Privacy

In short

• The Dalbi app has no server of its own.
• There is no account, no sign-in, no syncing to the cloud.
• This website sets no cookies and loads no third-party content.
• No personal tracking, no advertising, no behaviour or conversion measurement.
• Pseudonymous reach measurement (app launches) via EAS Insights and optional crash reports via Sentry are described in their own sections below.

Controller

Driftland Works · sole proprietor Johann Emrich
Am Speicher 12
14473 Potsdam
Germany

Email: datenschutz@dalbi.app

Full provider details (legal form, VAT-ID) in the imprint.

Data processed when you visit this site

When you visit this site, the hosting provider collects technical server logs that are required for safe operation: IP address, date and time, requested URL, referrer, user agent. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in safe operation). Logs are deleted automatically within 14 days at the latest.

Hosting provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. A Data Processing Agreement (Art. 28 GDPR) is in place with Vercel. Server logs are retained for the short period set by Vercel's defaults and then deleted automatically.

Data inside the app

The Dalbi app processes all functional data — stations, search, favourites, routes, location — exclusively on your device. Favourites and saved routes live in the local app database. There are no advertising IDs and no in-app behaviour tracking (no screens, clicks, sessions, or search terms). On every cold launch the app sends a pseudonymous reach statistic to EAS Insights (USA, see "Reach statistics (EAS Insights)" below, cannot be disabled in the app). Crash reports via Sentry are documented separately (see "Diagnostics & Stability" below) and can be disabled in the app.

The app accesses your location only when you explicitly grant permission, in order to show your position on the map or compute a route from where you are. The location does not leave your device.

Fonts

The fonts used (DM Sans, Fraunces) are served as variable WOFF2 from the same domain that serves this site. There is no connection to Google Fonts or comparable third-party services.

Diagnostics & Stability

We use Sentry (Funktional Software Inc., hosted in Frankfurt, EU) to capture crashes. Transmitted: technical stack trace, device model, OS version, app version, anonymous installation ID.

Not transmitted: IP address, location, station data, personal identifiers, screenshots.

Legal basis: legitimate interest under Art. 6(1)(f) GDPR (app stability). You can disable transmission anytime in the app under Settings → Diagnostics → Send crash reports.

Reach statistics (EAS Insights)

We use EAS Insights (provider: 650 Industries Inc., USA, hosted in the USA) to collect pseudonymous reach statistics. On every cold launch of the app, a single HTTP request is sent to i.expo.dev containing: a per-installation device UUID (a random key that stays stable on this device until the app is uninstalled; under Art. 4(1) GDPR this counts as a pseudonymous online identifier and therefore as personal data), our project ID, app version, OS version, and platform.

In the course of opening the connection, your device additionally transmits its IP address to the receiving server. The IP address and the device UUID together are sufficient to roughly estimate your device's location. We ourselves only access aggregated provider-console reports (launch counts, version adoption, OS distribution) and do not link this data to any person.

Not transmitted: GPS location data, station data, search terms, personal identifiers such as email or name, in-app behaviour (no screens, clicks, sessions, or interactions are measured), or screenshots.

Transfer to the USA: The data is processed on servers located in the United States. This constitutes a transfer of data to a third country within the meaning of Art. 44 et seq. GDPR. The legal basis is the European Commission's adequacy decision regarding the EU-US Data Privacy Framework of 10 July 2023 (Art. 45 GDPR); 650 Industries Inc. is certified Active with the U.S. Department of Commerce under the trade name "Expo" for the EU-US, Swiss-US, and UK Extension Data Privacy Frameworks (verified 18 June 2026). Should DPF certification lapse, transfers fall back to Standard Contractual Clauses under Art. 46(2) GDPR.

Legal basis for processing: legitimate interest under Art. 6(1)(f) GDPR (measuring reach and version adoption to maintain the app).

No in-app opt-out: This transmission is hard-wired into the app build and cannot be disabled via a toggle, unlike crash reports. You can prevent transmission by restricting the app's network access in your device settings or by blocking the domain i.expo.dev via your network configuration — both measures may also affect other Expo-related functionality such as over-the-air updates.

Processors

We engage the following processors within the meaning of Art. 28 GDPR:

• Functional Software, Inc. (Sentry, hosted in Frankfurt am Main, EU) — capturing app crashes, when enabled in app settings. Data Processing Agreement in place.
• Vercel Inc. (USA) — hosting the marketing website dalbi.app, including the publicly linked dataset snapshot. Data Processing Agreement in place; transfer to the USA based on the EU-US Data Privacy Framework adequacy decision (Art. 45 GDPR).
• 650 Industries, Inc. (EAS Insights, USA) — pseudonymous reach statistics for the app; see "Reach statistics (EAS Insights)".

OpenStreetMap, OpenSeaMap, OpenFreeMap, Esri, and the Apple/Google app stores are independent controllers and are not in a processor relationship with us.

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Send requests to datenschutz@dalbi.app.

You also have the right to lodge a complaint with a data-protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of Brandenburg. UK residents may instead contact the Information Commissioner's Office (ico.org.uk).

California residents: we do not sell or share personal information as defined by the CCPA. To exercise your right to know what personal information we process or to request deletion, contact datenschutz@dalbi.app.