Privacy Policy

Protecting your personal data is important to us. Below we inform you in accordance with Art. 13, 14 of the General Data Protection Regulation (GDPR) about the processing of your data when using the Nutze.app platform.

1. Controller

The controller within the meaning of the GDPR is:

Chris Wernsmann
Vennstr. 3
48619 Heek
Germany
Email: hello@nutze.app

2. What data we process and for what purposes

Depending on your use of the platform, we process the following data:

3. Storage on your device (TDDDG), reach measurement and Google Analytics

We use technically necessary storage technologies (on the web: cookies and your browser's local storage and session storage) to keep you logged in and to ensure essential functions of the platform (e.g. the booking process).

In the mobile app, we store the following on your device:

Apart from the session data, this information is kept in the app's ordinary storage, without that additional encryption. It is not sent to us and is removed when you delete the app. If you have enabled your operating system's device backup (iCloud or Google), it may be included in that backup. Two further items — the list for the listing view counter and a counter for the prompt to list an item — are described separately below.

The reach measurement described below runs on our website only — the mobile app contains no analytics, advertising or tracking SDK of any kind. If you open a page of our website from inside the app (e.g. this privacy policy), your browser remembers this in its session storage for as long as the tab is open; no cookie notice is shown there and Google Analytics is not loaded.

The storage of this strictly necessary data on your device is based on § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The subsequent processing of the personal data takes place in accordance with Art. 6 (1) (f) GDPR (legitimate interest in providing the platform) or Art. 6 (1) (b) GDPR.

Listing view counter: every listing has a counter of how often it has been opened, which feeds the "Popular on Nutze" selection. So that reloading a page does not count as a new view, your browser (local storage) or the app on your device remembers which listings you opened in the last six hours — storing only the listing identifiers and the time of each. That list is not sent to us, older entries are removed the next time you open a listing, and it is deleted when you sign out. On our side only the total number of views per listing is stored — never who viewed which listing.

Prompt to list an item in the app: in a few places the app encourages you to rent out something yourself, and it alternates between several wordings. So that the next one appears each time the app starts, it counts on your device how often it has been started. Only that number is stored, with no link to your account or to any listing; it is not sent to us and is removed when you delete the app.

For simple reach measurement we use Vercel Analytics and Speed Insights. These services set no cookies. Visitors are told apart only by a hash formed from the request, which is discarded after 24 hours; what is sent is the address of the pages visited, without search, location or sign-in parameters. No user profiles are created across websites.

We group the optional services on our website into categories. At present, besides the always-active necessary entries, there is only the Statistics category (Google Analytics, see below). In the cookie notice you can accept or reject all optional categories with equivalent buttons, or decide on each one under "Settings". There, and in the cookie list at the end of this privacy policy on nutze.app, you will find every entry with its provider, purpose and duration. You can change your choice at any time via "Cookie settings".

Storing your choice: we store your decision in your browser's local storage ("nutze.consent"), together with the time, the version of the consent texts and a randomly generated identifier. If you allow at least one category, your choice applies for 12 months; if you reject everything, for 6 months. After that, and whenever the texts change, we ask again; the lapsed entry is deleted on your next visit. The legal basis is § 25 (2) no. 2 TDDDG.

Consent log: for every decision we store on our server the random identifier, the text version, your choice per category, the button you used and the time. We do not store your IP address, details of your browser or device, or your user account; the IP address is used only briefly to limit the number of requests (abuse protection, Upstash). An entry can be linked to a person only through the identifier in that person's browser. This lets us demonstrate whether, and in which version, consent was given (Art. 7 (1) GDPR); the legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR. The entries are kept in our database at Supabase (see section 5) and deleted automatically after three years.

If you consent, we additionally use Google Analytics 4 on our website, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We want to understand how visitors become aware of Nutze.app (e.g. via a search engine, a link or a campaign) and at which point they leave the website before signing up or downloading our app. This serves exclusively our own market research and the improvement of our service.

When Google Analytics is active: only once you choose "Accept all" in the cookie notice or allow the "Statistics" category in the cookie settings. Before that, no script is loaded from Google and no connection to Google is made. If you reject or make no choice, Google Analytics stays disabled, with no disadvantage to you. Google Analytics runs only on publicly accessible pages (e.g. home page, search, listings, guides, sign-up and log-in) and on the account set-up steps after signing up — not in your personal area (dashboard), not in the administration area and not on pages whose address contains a confirmation or reset link. Even when you are signed in, Google does not recognise you as a person or account.

Which data is processed:

What we do not do: we do not send names, email addresses or account identifiers to Google (no user ID). Google signals (cross-device analysis), advertising features, personalised advertising and any link to Google advertising accounts are switched off. We have disabled sharing the data with Google for Google's own purposes.

