Privacy Policy — Divide Fairly

Last updated: 15 October 2026 · Deutsch: https://dividefairly.dopler.de/de/datenschutz

Who this policy covers

This policy applies to the Divide Fairly Android app (package dev.dopler.dividefairly), published on Google Play, and to its website dividefairly.dopler.de. Divide Fairly is developed by a single person, not a company.

Data controller (GDPR Art. 4(7)): Eduard Dopler, Schneisberg 52, 45481 Mülheim, Germany, reachable at dividefairly@eduard-dopler.de. If you have questions about your data or want to exercise a GDPR right (access, deletion, objection), use that email address.

What data the app collects

Your group data stays on your device. Divide Fairly has no accounts and no sync in this version; a group moves to another phone only as a file you send yourself. The app talks to the developer's server only when you send a message with Send feedback. Concretely:

• Group data you enter (group names, member names, expenses, payments) is stored only on your device, in the app's local database. It is never sent anywhere by the app itself.
• Send feedback (Settings): what you type, at most 2,000 characters, is sent over an encrypted connection (HTTPS) to the developer's server, together with the app version, the Android version and the app's language, which the screen shows before you send. Nothing else: no name, no e-mail address, no group data. If you want an answer, write your e-mail address into the text yourself. See Messages and the website below for how it is stored.
• Android Auto Backup: with your device's own backup enabled (a Google Account setting, not something this app controls), your device's OS may include this local database in your regular Android backup, the same way it does for your other apps' data. That backup is between you and your device manufacturer/Google, governed by their privacy policies — Divide Fairly never sends group data to a server of its own.
• Sharing a summary or a CSV file: if you use the app's own "Share summary" or "Export CSV" actions, the app hands that content to whichever app you pick from the Android share sheet (e.g. a messaging app, a spreadsheet app, email). That is data you chose to share, with a destination you chose; the app does not send it anywhere on its own.
• Sending a group to other phones: "Send to other phones" hands a file with the group's whole history to the app you pick from the share sheet, the same way. It contains every name, expense and payment of that group, including entries that were later deleted or changed, and it is not encrypted by the app (messaging apps usually encrypt in transit). Send it only to people in the group. Whoever receives it can import it into their own copy of the app; nothing is sent automatically, and the app never uploads it anywhere.
• Importing a file: when you open a file with the app ("Open with", "Share" or "Import from file"), the app reads only that one file, with access granted by Android for that file alone.
• Crash reports (opt-in only): the app can send anonymous crash reports through Firebase Crashlytics (operated by Google), but only if you explicitly agree to a prompt shown the first time you open the app, or later turn it on yourself in Settings → Privacy. It is off by default. A crash report can include: the stack trace of the crash, app version, device model and OS version, and a randomly generated installation identifier. It never includes your group data — no group names, member names, amounts, or currencies are ever attached to a crash report. You can turn this off again at any time in Settings, and doing so stops any further reports immediately.
• No usage analytics, no advertising, no tracking. The app has no analytics SDK and shows no ads. The only third-party SDK involved is Firebase Crashlytics, and only once you turn it on.

Messages and the website

The website dividefairly.dopler.de and the server that receives messages run on a server rented from netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, in its data centre in Nuremberg. netcup processes the data on the developer's behalf under a data processing agreement (GDPR Art. 28) and does not use it for anything else.

• Messages you send with Send feedback in the app or with the website's contact form are stored as text files: the text, the time it arrived, and the details listed above (for the contact form: your e-mail address, so the developer can answer, and the page's language). Your IP address is not stored with a message. The developer reads messages to answer them and to improve the app, and deletes them after 12 months at the latest; ask at the address above to have yours deleted sooner. Legal basis: the developer's legitimate interest in answering questions and improving the app (GDPR Art. 6(1)(f)).
• Abuse protection. While a request is being processed, the server uses your IP address to limit how many messages can be sent from one connection. It keeps this count in memory only, for at most an hour, and never writes it down.
• Access log. Like almost every web server, the website keeps a log of requests to detect and fend off abuse and errors: a shortened IP address (the last part removed: for IPv4 the last of four numbers, for IPv6 everything after the first three of eight blocks), the time, the page requested and whether it worked. No browser details, no other headers. The log is deleted after 14 days. Legal basis: the developer's legitimate interest in a secure, working service (GDPR Art. 6(1)(f)).
• No cookies, no analytics, no external resources. The website loads nothing from other servers and stores nothing in your browser.

Data retention and deletion

Because all group data lives on your device, deleting it is in your control:

• Uninstalling the app removes its local database (unless it is present in an existing Android backup you made beforehand — remove that backup separately through your device's backup settings if you want it gone everywhere).
• If you have opted into crash reporting, you can revoke that consent at any time in Settings → Privacy; Firebase's own retention policy then applies to reports already sent (see Firebase's privacy documentation).
• Messages are deleted after 12 months at the latest, the access log after 14 days (see above).

Legal basis, recipients and your rights

• Legal basis. Crash reports are sent only with your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time in Settings → Privacy; this does not affect reports sent before. Messages and the access log: the developer's legitimate interest (GDPR Art. 6(1)(f)), see Messages and the website; you can object to it at any time.
• Recipients. Messages and the access log are processed by netcup GmbH on the developer's behalf, in Germany. Crash reports are processed by Google (Firebase Crashlytics) on the developer's behalf. Google may process them outside the EU, including in the USA; Google is certified under the EU–US Data Privacy Framework.
• Your rights. You have the right to access, rectification, erasure, restriction of processing, data portability and objection (GDPR Art. 15–21). Because group data never leaves your device through the app, the developer holds no group data about you; the only things that can be about you are messages you sent. You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for the developer: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

Children's privacy

Divide Fairly is meant for people aged 13 and over and is not directed at younger children. If you are under 16, please only turn on crash reports with the consent of a parent or guardian (GDPR Art. 8).

Changes to this policy

If this policy changes, the "Last updated" date above will change and, for material changes, the Play Store listing description will note it.

Contact

Questions about this policy or your data: dividefairly@eduard-dopler.de.