Privacy Policy

1. Who We Are

StitchUp Repairs ("StitchUp", "we", "us", "our") is operated by:

Benedikt Langenberger
Prof.-Dr.-Helmert-Straße 2-3
14482 Potsdam, Germany
Email: mail.likemind@gmail.com

We are the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

2. What Data We Collect

Data Category	Specific Data	Purpose
Account Information	Name, email address, password (hashed)	Account creation and authentication
Profile Information	Profile photo, bio, role (requester/repairer), PayPal username	Display your profile to other users; enable payments
Location Data	Precise GPS coordinates (latitude/longitude)	Match repair requests with nearby repairers within a user-defined radius
User Content	Repair request photos, descriptions, messages, ratings, and reviews	Enable the core repair matching and communication features
Transaction Data	Repair request price, payment status (paid/unpaid)	Track job completion and payment confirmation
Identifiers	Unique user ID	Internal account management

3. How We Use Your Data

We process your personal data for the following purposes:

• Providing the service: Matching repair requests with nearby repairers, enabling communication, and facilitating job completion (Legal basis: contractual necessity, Art. 6(1)(b) GDPR)
• Location-based matching: Using your precise location to find repair jobs or repairers within your specified travel radius (Legal basis: consent, Art. 6(1)(a) GDPR)
• Account management: Creating and maintaining your user account (Legal basis: contractual necessity, Art. 6(1)(b) GDPR)
• Communication: Enabling in-app messaging between requesters and repairers (Legal basis: contractual necessity, Art. 6(1)(b) GDPR)
• Ratings and reviews: Displaying community ratings to build trust (Legal basis: legitimate interest, Art. 6(1)(f) GDPR)

4. Data We Do NOT Collect

• We do not collect health, fitness, or biometric data
• We do not collect browsing or search history
• We do not collect contacts or address book data
• We do not track you across other apps or websites
• We do not process financial payment data — all payments are handled directly between users via PayPal

5. Payments

StitchUp does not process payments. When a job is completed, the requester is redirected to PayPal.me to pay the repairer directly. We only store whether a user has confirmed that payment was sent. We never have access to your PayPal credentials, bank details, or payment card information.

6. Data Sharing

We share your data only in the following limited circumstances:

• With other users: Your name, profile photo, bio, ratings, and repair request details are visible to other users as part of the service's core functionality.
• Supabase (Infrastructure provider): Our backend infrastructure is hosted on Supabase (servers in EU — Ireland). Supabase processes data on our behalf as a data processor under a Data Processing Agreement.

We do not sell, rent, or trade your personal data to third parties. We do not share data with advertisers.

7. Data Storage and Security

• Location: All data is stored on Supabase servers in the EU (eu-west-1, Ireland).
• Security: Data is encrypted in transit (TLS/SSL) and at rest. Passwords are hashed using industry-standard algorithms. Access to the database is protected by Row Level Security (RLS) policies.
• Retention: We retain your data for as long as your account is active. When you delete your account, all associated data (profile, requests, messages, ratings, photos) is permanently deleted.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15): Request a copy of all personal data we hold about you.
• Right to rectification (Art. 16): Correct inaccurate personal data via your profile settings.
• Right to erasure (Art. 17): Delete your account and all associated data at any time from the Profile tab in the app.
• Right to data portability (Art. 20): Request your data in a machine-readable format.
• Right to restrict processing (Art. 18): Request that we limit how we use your data.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7): Withdraw consent for location tracking at any time by revoking location permissions on your device.

To exercise any of these rights, contact us at mail.likemind@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. For Germany, this is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg.

9. Children's Privacy

StitchUp is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. Location Data

We collect precise location data only when you actively create a repair request. Location data is used solely to match you with nearby repairers within your specified radius. You can revoke location access at any time through your device settings. The app will continue to function, but you will not be able to create new repair requests without providing a location.

11. Cookies and Tracking

StitchUp is a native mobile application. We do not use cookies, web beacons, or any third-party tracking or analytics tools. We do not participate in any advertising networks.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

Benedikt Langenberger
Email: mail.likemind@gmail.com
Prof.-Dr.-Helmert-Straße 2-3
14482 Potsdam, Germany