Controller under the GDPR:
Markus Bodmann
(software distributed under the "resper" label – not a registered company name)
Kiebitzende 24
21423 Drage, Germany
Email: info@allpacked.de
allPacked works fully without an account and without an internet connection. As long as you do not create an account, all content (trips, packing lists, names of travel companions, locations, notes, photo attachments) stays only on your device. In that case, no data is transmitted to us or to third parties.
We only process personal data once you sign in or use synchronization, sharing or purchases.
To use the app across devices and to share, you can create an account – via a
one-time email code, Sign in with Apple,
Sign in with Google or anonymously.
Data processed: email address (for email sign-in), a pseudonymous user ID and
sign-in metadata. If you use Apple/Google, we receive an identifier and
possibly your email address from those providers.
Purpose: providing the account and synchronization.
Legal basis: Art. 6(1)(b) GDPR (contract).
With an account, your content (trips, packing lists, names of travel
companions, packing locations, notes, photo attachments) is stored on our
server and synchronized between your devices and – if you share a trip – with
the people you invite. Technology: self-hosted Supabase (database,
authentication, file storage) and PowerSync (synchronization).
Legal basis: Art. 6(1)(b) GDPR.
Optionally, you can attach photos or files to entries. Access to the camera or gallery happens only upon your action. With an active account, attachments are stored and synchronized as described under b).
Purchases and subscriptions are handled via Google Play Billing;
we use RevenueCat to manage entitlements. Processed data
includes purchase/subscription status, an app user ID and transaction- and
device-related details. Payment data itself is processed by Google, not by us.
Legal basis: Art. 6(1)(b) GDPR. RevenueCat, Inc. (USA) is a recipient of
this data (see section 5).
To send one-time codes we use an email service provider (ALL-INKL.COM / Neue Medien Münnich, Germany), which processes your email address. Legal basis: Art. 6(1)(b) GDPR.
When accessing our servers, technical log data (e.g. IP address, timestamp, requested resource) is generated for security and stability and stored briefly. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
allPacked contains no analytics, tracking or advertising SDKs, no profiling and no automated decision-making.
Depending on your use, the following recipients may be involved:
For recipients in the USA (e.g. Google, Apple, RevenueCat) data may be transferred to a third country. Such transfers are based on appropriate safeguards (in particular EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework where certified). Data processing agreements under Art. 28 GDPR are in place with processors.
Local data remains on your device until you uninstall the app. Account-related data is stored while your account exists and is deleted after account deletion or upon your request, unless statutory retention obligations apply.
You can request deletion of your account and associated data at any time – by email to info@allpacked.de. We will then delete your account-related data within 30 days. For details on what is removed and what may be retained, see Delete account and data.
You have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a data protection supervisory authority (Art. 77). To exercise your rights, contact info@allpacked.de.
allPacked is not directed at children under 16. We do not knowingly collect data from children.
We update this policy when our processing changes. The version published here applies; the date above indicates its status. This English text is a translation; in case of doubt the German version prevails.