Privacy Policy

This is a convenience translation. The German version is the legally binding one.

1. Controller

Dennis Wiredu
Keferstraße 12
80802 München
Germany

2. Core principle: local data storage (offline-first)

Tabiyume is designed as an offline-first application. Your travel data (pins, dates, budgets, images, packing list, bookings) is by default stored exclusively locally in your browser (IndexedDB and localStorage) and is not transmitted to our servers. Data is only transmitted to third parties when you actively use features that require it (e.g. sharing, collaboration, cloud sync, account creation).

3. Hosting

This website is hosted on Microsoft Azure (Azure Static Web Apps), provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. When you access the website, Microsoft processes technically necessary data such as IP address, date and time of access, browser type and referrer URL (server logs). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation).

4. Firebase (Google)

For accounts, real-time collaboration, share links and the optional cloud sync we use Google Firebase (Authentication and Realtime Database), provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The Realtime Database is operated in the region europe-west1 (Belgium).

Anonymous authentication: For features such as collaboration an anonymous user ID is generated automatically (no personal details required).
Account (optional): When you register via e-mail or Google login, your e-mail address and, where applicable, display name are processed.
Collaboration & share links: Travel data you actively share is stored in the Realtime Database so that other people with the link can access it.
Cloud sync (Pro): On request, your travel data (excluding images and file attachments) is synchronised with your account.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract or provision of the features you requested).

5. Payment processing (Stripe)

For the purchase of Tabiyume Pro we use Stripe, provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. During the payment process your payment data is processed directly by Stripe; we ourselves do not receive or store any credit card data. The legal basis is Art. 6 (1) (b) GDPR. Further information: stripe.com/privacy.

6. E-mail reminders (ticket alerts)

If you use the optional reminder feature for time-critical bookings/tickets, we store the e-mail address you provide and the details required for the reminder in order to send you a reminder e-mail at the requested time. The scheduled dispatch is triggered by an automation instance (n8n) operated by us, which runs as a container on Microsoft Azure (provider see section 3). The e-mail is delivered via STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, where the domain tabiyume.de is also registered. The legal basis is Art. 6 (1) (b) GDPR (provision of the feature you requested). You can remove configured reminders in the app at any time.

7. External services used by specific features

Individual features retrieve data from third-party providers. For technical reasons your IP address is transmitted to the respective provider. The legal basis is Art. 6 (1) (b) or (f) GDPR.

OpenFreeMap – map tiles for the interactive map (tiles.openfreemap.org).
Nominatim / OpenStreetMap – place search and address resolution (nominatim.openstreetmap.org). Your search terms are transmitted.
Overpass API – nearby search ("Nearby Finder", e.g. konbini, ATM). Map coordinates are transmitted.
MET Norway – weather forecast for travel days (api.met.no, Norwegian Meteorological Institute; weather data licensed under CC BY 4.0). Map coordinates are transmitted.
jsDelivr – retrieval of current exchange rates (cdn.jsdelivr.net).
Google Fonts – fonts are loaded from Google servers (fonts.googleapis.com, fonts.gstatic.com).

8. Cookies and local storage

Tabiyume does not set any tracking cookies and does not perform any reach measurement or usage analytics. Browser storage (IndexedDB, localStorage) is used exclusively for the functioning of the app (your travel data, settings such as theme and language). This data remains on your device and can be deleted by you at any time via your browser settings.

9. Your rights

Under the GDPR you have the following rights:

Access to the data processed (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Complaint to a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, simply send an e-mail to support@tabiyume.de.

10. Changes to this privacy policy

We will update this privacy policy whenever the app's feature set or the legal situation changes. Last updated: 2026-07-01