App Privacy Policy
Last updated: August 2026 · applies to the "urbanhive" mobile app (iOS & Android)
1. Controller
urbanhive Farming Solutions UG (haftungsbeschränkt)
represented by its managing director Jonas Hülskötter
Wallgraben 5, 48356 Nordwalde, Germany
Email: info@urbanhive.de
2. Overview: What data does the app process?
| Area | Data | Purpose | Legal basis |
|---|---|---|---|
| User account | Email, name, password hash (Firebase Authentication) | Registration, login, account management | Art. 6(1)(b) GDPR |
| Farm & plants | Connected farms, plant slots, harvests, settings (e.g. eco mode), photos of your plants | Core functionality: controlling and documenting your farm | Art. 6(1)(b) GDPR |
| App usage | Pseudonymised usage statistics (Google Analytics for Firebase) | Improving the app | Art. 6(1)(f) GDPR (legitimate interest in improving the app) |
| Stability | Crash reports (Crashlytics), performance data (Firebase Performance) | Bug fixing, stability | Art. 6(1)(f) GDPR |
| Push notifications | Device token (Firebase Cloud Messaging) | Notifications (e.g. care reminders, order status) | Art. 6(1)(a) GDPR (system dialog) |
| In-app shop | Cart/product requests via the Shopify Storefront API | Displaying and purchasing in the integrated shop | Art. 6(1)(b) GDPR |
| Support | Account email and name, subject and message, selected category, attached files (e.g. photos or videos) | Handling your support requests | Art. 6(1)(b) GDPR |
3. User account (Firebase Authentication)
We use Firebase Authentication (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) for registration. Your email address and login credentials are processed. Data may be transferred to the USA; Google relies on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
4. Farm connection & device features (permissions)
The app requests permissions strictly on a per-feature basis:
| Permission | Used for |
|---|---|
| Bluetooth & local network | Pairing and controlling your farm on your home network |
| Camera & photos | Taking/saving photos of your plants (e.g. growth documentation) |
| Location (while in use) | Required solely for Bluetooth scanning and checking your farm's reachability on your Wi-Fi — no location tracking for any other purpose |
All other app features remain available without these permissions.
5. App backend
Your account, farm and planting data are processed on our servers (Google Cloud, hosted in the EU).
6. Analytics, stability and push (Google Firebase)
Google Analytics for Firebase
We use Google Analytics for Firebase to understand how the app is used and to improve it. This processes pseudonymised events (e.g. features used, device type, app version) and device identifiers. Analytics data is generally deleted after 14 months.
Crashlytics & Performance Monitoring
If the app crashes, crash reports (device model, OS version, stack trace) are transmitted so we can fix bugs.
Push notifications (Firebase Cloud Messaging)
After you consent in the system dialog, your device receives a push token. You can disable notifications at any time in your system settings.
If you open one of our push notifications, we record for your account which message you opened and when, to assess how relevant our notifications are (Art. 6(1)(f) GDPR). These records are deleted after 12 months at the latest, and immediately with your account. If you make a purchase in the in-app shop within 48 hours of opening a message, the message identifier is attached to the order to measure the message's success.
7. In-app shop (Shopify)
The shop area of the app retrieves products and carts via the API of our shop system (Shopify International Ltd., Dublin, Ireland). If you complete a purchase, our shop's privacy policy and terms of service apply.
When you are signed in, the app also shows your orders and their status; this data comes from our shop system.
8. Support & help centre
The help articles in the app are loaded from our servers; beyond the technical retrieval, no further personal data is processed. If you contact us via the support area, we process your account email address and name, subject and message, the selected category and any files you attach (e.g. photos or videos of your plants) in order to handle your request (Art. 6(1)(b) GDPR).
Support requests and attachments are stored on our servers in the EU (Google Cloud); attachments are kept in access-protected storage and can only be retrieved via short-lived links tied to your account. We notify you of replies in the app and — if enabled — via push notification.
9. Retention & account deletion
We store your data for as long as your account exists. You can delete your account directly in the app (Profile → Settings); your account and farm data are then deleted immediately. Statutory retention obligations for shop purchases remain unaffected.
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority. Please contact us at the address above.