Privacy Policy
Last updated: 6 November 2026
This policy covers the Gearganize app and the website gearganize.app. In short: your inventory lives on your phone. Data only leaves it for features you choose (backup, purchases, friends, the AI assistant) and only to the services named below. There are no ads, no analytics and no tracking cookies.
Who is responsible
Coderilla GmbH, Alte Kasernstraße 16, 97082 Würzburg, Germany. Email: contact@coderilla.de. For questions about the app: gearganize@coderilla.de. We have not appointed a data protection officer, as we are not required to.
The website
Hosting
The website is hosted on Firebase Hosting by Google. To deliver a page, Google necessarily processes your IP address, the page requested, the time and your browser's technical details, and keeps them in server logs for a limited time. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR). The fonts are served from gearganize.app itself; the site loads nothing from other providers apart from the Google services described here.
Download buttons
The App Store and Google Play buttons load their mode (waitlist or store link) from Google Cloud Firestore. When you tap one, we add 1 to an anonymous counter: iPhone or Android, overall and per page language. Nothing else is stored with it, no identifier, no IP address, no cookie. Legal basis: our legitimate interest in knowing how many people want the app (Art. 6(1)(f) GDPR).
Newsletter
If you sign up and tick the consent box, we store your email address, the page language, when you signed up, which version of the consent text you agreed to and when we sent the welcome email. The data is stored in Google Cloud Firestore in the EU. We use it only to send you a welcome email, the news when the app launches and notable updates. Legal basis: your consent (Art. 6(1)(a) GDPR).
The emails are sent by our processor Mailgun Technologies, Inc. through its EU region, under a data processing agreement. Open and click tracking is switched off. To protect the form from abuse, your IP address is kept briefly in the server's memory to limit repeated attempts; it is never stored.
You can withdraw your consent at any time: every email has an unsubscribe link, which deletes your entry right away, or write to gearganize@coderilla.de. We keep your entry until you unsubscribe.
Language hint
If you close the hint that offers the page in another language, your browser remembers that in its local storage. It never leaves your device.
If you write to us, we use your message and address to answer you (Art. 6(1)(b) GDPR for questions about a purchase, otherwise Art. 6(1)(f) GDPR) and delete them when they are no longer needed.
The app
What stays on your phone
Your rooms, storage places, tools, loans, projects and notes are stored in a database on your phone. Photos (of rooms, tools, receipts and lent items) are saved on your phone and never uploaded, with one exception: the AI photo features described below. Reminders for warranties, check-ups and loans are local notifications; we do not use push notifications. The app contains no ads, no analytics and no crash reporting.
Anonymous user ID
So that purchases, backups and the AI quota work, the app signs in anonymously with Firebase Authentication by Google when it starts. This creates a random user ID; no name or email is involved. Legal basis: providing the app you use (Art. 6(1)(b) GDPR).
Signing in with Apple or Google (optional)
You only need an account for friends and to keep your purchases and AI backup across devices. If you sign in with Apple or Google, Firebase Authentication receives your name and email address from them and links them to your user ID. Legal basis: Art. 6(1)(b) GDPR.
Purchases
Payments are handled by Apple (App Store) or Google (Google Play); we never see your payment details. We use RevenueCat, Inc. (USA) as a processor to manage purchases and subscriptions. It receives your user ID and your purchase history from the store. We store which plans you have (Premium, AI) and when they were checked. Legal basis: Art. 6(1)(b) GDPR.
Backup to iCloud or Google Drive (Premium)
If you turn on the backup, the app saves one file with your inventory (without photos) in your own iCloud or in the app's private folder of your Google Drive. The file goes from your phone to your account directly; we cannot access it. Apple or Google store it under their terms. You can also export the same file yourself at any time.
The AI assistant (AI plan)
If you use the assistant, your question and a summary of your inventory are sent through our server (Google Cloud, Frankfurt) to Anthropic, PBC (USA), which writes the answer with its Claude model as our processor. The summary contains, for up to 400 tools: name, brand, model, where it is, quantity, price, purchase date, notes, and who you lent it to and until when; plus your interests, the project you ask about and, only if you choose, your friends' names and the tools they share. For the photo features (recognising a tool, scanning a drawer) the photo is sent, made smaller. Under Anthropic's commercial terms the data is not used to train its models.
We do not store your questions, answers or photos. We store only how many AI messages you used per month and what they cost, to keep within the plan's limits. Legal basis: Art. 6(1)(b) GDPR.
Backup in the cloud (AI plan)
With the AI plan the app also backs up your inventory (without photos) to Google Cloud Firestore in the EU, at most every six hours, so the assistant can read it and you can restore it. It is deleted 90 days after your AI plan ends, or right away if you delete your data.
Friends (optional, account needed)
To lend tools between friends, we store your display name, your friend code, friend requests and friendships. Tools you mark as shared are copied with their name, category, brand, model and whether they are available; only your friends can see them. Legal basis: Art. 6(1)(b) GDPR.
Protection against misuse
To check that requests come from the real app, the app uses Apple App Attest or Google Play Integrity (Firebase App Check). Legal basis: our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
App updates
The app downloads small updates from the servers of Expo (650 Industries, Inc., USA). This necessarily transmits your IP address and technical details of the app and device. Legal basis: Art. 6(1)(f) GDPR.
Deleting your data
In the app, Settings → Account & friends → Delete my account deletes everything we store about you: backup, shared tools, AI usage, plans, profile, friend code, friendships and requests, your purchase record at RevenueCat and your account. Data on your phone stays until you delete the app. Our database backups are kept for 14 days and then deleted too.
Where the data is processed
Our database and server run in the EU (Google Cloud, Frankfurt and the EU multi-region). Google, RevenueCat, Anthropic, Mailgun and Expo are companies in or connected to the USA. Where data reaches the USA, the transfer is based on the EU-US Data Privacy Framework if the provider is certified, otherwise on the EU standard contractual clauses (Art. 46(2)(c) GDPR).
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw a consent at any time with effect for the future. Write to contact@coderilla.de.
You can also complain to a data protection authority, for example ours: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
We do not make automated decisions about you that have legal or similarly significant effects.
Changes
When the app or the website changes how data is used, we update this policy. The date at the top shows the current version.