Give&Take privacy – Android
Updated: 20 October 2026
These notices cover the native Android app, package de.rainbowdata.gebenundnehmen, reviewed source version 1.3. The web app and community are separate services.
This translation is for convenience. The German version is the reference text. Deutsch
1. Controller
Andreas Oberacker, Friedrichstr. 71, 76706 Dettenheim, Germany. Email: mobileapp@rainbow-data.de. Website: mobileapps.rainbow-data.de.
2. Purpose and stored information
The app records items and money lent or borrowed. It stores the names and contact details you enter, item details, categories, amounts and currencies, photos, notes, loan and return dates, reminder and archive status, settings and random community-link identifiers. Only enter other people's information where necessary and lawful.
3. Local processing
Private records are stored in a local Room/SQLite database and private app files. The provider cannot access them. The reviewed app requests no internet permission and does not itself make internet connections. It has no automatic private-database upload and its reviewed dependencies contain no advertising, tracking or analytics SDKs. No account is needed for private records.
4. Selected contacts
Contact import requests Android's READ_CONTACTS permission. After you choose a contact, the app reads that contact's name, phone numbers, email and postal addresses. You can select values where several exist. Saving the form stores the chosen details locally. Your address book is not uploaded. You can revoke permission in Android; this does not delete previously saved details. Manual entry remains available.
5. Photos and camera
You choose existing images using Android's file/media selector. Selected files are copied into the private photo folder. New pictures are taken by an external camera app given temporary access to the target file. The app requests no CAMERA permission or general storage/location permission. Imported images may retain metadata such as capture time or location; import does not specifically strip metadata. The Android app does not upload the pictures.
6. Local reminders
Android's alarm service schedules local notifications. Android 13 and later require POST_NOTIFICATIONS permission. RECEIVE_BOOT_COMPLETED permits rescheduling after restart. Notifications can include a person's name, item and return date. They are marked private, but lock-screen visibility depends on Android settings. Native reminders do not use an internet push service.
7. Optional community link
The community at geben-und-nehmen.rainbow-data.de opens in an external browser after a notice. Transferring a loan requires your confirmation. The link's # fragment contains a random reference, category, lender/borrower role and language. The browser exposes these to the website, which may send them to its server after further actions. No names, contact details, item titles, photos, notes or money amounts are passed by the app. The reference may be linked to a community record/account and is not anonymous. Money records are excluded. Separate web notices apply to the site, account, publications and maps.
8. Retention and deletion
Local data remains until removed. Returning or archiving does not delete a record. Deleting a loan removes it and cleans up unneeded item records and unused private photos. Person records remain available for future loans. Clear the app's storage in Android or uninstall it to remove all local app data. Original gallery pictures and copies saved elsewhere remain unaffected.
9. Backup and protection
The reviewed app disables Android backup and excludes its data from cloud backup and Android device transfer. This Android version has no own export/backup feature. The provider cannot restore deleted or lost data. The app uses private Android storage without additional database encryption or an app-specific PIN in the reviewed code. Use your device's screen lock and protection features.
10. Contacting the provider
If you email support, the sender address, message and attachments are processed through the email providers to answer you. The basis is Article 6(1)(b) GDPR for contract-related enquiries, otherwise the legitimate interest in answering enquiries under Article 6(1)(f). Messages are kept while needed for the enquiry or necessary evidence, subject to statutory retention duties. Do not send unnecessary private loan lists or other people's contact details.
11. Legal bases and rights
Necessary local storage/access for functions you expressly request follows section 25(2)(2) TDDDG; this gives the provider no general access to local data. Where the provider processes personal data, the stated GDPR bases apply. Subject to legal conditions, you have rights to access, rectification, erasure, restriction, portability and objection, and may withdraw consent prospectively. The provider cannot access purely local records. You may complain to a supervisory authority, particularly the Baden-Württemberg data-protection authority: www.baden-wuerttemberg.datenschutz.de.
12. Distribution and changes
Google processes information under its own privacy notices when you obtain or update the app through Google Play. That is separate from the app's local processing. These notices are updated when functions or processing change.
Give&Take privacy – web app and community