Privacy Policy

Last updated: 4 November 2026 · Deutsch. This is a translation; the German version is binding.

This policy describes what data the Active Club app (iPhone, Apple Watch, Android, Wear OS) and this website process, why and for how long. We only collect what the features need: no ads, no tracking, no analytics tools, no health or location data.

1. Controller

instingo UG (haftungsbeschränkt)
Bergstr. 12, 82131 Gauting, Germany
Managing director: Andreas Lenge
Email: info@instingo.de · Phone: +49 89 89 79 67 42

For privacy questions and to exercise your rights, write to info@instingo.de.

2. What Active Club is and who sees what

Active Club is where people arrange to do things together. Content always belongs to a community, a company or a group, which you join with an invite or with your work email. What you share there (name, profile picture, events, RSVPs, photos, chat messages) is visible to the members of that community or club. An event someone explicitly shares "by link" shows its title, time, place, community name and number of RSVPs on this website without signing in. Links to other events and to clubs show none of this without the app.

3. Data in the app

Account and sign-in

You sign in with your email address and a one-time code we send you by email. We store your email address, your display name and, if you upload one, your profile picture. The code is valid for 10 minutes and is stored only as a hash. If you join a company community with your work email, we store that address with the membership as proof of belonging.
Legal basis: Art. 6(1)(b) GDPR (providing the app you want to use).

Content you create

Events (title, description, place as text, time, spot limit), RSVPs, clubs and club pictures, event photos, chat messages and comments. We store them so that the other members can see them.
Legal basis: Art. 6(1)(b) GDPR.

Reporting and blocking

When you report content or people, we store the report with its reason and the content concerned in order to review it. We store blocks so that the blocked person's content stays hidden from you.
Legal basis: Art. 6(1)(b) and (f) GDPR (our legitimate interest in a safe, respectful platform).

Notifications (push)

If you allow notifications, we store your device's push token, its platform and the app language to send you notifications about events, RSVPs and chats. You choose which kinds you get in your profile. We remove the token when you sign out or delete your account.
Legal basis: Art. 6(1)(a) GDPR (your permission in the system dialog, which you can withdraw in your device settings at any time) and Art. 6(1)(b) GDPR.

Technical data while running the service

With every request to our servers we process technically necessary data such as IP address, time, requested address and app version. We use the IP address only briefly to limit abuse (for example too many sign-in attempts); it is not stored in the database. We delete server logs after 14 days.
Legal basis: Art. 6(1)(f) GDPR (secure and stable operation).

Permissions on your device

• Camera: only to scan invite QR codes. The code is read on the device; images never leave it.
• Photos: you pick pictures through the system picker. We only receive the pictures you upload.
• Calendar: write-only, when you add an event to your calendar. We never read your calendar.
• Notifications: see above.

Watch apps

The Apple Watch and Wear OS apps get their sign-in from the phone and show your upcoming events. They collect no additional data, in particular no health or activity data.

4. Recipients and service providers

We do not sell data or pass it on for advertising. We use the following service providers, each under a data processing agreement (Art. 28 GDPR):

• Hetzner Online GmbH, Gunzenhausen (Germany): servers, database, stored pictures, the chat service and encrypted backups. The data is kept in data centres in the EU.
• Mailgun Technologies, Inc. (EU region): sending the emails with sign-in codes, which involves your email address and the email's content.
• Google Ireland Limited (Firebase Cloud Messaging): delivering notifications. It processes the push token, an installation ID of the app and the device and app version. On iPhone, Apple delivers notifications through the Apple Push Notification service.
• Google (ML Kit), Android only: the QR scanner runs on the device. The library sends diagnostic data to Google (device model, OS version, app version, timings and error codes, and an installation ID), never images.

Mailgun and Google may also process data in the USA. This is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the providers are certified, and otherwise on EU standard contractual clauses (Art. 46(2)(c) GDPR).

5. Retention and deletion

• We keep your account and content until you delete your account or a community or piece of content is deleted.
• You can delete your account at any time in the app under Profile → Delete account or at activeclub.instingo.de/delete-account. We immediately delete your profile, profile picture, photos, future RSVPs, memberships, blocks and push tokens, and cancel your future events. Your chat messages stay in the thread without their text, as "Deleted account", so conversations still make sense.
• We delete server logs after 14 days.
• We keep encrypted database backups for up to 12 months (daily for 14 days, weekly for 8 weeks, monthly for 12 months). Deleted data disappears from backups as each backup expires. We only use backups to restore after an outage.
• We keep reports as long as needed to handle them and to protect against repeated abuse.

6. This website

When you visit activeclub.instingo.de we process the technically necessary data described above under "Technical data". The account deletion page sets one technically necessary cookie to protect the form (CSRF). There are no analytics or advertising cookies and no embedded third-party services.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. Write to info@instingo.de.

You can also lodge a complaint with a data protection supervisory authority. Ours is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

8. Minimum age

Active Club is meant for people aged 16 and over.

9. Changes

When the app or the services we use change, we update this policy. We announce significant changes in the app.