IP address: your IP address is necessarily transmitted to Google. According to Google, for visitors from the EU it is not stored but only used on servers in the EU to determine the approximate location, and then discarded.

Legal basis: storing information on your device and reading it is based on your consent under § 25 (1) TDDDG. The subsequent processing of personal data is based on your consent under Art. 6 (1) (a) GDPR.

Processing on our behalf and transfer to the USA: Google processes the data as our processor on the basis of the Google Ads Data Processing Terms (Art. 28 GDPR). This may involve a transfer to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, Google has concluded the European Commission's standard contractual clauses.

Storage period: the Google Analytics cookies are stored for at most 12 months — never longer than your consent is valid — and deleted as soon as you withdraw your consent. The event and user data stored at Google is deleted automatically after 14 months; a new visit does not extend this period. After that, we only have aggregated statistics without any personal reference.

Storing your decision: how we store and log your decision is described above under "Cookie settings and proof of your consent".

Withdrawal: you can withdraw your consent at any time with effect for the future: via "Cookie settings" in the page footer, below the sign-up and log-in forms, on profile pages and during account set-up, and at the end of this privacy policy on nutze.app, by switching off the "Statistics" category there or choosing "Reject all". We then delete the Google Analytics cookies in your browser and reload the page, so that no further data is sent to Google. The lawfulness of the processing carried out until the withdrawal remains unaffected.

More information on data protection at Google: policies.google.com/privacy and business.safety.google/adsprocessorterms.

4. Sign-in via third-party providers (single sign-on)

In addition to classic registration by email, we offer the option of signing in via the services of Google and Apple.

If you choose this option, we are authorised directly by the respective third-party provider and receive certain profile data from them (such as your name and email address) in order to create your Nutze.app account or log you in. The legal basis for this is the performance of a contract (Art. 6 (1) (b) GDPR) or your consent through the active selection of the provider (Art. 6 (1) (a) GDPR).

5. Recipients of the data and US data transfer (DPF)

To provide our platform, we use specialised service providers (processors pursuant to Art. 28 GDPR).

Every provider listed below is contractually bound — through a data processing agreement under Art. 28 GDPR — to process your data solely on our instructions and for the stated purpose, and to provide the same level of protection for that data as is described in this privacy policy. Your data is never passed on for the providers' own purposes, sold, or used for advertising.

Important note on data transfer to the USA

Some of our service providers are based in the USA. The European Commission has issued an adequacy decision for the EU-US Data Privacy Framework (DPF). Insofar as our US service providers are certified under the DPF, the transfer of data to the USA is permissible under data protection law.

We use the following service providers:

Artificial intelligence (content screening and assistive features)

Artificial intelligence assists us in a few places. The only provider used for this is:

Only what the respective feature needs is transmitted:

Before any content is sent to Google for the first time, and before we send more for a feature than we have described to you, the app and the website show you which data is sent to whom, and ask for your decision. We store your decision with its time, the version and wording of the text you saw, the language, and whether you decided in the app or on the website, so that we can demonstrate it (Art. 7 (1) GDPR). For decisions made before this record existed, or in an older app version, the wording shown is not known, and we record exactly that. We keep this record after a withdrawal too, for as long as we may need to demonstrate the decision.

For the four assistive features — listing assistant, category suggestion, search and search keywords — that decision is consent under Art. 6 (1) (a) GDPR: without it nothing is transmitted and the features stay switched off.

Listing screening, by contrast, rests on our legitimate interest (Art. 6 (1) (f) GDPR) — a safety check that could be switched off would not be one. We still follow your decision here: it takes effect as an objection under Art. 21 GDPR, and your listing is then screened by a person instead of an AI. That takes longer, but restricts neither publishing nor any other use of the platform.

Changing or withdrawing your permission: you can change your decision at any time and without giving reasons — in the app under Profile → Account & Security → Artificial intelligence, on the website under Dashboard → Profile → Account & Security → Artificial intelligence. A withdrawal takes effect going forward: from that moment no further content is sent to Google. The lawfulness of processing carried out until then is unaffected.

Uploaded images are converted before being passed on, and GPS coordinates are stripped from the EXIF data in the process.

Not transmitted: chat messages, handover and return records, payment or account data. Your content is not used to train AI models — this is contractually excluded by our use of the paid Google API.

Payment processing via Stripe

For processing payments we use Stripe Payments Europe, Ltd. (Ireland) or its parent company in the USA (certified under the EU-US DPF).

Stripe processes payment information (e.g. credit card details) partly as our processor, but also as an independent controller in order to comply with its own legal obligations (e.g. anti-money-laundering). You can find further information in Stripe's privacy policy: https://stripe.com/privacy.

