and delivery;
• sign-in and app integrity checks;
• delivery of push notifications;
• subscription management, together with the App Store and Google Play;
• automated screening of text and images for policy violations.

Authorities, where we are legally required to, or where it is necessary to protect the safety of a person, in particular to report child sexual abuse material.

Our moderation team may review content where this is needed to investigate a violation or required by law.

5. Where your data is stored

Our servers and databases are located in Germany. Some of our service providers are based in, or process data in, other countries, including the United States. Where data leaves the European Economic Area, we rely on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Your account and content are kept while your account exists. Content you delete is removed from the app immediately.
• When you delete your account, it is hidden immediately and your personal data is permanently deleted within 30 days. Copies in backups are overwritten within a further 30 days.
• Verification codes expire within minutes. Technical logs and error reports are kept for a short period, generally no longer than 90 days.
• We may keep limited records longer where the law requires it, or where they are needed to prevent a banned user from returning or to establish, exercise or defend legal claims.

7. Your rights

Depending on where you live, you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw any consent you have given. You can edit your profile and delete your content in the app at any time, and delete your account under Settings → Privacy & Security → Delete account. For all other requests, email hello@fitdrop.app from the address linked to your account. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI) in Wiesbaden, Germany. California residents have the rights described above under the CCPA; we do not sell or share personal information.

8. Security

We use encryption in transit, access controls and other technical and organisational measures to protect your data. No system is completely secure, so please use a strong password and keep your sign-in details to yourself.

9. Children

FitDrop is not intended for anyone under 13, and we do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

10. Website

fitdrop.app does not use cookies or tracking. We measure visits with privacy-friendly, cookieless statistics that do not identify you.

11. Changes

We will update this policy when our practices change and show the date of the latest version above. If the changes are significant, we will let you know in the app or by email.