Privacy Policy

Privacy Policy

Effective date (start of validity): July 8, 2026

1. Controller

The Rohns UG (haftungsbeschränkt) – ManeMap, Bührenerstrasse 15B, 26670 Uplengen, Germany. Phone: +49 177 4957900. Email: info@manemap.app. Represented by the Managing Directors: Marco Rohns and Laura Rohns

Contact for privacy inquiries and data subject rights: info@manemap.app

2. Subject Matter of this Privacy Notice

This privacy policy provides information in accordance with Art. 13/14 GDPR on the processing of personal data within the ManeMap app as well as on our website.

3. What Data We Process and for What Purposes (Purposes & Legal Bases)

3.1 Account & Core Service Processed data: Name (or alias), email address, login/auth data, language, app settings. Purposes: Account creation, authentication, provision of app features, security. Legal bases: Art. 6 (1) (b) GDPR (contractual performance), Art. 6 (1) (f) GDPR (security/prevention of misuse).

3.2 Horse Profiles, Training, and Routine Data Processed data: Horse profile (e.g., name, age), training and care notes, appointments/reminders, and any photos you upload. Purposes: Provision of organizational features (profiles, logs, calendar, evaluations), user convenience. Legal basis: Art. 6 (1) (b) GDPR (contractual performance).

3.3 "Milo" / AI-assisted Insights Processed data: Your text inputs, selected context data (horse profile). Purposes: Generation of custom suggested answers. Service provider: We use Google's API interfaces (Google Gemini API, Google Ireland Ltd.). Privacy disclaimer: We use configurations that ensure your inputs are not used to train Google's AI models. Legal basis: Art. 6 (1) (b) GDPR (contractual performance to provide the AI features).

3.4 Location (optional, via permission) Processed data: Device location (only if you consent) or regional location for weather queries. Purposes: Local weather and seasonal tips (e.g., blanket warnings, pasture conditions). Legal basis: Art. 6 (1) (a) GDPR (consent). You can withdraw your consent at any time via your device/app settings.

3.5 Push Notifications (Reminders) Processed data: Device token (push token), reminder content/metadata (e.g., time, type). Purposes: Delivery of reminders configured by you in the app (such as farrier visits or deworming schedules). Legal basis: Art. 6 (1) (b) GDPR (contractual performance).

3.6 Analytics (App Analytics – PostHog) Processed data: Pseudonymized usage and event data (e.g., buttons clicked, screens viewed, actions like "horse profile created" or "paywall viewed", completed onboarding steps), a pseudonymized user ID, device type, operating system, and app version. Service provider/Processor: PostHog. Processing takes place on servers within the European Union (eu.i.posthog.com). We do not transmit real names, horse health data, or payment details to PostHog. This data is not used for advertising purposes, nor is it shared with advertising networks or data brokers; no advertising ID (IDFA) is used. Purposes: Improving user experience (UX), bug detection, and product development. Legal basis: Art. 6 (1) (a) GDPR (consent). Analytics are disabled by default and only become active with your consent in the app's permission dialog; you can opt out at any time in the app settings.

3.7 Camera and Photo Library Access Processed data: Photos that you actively select or take. Purposes: Saving photos to your horse's profile or in care notes. Legal basis: Art. 6 (1) (a) GDPR (consent by confirming the system dialog upon first access). Access only takes place locally on the device or to upload to our servers when you save the photo.

3.8 Website: Technically Necessary Data When visiting our website, server-side technically required data may arise (e.g., IP address, date and time, user agent, referrer) to deliver the website securely and correctly. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in security/operations) or Art. 6 (1) (b) GDPR to the extent necessary to provide the service.

4. Recipients / Service Providers (Art. 28 GDPR)

We use the following service providers as processors:

• Supabase (EU Region): Database/Storage/Backend (hosting and processing of your app data).

• Google (Gemini API): Processing of inputs to generate AI recommendations ("Milo").

• PostHog (EU Region, eu.i.posthog.com): Pseudonymized usage analysis (only with your consent).

Note: App Store providers (Apple/Google) process payment and billing data under their own responsibility as part of store purchases.

5. International Data Transfers

To the extent that service providers process data outside the EEA, this is done on the basis of appropriate safeguards (such as Standard Contractual Clauses) or an adequacy decision where applicable.

6. Data Retention

We retain personal data only as long as necessary for the intended purposes or as required by statutory retention periods. Business records may be kept for up to 10 years in accordance with German commercial and tax law (HGB § 257; AO § 147).

7. Your Rights (Data Subject Rights)

Subject to statutory requirements, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), as well as a right to object to certain processing operations (Art. 21 GDPR). If processing is based on your consent, you can withdraw it at any time with future effect. To exercise your rights, simply send an informal message to info@manemap.app. Independent of this, you also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

8. Account Deletion

Automatic deletion via the app is currently not supported. To irreversibly delete your account and all stored data, please send an informal email to info@manemap.app. We will process your deletion request promptly and send you a confirmation.

9. Security

We implement appropriate technical and organizational measures (Art. 32 GDPR), including transport encryption, access restrictions, and (per configuration) EU-based hosting.

10. Children

ManeMap is not intended for children under 16 years of age. Users aged 16 to 17 should only use the service with the consent of their parent or legal guardian.

11. Veterinary and Medical Disclaimer

ManeMap provides organizational tools and general educational insights. Content—including AI-generated answers ("Milo")—does not constitute veterinary advice and is not a substitute for professional diagnosis or treatment. In case of acute symptoms or emergencies, please contact your veterinarian or equine emergency service immediately.

12. Changes

We may update this privacy policy from time to time and will update the effective date accordingly.