6. Map services and geocoding

To show you the locations of listings, we embed interactive maps. For data-protection reasons (privacy by design), we host the underlying map tiles (Protomaps/PMTiles) on our own servers. When simply viewing the map, no location data is therefore transmitted to third-party map providers.

However, the following applies to certain additional map functions:

The legal basis for this processing is our legitimate interest in a functioning and appealing location search (Art. 6 (1) (f) GDPR) and the performance of a contract (Art. 6 (1) (b) GDPR).

7. Storage period

We only store your data for as long as is necessary for the respective purpose. For Google Analytics, the periods stated in section 3 apply: cookies at most 12 months, event and user data at Google 14 months. We delete entries in the consent log after three years.

We delete the photos of a listing we do not approve after review 30 days after that decision. We delete the photos of a listing you delete 30 days later, unless a booking or a conversation refers to it; in that case they stay visible there for as long as your account exists, and after an account deletion they go with the listing description (see “Account deletion”).

Account deletion

You can delete your account yourself at any time — on the web and in the app under Profile → Account & Security. Deletion happens in two stages.

Immediately upon your request: your profile, your listings and your presence in search disappear at once. From that moment your account can no longer be found by anyone else.

Your access remains for 30 days — deliberately so. Deletion is reversible during that period, and you can only reach the reversal if you are still able to sign in. Pressing "Cancel deletion" on the same page restores your account completely. Simply signing in does not cancel the deletion; that button is the only thing that does.

After the 30 days have passed, your account is automatically and permanently anonymised. We do not delete the row in our database — we delete the person in it. Your name is replaced with "Deleted user"; profile picture, phone number, company details, VAT ID, any stored imprint and terms documents, notification preferences and all Stripe identifiers are removed; your addresses are overwritten, and the delivery addresses on bookings you took part in are deleted. Push tokens, favourites, follows and blocks are deleted. Your credentials are made unusable: password and linked Google/Apple accounts are removed, active sessions are ended, and access is permanently locked. From this point recovery is no longer possible.

Why anonymised rather than deleted: a rental always has two sides. If we removed your row entirely, your counterparty would also lose the record of a booking they were party to — including the invoicing and payment data we are required to retain for up to 10 years under § 147 AO and § 24 Abs. 3 PStTG. Those records therefore remain, but can no longer be attributed to an identifiable person.

That is not the end of it. Anonymisation removes the person from the row; what remains of the content has its own deadline, and an automated process checks daily which of those have passed and erases them. Three years after the end of the year in which they were created, message text, review text, listing descriptions and photos, and the statements of reasons for our decisions on a listing are erased (§ 195, § 199 Abs. 1 BGB). Ten years applies to the booking and payment details that matter for tax (§ 147 AO, § 24 Abs. 3 PStTG) — and § 24 Abs. 3 PStTG expressly requires erasure once the period ends. Images sent in chat are removed as soon as the message they belong to no longer exists.

When we refuse a deletion: while you are party to a booking that is not yet completed, cancelled or rejected, we cannot delete your account — the same applies during an open dispute and while there is an unpaid balance on your Stripe account. In those cases we tell you what is still outstanding. If any of these checks cannot be carried out for technical reasons, we refuse as a precaution rather than perform a deletion that would damage an ongoing rental.

Your right to erasure under Art. 17 GDPR remains unaffected; you can contact us at any time at hello@nutze.app. Where we must keep data to meet a statutory retention obligation, Art. 17 (3) (b) GDPR expressly provides an exception to the right to erasure; we then restrict processing of that data to the retention purpose and delete it once the period ends.

8. Data sharing between users

When you request a booking, we pass on your name and the city of the handover location to the respective other contracting party. If you ask for delivery, the owner also sees the postal code and city of your delivery address, so they can judge the trip.

Once a booking is confirmed (that is, accepted and onwards), we additionally pass the following data to the other contracting party so that you can arrange the handover and know who you have entered into a contract with:

This is strictly necessary for the performance of the rental contract between you (Art. 6 (1) (b) GDPR). Before a booking is confirmed we do not share this data. We never pass your email address to the other contracting party — communication runs through the in-app chat.

9. Your rights

You have the following rights with regard to your personal data:

The easiest way to withdraw a consent to Google Analytics is "Cookie settings" on our website (see section 3).

Right to object (Art. 21 GDPR): insofar as we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you can object to the processing at any time.

To exercise your rights, an email to hello@nutze.app is sufficient.

10. Right to complain to a supervisory authority

You also have the right to complain to a data protection supervisory authority. The supervisory authority responsible for our registered office is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf, Germany

Last updated: October 2026

Your cookie settings

You have not made a choice yet.