Privacy Policy

Privacy Policy – App

Controller

represented by the managing directors Björn Mathes and Luke Mathes
Phone: +49 40 28 40 17 1
Email: intimacy@welike.com

For questions about data protection, you can reach us at the email address above.

Data processed in the app

To follow. Planned: account and device data, purchase history, reading position.

Reading log and usage analytics

To follow. The app remembers what you have read, in order to explain recommendations and to save your reading position. Usage analytics can be switched off in the app – see Privacy Options.

Recommendations

To follow. Still to be described: which signals feed into the profiling, how the reason under each recommendation comes about, and what happens when usage analytics is switched off.

Processors

To follow. Planned are Google Firebase (hosting, database, authentication; region europe-west3) and RevenueCat (handling of subscriptions). For each service, still to be stated: purpose, legal basis, categories of data, transfers to third countries.

Retention period

To follow.

Your rights

To follow. Still to be named: access, rectification, erasure, restriction, data portability, objection, and the right to lodge a complaint with a supervisory authority.

Deleting your account

To follow. Still to be described: the route inside the app and the address for requests by email.

Privacy Policy – Website

Last updated: 7 September 2026

This Privacy Policy applies to the website intimacy.welike.com. A separate Privacy Policy applies to the Intimacy app (see the “App” section on this page).

1. Controller

represented by its managing directors Björn Mathes and Luke Mathes
Phone: +49 40 28 40 17 1
Email: intimacy@welike.com

For questions about data protection, you can reach us at the email address above.

2. The essentials in brief

This website is purely an information page about the Intimacy app.

• It sets no cookies. The only thing stored on your device is your language choice, and only if you switch the language by hand (section 7).
• It uses no analytics or tracking services and no ad networks.
• It embeds no third-party content – no external fonts, videos, maps or social media elements.
• It has one form – the creator application (section 5). There are no other forms; you can reach us by email.

The only data processed is the data that technically arises when a website is opened (section 3), the data you send us yourself by email (section 4), and the details you enter in the application form (section 5).

3. Visiting the website (hosting and server log data)

Scope. When you open the website, your browser automatically transmits data that is technically necessary to deliver the page: your device’s IP address, the date and time of the request, the page or file requested, the page visited before it (referrer, if your browser transmits it), browser type and version, operating system, the volume of data transferred and the response status.

Hosting provider. The website is provided via Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The content is delivered through a worldwide network of delivery servers (content delivery network); Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may be involved in this as a sub-processor. Google processes the data named above on our behalf under a data processing agreement pursuant to Art. 28 GDPR (Google Cloud Data Processing Addendum including the Firebase Data Processing and Security Terms).

Purpose and legal basis. The processing serves to deliver the website, to ensure its stability and security (in particular to detect and defend against attacks and misuse) and to analyze errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, stably and quickly. Without this data the website cannot technically be delivered.

Retention period. By its own account, Google stores the IP addresses of incoming requests for a few months for the purpose of detecting misuse and analyzing usage. We ourselves have no access to personal log data, only to aggregated usage figures (e.g. number of requests, volume of data transferred), from which no individual can be identified.

Transfers to third countries. Where data is processed in the USA, Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). In addition, the standard contractual clauses adopted by the European Commission apply (Art. 46(2)(c) GDPR). Further information: https://policies.google.com/privacy and https://firebase.google.com/support/privacy.

4. Contacting us by email

If you write to us by email, we process your email address, the details in your message and the time of the message in order to handle and answer your request.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or the steps leading up to one (questions about purchases in the app, for instance), and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering your request.

We delete your request as soon as it has been dealt with and no statutory retention obligations stand in the way. Business correspondence that has to be retained under commercial or tax law is kept for the period prescribed by law (§ 257 HGB (German Commercial Code), § 147 AO (German Fiscal Code)).

Our email inboxes are hosted with Google Workspace (Google Ireland Limited, address as above). Google processes the email data as a processor pursuant to Art. 28 GDPR; where processing takes place in the USA, the safeguards described in section 3 apply.

Please do not send us any particularly sensitive data by email, and never passwords or payment details.

5. Applying as a creator

You can apply as a creator using the form at /en/creators. In doing so we process your name, your email address, the content of your message, your confirmation that you are of legal age and the time of the application, in order to review your application and get in touch with you. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).

The application is stored in the Cloud Firestore database (Google Ireland Limited, address see section 3; storage location Frankfurt am Main, region europe-west3) and is also sent to us by email to intimacy@welike.com. Google acts as a processor in this; the safeguards described in section 3 apply.

To protect the form against misuse, we briefly process a pseudonymized hash value of your IP address when you submit it, from which the address cannot be reconstructed; it is deleted automatically after 24 hours. The legal basis is Art. 6(1)(f) GDPR (interest in warding off automated bulk requests).

If no collaboration comes about, we delete your application no later than six months after our reply. If a collaboration does come about, we continue to keep the data as part of the contractual relationship. Providing the data is voluntary; without it we cannot process an application.

6. Links to the App Store

The website links to the Apple App Store. Merely viewing our website transmits no data to Apple. Only when you click such a link do you leave our website; from that point on, the privacy terms of Apple Inc. apply (https://www.apple.com/legal/privacy/).

Safari on the iPhone may show a “Smart App Banner” on our website pointing to the app. Your browser retrieves the information needed for this directly from Apple; we receive no data in the process.

7. Language choice, no cookies, no analytics

The website exists in German and English. On your first visit, your browser evaluates its own language setting locally in order to show the matching language version; no data is transmitted to us in the process and your location is not determined. If you change the language with the switch, the website stores that choice in your browser’s local storage (localStorage, not a cookie) so that it is kept for your next visit. This storage is strictly necessary in order to provide the language version you have expressly asked for (§ 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act)); no consent is required for it. You can delete the entry at any time in your browser settings.

Beyond that, the website sets no cookies and stores no further information on your device. No usage profiles are created and no audience measurement is carried out.

8. Your rights

You have the following rights against us with regard to the personal data concerning you:

• the right of access (Art. 15 GDPR),
• the right to rectification (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to object (Art. 21 GDPR, see below).

To exercise your rights, an email to intimacy@welike.com is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Email: mailbox@datenschutz.hamburg.de
https://datenschutz-hamburg.de

You can also contact the supervisory authority where you live.

9. Further notes

There is no legal or contractual obligation to provide us with personal data. Without the technical data named in section 3, however, the website cannot be displayed.

Automated decision-making, including profiling (Art. 22 GDPR), does not take place on this website.

The connection to this website is TLS-encrypted throughout (HTTPS).

10. Changes

We adapt this Privacy Policy when the website or the legal situation changes. The version published here at any given time is the one that applies.