Privacy Policy

1. Scope and contact

Dexpat helps expats in Germany interact through community posts, messaging, listings, guides and adviser profiles. For privacy requests, contact contact@sancak.app.

2. Information we collect

• Account data: name, username, email address, protected authentication data and Apple/Google account identifiers.
• Profile data: profile photo, city or district, date of birth, occupation, bio, languages, education and optional social links.
• User content: posts, comments, listings, photos, messages, reports and blocking preferences.
• Purchase data: subscription product and entitlement status. We do not process or store your full payment card details.
• Technical data: device and app version, session and security logs, IP address and error/performance diagnostics.
• Notification data: in-app notifications, read status, notification preferences and, if push notifications are enabled, a device notification token linked to your account and the device platform (iOS/Android).

3. Why we use information

We use data to create and protect your account, provide app features, deliver content and messages, verify subscription entitlements, prevent abuse, troubleshoot issues and comply with legal obligations.

Our legal bases include performing our contract with you, our legitimate interests, compliance with legal duties and your consent where required.

Notifications

We store account-linked in-app notifications about messages, comments, likes and moderation actions. If you enable push notifications, we request the operating system permission and link your device token to your account. To deliver a notification, we send the token and notification title and text through Firebase Cloud Messaging (Google); we do not include the full message content in the notification text. Notifications may include a username or information about a moderation outcome.

Push notifications are optional; you can use the app without granting permission. You can change notification preferences in Profile > Notification Settings in the app and the system permission in your device settings. When you sign out, we remove the device token associated with that account. You can also clear in-app notifications in bulk.

4. Providers and transfers

Data may be shared as necessary with cloud hosting, database and storage providers and with authentication, payment and subscription infrastructure providers. These may include Apple, Google and RevenueCat. We may also disclose information where required by law or to protect rights and safety.

When push notifications are enabled, we use Firebase Cloud Messaging to deliver notifications to your device.

Some providers may operate outside the European Economic Area. Where applicable, we use safeguards required by data protection law.

5. Retention and security

We keep information while needed to provide the service, while your account remains open or as required by law. After account deletion, data is deleted or anonymised; limited security logs, backups and legally required records may remain for a limited period.

We apply technical and organisational safeguards, although no internet transmission can be guaranteed absolutely secure.

6. Information visible to the community

Information you place on your profile or in community areas may be visible to other users. Do not share sensitive information that you do not want others to see.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or objection, portability, or withdraw consent. You may also complain to a competent data protection authority.

You can delete your account in the app's account settings or follow the steps on our account deletion page.

8. Children's privacy

Dexpat is not intended for anyone under 18. If we learn that we collected such data, we will take steps to delete it.

9. Changes

We may update this policy as the service or legal requirements change. Material updates will be communicated in the app or on this page.