Privacy policy

Last updated: October 2026 · In case of doubt, the German version applies.

Wandelo works without an account. Your iPhone itself checks whether you've been to a place – your location is not sent to us. This page explains exactly which data is processed anyway, why, and for how long.

1. Controller

Patrick Reum
Lyoner Straße 52
60528 Frankfurt am Main
Germany

Email: info@baumwollpyjama.de

2. Scope

This policy applies to the Wandelo app (iOS; Android to follow) and the website wandelo.baumwollpyjama.de. Sections that only concern one of them are marked: App Website

3. Location and automatic unlocking App

To unlock a place even when the app is closed, Wandelo asks for access to your location (“While Using the App” and “Always”). Unlocking happens in two stages, both entirely on your device:

• Regions: for places near you, the app registers areas of at least 100 metres with iOS. iOS wakes the app when you enter one of these areas. The operating system handles this monitoring; it does not need constant GPS.
• Precise location: only then does the app determine your exact position until it is clear whether you are really at the place (within about 50 metres), for about 10 minutes at most. Precise location then stops.

Only the result is stored: which place was unlocked and when. Your positions and routes are neither stored nor sent to us or anyone else. If you have granted access, the map in the app shows your location.

• Legal basis: your consent via the iOS location permission (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
• Withdrawal: at any time in the iOS settings under Privacy › Location Services › Wandelo. Without “Always”, the app only unlocks places while it is open.

4. Notifications App

If you allow it, Wandelo shows notifications – for example when a place has been unlocked, for the Thursday trip tip or the gift of the week. The app creates these notifications on your device. There is no push server; no data is sent to us or third parties for this.

• Legal basis: your consent via the iOS notification permission (Art. 6 (1) (a) GDPR).
• Withdrawal: in the iOS settings under Notifications › Wandelo; you can also switch off the Thursday tip in the app.

5. Loading content App

The app loads places, texts, facts, card artwork, suggested routes and 3D coins from our server (Supabase, see section 11) and caches them so they are available offline. Only technically necessary connection data is transferred, mainly your device's IP address and the time. Your location, your collection and a device ID are not transferred.

• Purpose: providing and updating content without an app update.
• Legal basis: Art. 6 (1) (b) GDPR (providing the app) and (f) GDPR (secure, stable operation).
• Retention: connection logs at the service provider usually for a few days, 30 days at most.

6. Transfer code App

A transfer code lets you take your collection to a new device without an account. Only if you create a code yourself does the app send a copy of your app data to our server:

• your unlocked places with date and time,
• saved routes and your current route,
• your showcase, collected enamel colours and gifts, the date you started,
• the name you entered in the app (if any),
• a random device ID generated by the app on first launch (it contains no information about you or your device),
• the IP address from which the code is created or redeemed – only to prevent abuse (limiting the number of codes and failed attempts).

The code is valid for 24 hours and can only be redeemed once. The data is deleted immediately when the code is redeemed, and unredeemed codes at the latest when they expire. Records of failed attempts are deleted after one hour.

• Legal basis: Art. 6 (1) (b) GDPR (the transfer you requested); for the IP address Art. 6 (1) (f) GDPR (preventing abuse).

7. Buying the full version App

You buy the full version through the App Store. Apple handles payment and processing; we receive neither payment details nor your Apple ID. The app checks the purchase status directly with Apple and stores it on your device. Apple's privacy policy applies.

8. Map and navigation App

• Map: the map in the app uses Apple Maps. To display it, your device loads map tiles from Apple; Apple processes the IP address and the displayed area according to its own privacy policy.
• “Let's go”: when you start a route with “Let's go”, the app opens Google Maps with the coordinates of your stops. From then on, Google's privacy policy applies. No data is sent to Google unless you tap the button.
• Sharing: when you share a card or a transfer code, the app passes a short text through the iOS share sheet to the app you choose. We don't learn about it.

9. Data on your device App

Your collection (unlocked places with time), coins, badges, routes, settings, an optional name and the random device ID are stored only on your device. They are not sent to us – unless you create a transfer code (section 6). If you delete the app, this data is gone; we cannot restore it.

10. Website Website

When you visit wandelo.baumwollpyjama.de, our hosting provider Cloudflare processes technically necessary data (IP address, time, page requested, browser identifier) to deliver the site and protect it against attacks. The website sets no cookies, uses no analytics, tracking or advertising services and loads no fonts or scripts from third-party servers. Nothing is stored in your browser.

• Legal basis: Art. 6 (1) (f) GDPR (secure, stable delivery of the website).
• Links: links to the App Store or to Lunedo lead to services that have their own privacy policies.

11. Service providers and third countries

Supabase (server for content and transfer codes) App

Supabase Inc., 970 Toa Payoh North, #07-04, Singapore 318992 – supabase.com/privacy. The data is stored on servers in the EU (Frankfurt am Main). Supabase processes it on our behalf (Art. 28 GDPR); EU standard contractual clauses apply to any access from third countries.

Cloudflare (website hosting) Website

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA – cloudflare.com/privacypolicy. Cloudflare processes the data on our behalf (Art. 28 GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or EU standard contractual clauses.

Apple (App Store, maps) App

Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland. Apple acts as an independent controller for the App Store, purchases and Apple Maps.

12. What we don't collect

• no accounts, email addresses or phone numbers
• no location history or movement profiles on our servers
• no advertising ID (IDFA), no analytics, crash reporting or tracking services
• no contacts, photos or other device data
• no payment details

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)) – with Wandelo usually directly in the iOS settings.

Because we don't keep accounts, we can only match data to you while a transfer code exists. To do so, write to info@baumwollpyjama.de and include the code.

14. Security

All connections between the app, the website and the servers are encrypted (TLS). Transfer codes are twelve characters long, randomly generated and protected against mass guessing.

15. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, for example the authority responsible for us:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden, Germany
datenschutz.hessen.de

16. Children

Wandelo is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has sent us data, please write to info@baumwollpyjama.de.

17. Changes

If the app, the website or the law changes, we will update this policy. You can always find the current version at this address; the date at the top shows when it was last updated.