Get the app

Privacy Policy

Last updated: 6 October 2026

This policy explains what personal data DramaBuddy processes when you use our mobile app “Drama Buddy” (iOS and Android) and our websites dramabuddy.de and dramabuddy.pl, why we do it, and what rights you have.

1. Who is responsible for your data

DRAMA BUDDY PROSTA SPÓŁKA AKCYJNA
ul. Romualda Traugutta 24/15, 30-549 Kraków, Poland
KRS 0001268227, NIP 6793376541, REGON 545772539
Email: info@dramabuddy.de

We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). We have not appointed a data protection officer; please send any privacy request to info@dramabuddy.de.

2. The app

No account. You can use the app without registering. We do not ask for your name, email address or phone number in the app.

Data stored only on your device. The app stores your chosen city, your interface language, whether you have opened the app before and the status of your subscription on your device. This data is not sent to us. Deleting the app deletes it.

Requests to our servers. To show performances, the app requests data from our server, which is hosted by Amazon Web Services in Frankfurt, Germany. Each request contains your IP address, your interface language and technical information about the app and device. We use this to deliver the content and to keep the service secure, and we keep server logs for up to 30 days. Legal basis: Art. 6(1)(b) GDPR (providing the service) and Art. 6(1)(f) GDPR (security).

Subscriptions. Subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We do not receive your payment details. The app receives a confirmation of your purchase so it can unlock premium features. Apple’s and Google’s privacy policies apply to the payment itself. Legal basis: Art. 6(1)(b) GDPR.

Advertising. The free version shows ads from Google AdMob (Google Ireland Limited). AdMob may process your device’s advertising identifier, IP address and information about your device and how you interact with ads, in order to show, limit and measure ads. Personalised ads are shown only if you have agreed to them; otherwise you see non-personalised ads. Legal basis: Art. 6(1)(a) GDPR (consent) for personalised ads and the related access to your device; Art. 6(1)(f) GDPR for non-personalised ads and fraud prevention.

Measuring our campaigns. We use Adjust (Adjust GmbH, Berlin) and the Meta SDK (Meta Platforms Ireland Limited) to understand which advertising campaigns lead to app installs and how the app is used. These services may process your advertising identifier (where you have allowed it), IP address, device information and app events such as installs and app opens. Legal basis: Art. 6(1)(a) GDPR (consent). On iOS, we only access your advertising identifier if you allow tracking in the App Tracking Transparency prompt. You can change this at any time in your device settings (iOS: Settings › Privacy & Security › Tracking; Android: Settings › Google › Ads).

3. The website

Hosting. Our website is hosted by Cloudflare, Inc. (USA). When you visit it, your IP address, browser details and the pages you open are processed to deliver the site and protect it from attacks. Cloudflare is certified under the EU–US Data Privacy Framework, and we have concluded a data processing agreement with Cloudflare. Legal basis: Art. 6(1)(f) GDPR.

Cookies and similar technologies. Essential cookies are always active because the site does not work without them. Other cookies are used only if you agree in our cookie banner, and you can change your choice at any time via “Cookie settings” at the bottom of every page:

Legal basis: Art. 6(1)(a) GDPR and the applicable national rules on access to your device (e.g. § 25 TDDDG in Germany, Art. 399 of the Polish Electronic Communications Law).

4. Email

If you write to us, we use your email address and message to reply. We keep the correspondence for as long as needed to handle your request, and up to 12 months afterwards, unless statutory retention periods (for example under commercial or tax law) require us to keep it longer. Legal basis: Art. 6(1)(f) GDPR.

5. Who receives your data

We share data only with the service providers named above, who process it on our behalf or as independent controllers: Amazon Web Services (app server hosting), Cloudflare (website hosting), Apple and Google (app stores and payments), Google (AdMob, Analytics, Ads), Adjust, Meta and TikTok. We do not sell your personal data.

6. Transfers outside the EU

Some providers (for example Cloudflare, Google, Meta and TikTok) may process data outside the European Economic Area. Where they do, the transfer is based on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission’s Standard Contractual Clauses.

7. How long we keep data

We keep personal data only as long as necessary for the purposes above: server logs for up to 30 days, correspondence as described in section 4, and data processed on the basis of consent until you withdraw it. Data stored on your device stays there until you delete the app.

8. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time; this does not affect processing before the withdrawal. To exercise your rights, email info@dramabuddy.de.

You can also lodge a complaint with a supervisory authority. Our lead authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland. You may also contact the authority in your own country.

9. Children

DramaBuddy is not intended for children under 16, and we do not knowingly collect their data.

10. Changes

We will update this policy when our app or website changes. The date at the top shows the latest version.