Family Fleet – Privacy Policy

1. Introduction

This Privacy Policy explains how the Family Fleet App ("we", "us", "the App") collects, processes and protects users' personal data.

As a company based in Germany, we comply with:

• EU General Data Protection Regulation (GDPR)
• German Federal Data Protection Act (BDSG)
• Telecommunications-Telemedia Data Protection Act (TTDSG)

Family Fleet is an app for managing vehicle bookings for families and organizations. The App allows users to manage vehicles, create bookings and coordinate within an organization.

2. Data Controller

The data controller within the meaning of the GDPR is:

axxtas GmbH
Augustenweg 5
82140 Olching
Deutschland

E-Mail: hello@axxtas.com
Telefon: +49 8142 44 87 973

For users from the EU/EEA, axxtas GmbH is the controller under the GDPR.

3. What Data We Collect

We only process personal data that is necessary to provide theFamily Fleet app, to manage your account and organization membership, to handle bookings, and to fulfil legal or contractual obligations.

This includes in particular your contact details (such as email address), basic account and organization information, information about vehicles and bookings that you create or participate in, and identifiers that are required to manage any subscriptions or payments via our payment service provider. We do not process more personal data than is necessary for these purposes.

4. Legal Basis for Data Processing (GDPR)

We process data on the following legal bases, in particular under Art. 6 GDPR:

• Account Creation and Authentication – Art. 6(1)(b) GDPR (contract performance)
• Email Verification (verification emails for sign-up / account authentication) – Art. 6(1)(b) GDPR (contract performance)
• Participation in Organizations and Booking Management – Art. 6(1)(b) GDPR (contract performance)
• Security and Fraud Prevention – Art. 6(1)(f) GDPR (legitimate interest)
• Subscription Management and Payment Processing – Art. 6(1)(b) GDPR (contract performance)
• Fulfillment of Deletion Requests – Art. 6(1)(c) GDPR (legal obligation)

We do not use personal data for:

• advertising
• profiling
• automated decision-making
• cross-app tracking

5. Data Sharing & Recipients

We only share user data when necessary for core functionality.

5.1. Data Sharing with Other Users

Only within the App and only for organizations the user participates in, the following information may be visible:

• Display Name
• Email Address (visible to organization members)
• Bookings (Date, Time, Vehicle)

5.2. Third-Party Service Providers

Firebase (Google LLC)

Used for:

• Authentication
• Database (Firestore)
• Cloud Functions

Firebase is Data Privacy Framework (DPF) certified and offers EU-compliant data processing terms. Data is preferably stored in the EU region (europe-west3).

Firebase Privacy Policy: https://firebase.google.com/support/privacy

Postmark

Used for sending verification and other transactional emails (including email delivery and related security measures).

The legal basis is Art. 6(1)(b) GDPR (contract performance) for email verification and Art. 6(1)(f) GDPR (legitimate interest) for protecting our services against abuse.

Postmark Privacy Policy: https://postmarkapp.com/privacy-policy

Postmark DPA: https://postmarkapp.com/dpa

RevenueCat

Used for subscription and entitlement management. Purchases are processed by the respective app stores (for example, Apple App tore or Google Play Store). We use RevenueCat to process personal data on the basis of Art. 6(1)(b) GDPR (contract performance). The DPA (data processing agreement) can be found here: https://www.revenuecat.com/dpa. More about the GDPR compliance can be found here: https://www.revenuecat.com/gdpr.

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

AdMob (Google LLC)

Where applicable, we use Google AdMob to display in-app advertisements. In the EU/EEA, ads are shown on the basis of your consent in accordance with Art. 6(1)(a) GDPR and the TTDSG. You can withdraw your consent at any time via the platform's consent dialog or your device settings.

AdMob may process device identifiers and rough location data to deliver and measure ads. No personalized advertising is shown without your prior consent.

Further information can be found in Google's Privacy Policy and AdMob documentation: https://policies.google.com/privacy.

We do not share data with:

• social media companies
• data brokers

6. International Data Transfers

Data may be stored or processed in:

• EU (preferred Firestore region: Frankfurt, europe-west3)
• USA (for Firebase services that may use US servers, RevenueCat services that may use US servers, AdMob services that may use US servers)

Transfers outside the EU are based on the Data Privacy Framework (EU–US DPF) when the recipient takes part in it and the Standard Contractual Clauses (SCCs) otherwise.

7. Storage Duration

We store personal data only for as long as necessary for the respective purposes described in this Privacy Policy or as required by law. When data is no longer needed for these purposes, it is deleted or anonymized.

Users can request complete deletion at any time at hello@axxtas.com.

8. Your Rights (GDPR)

Users in the EU have the following rights:

• Right of Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Object (Art. 21 GDPR)
• Right not to be Subject to Automated Decision-Making (Art. 22 GDPR)

To exercise your rights, please contact us by email at hello@axxtas.com.

9. Children's Privacy

Family Fleet is intended only for adults. The service is not intended for, and must not be used by, persons under 18 years of age.

We do not knowingly create or maintain accounts for users under 18. If you believe a person under 18 has created an account or is otherwise using the App, please contact us at hello@axxtas.com so that we can delete the account and any associated data.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as needed.

Updates will be published within the App or on the associated website.

11. Contact

For privacy concerns, requests or questions, please contact us:

axxtas GmbH
Augustenweg 5
82140 Olching
Germany

Email: hello@axxtas.com
Phone: +49 8142 44 87 973

You can also contact your local EU supervisory authority.