Almende Privacy Policy

The data controller for the Almende neighbourhood food marketplace app is:

BurmCorp Labs UG (haftungsbeschränkt)
Kollwitzstraße 76
10435 Berlin
Germany

Represented by: Nils Torben Burmeister
Phone: +49 30 20009797
Email: legal@burmcorp.com

Register: Amtsgericht Charlottenburg, HRB 285559 B · VAT ID: DE463621479

Website: https://burmcorp.com · Product: https://burmcorp.com/en/labs/almende

Bundle ID: com.burmcorp.almende

Almende is a marketplace application for Apple platforms (and related backend services we operate) for homemade / home-grown food with local pickup. This policy explains which personal data we process, for which purposes, legal bases under the EU GDPR (DSGVO), retention, and your rights.

We do not sell your personal data. We do not use listing content or chat for third-party advertising profiles.

Note: Almende is a separate product from Amble (social walking) and other BurmCorp Labs apps.

Depending on how you use Almende, we may process:

• Account data — email, display name, Sign in with Apple subject identifier (or local session mapping), city/address/radius for discovery, optional bio, seller-ready flags.
• Listings — titles, descriptions, photos, prices, stock, pickup address/window, coordinates, category and kind (sale/gift/swap).
• Reservations — who reserved what, quantity, pickup slot, pickup code, status lifecycle, payment method (cash / app).
• Payments — when in-app pay is enabled: Stripe PaymentIntent / Connect identifiers and status. Card details are processed by Stripe, not stored as full PAN on our servers. Cash pickups do not require card data.
• Chat — messages between buyers and sellers opened for a listing.
• Social graph — favourites, follows, search alerts you create.
• Moderation — reports you submit about listings or users.
• Location — optional device location to sort by distance; listing pickup coordinates you publish as a seller.
• Device & technical data — app version, IP/logs, optional push tokens if notifications are enabled.
• Support — content of emails you send us.

We process data to:

• provide the marketplace (accounts, catalog, reserve, chat, seller tools) — Art. 6(1)(b) GDPR;
• process optional in-app payments via Stripe Connect when configured — Art. 6(1)(b) GDPR;
• send transactional notices (reservation, chat) when push/email is configured — Art. 6(1)(b) or (f) GDPR;
• secure the service, prevent abuse, process reports — Art. 6(1)(f) GDPR;
• comply with legal obligations — Art. 6(1)(c) GDPR.

Where we rely on consent (e.g. optional push, precise location), you may withdraw it in system or app settings without affecting prior lawful processing.

When app pay is live, we use Stripe (including Connect Express for seller payouts) as payment processor. Stripe processes payment data under its own privacy terms. We store payment intent / account identifiers and status needed to match reservations; we do not store full card numbers on Almende servers. Cash reservations never require Stripe.

Sellers publish pickup coordinates with an offer. Buyers may allow device location to browse by distance (MapKit). Location permission is optional and not requested on cold start without your action in address/radius settings. Denying location falls back to profile city/radius or default browse area.

If you use Sign in with Apple, Apple processes authentication under Apple’s terms; we receive a stable subject identifier and, if you share them, email/name to create your account. Local/dev sessions may map to a demo user when security is disabled — not for production accounts.

We use infrastructure and service providers (hosting, databases, object storage if used, Stripe when pay is on, email/push as configured) as processors under Art. 28 GDPR where they process personal data on our behalf. Transfers outside the EEA use appropriate safeguards where required.

Account, listing, and reservation data are kept while your account is active and as needed for the service, disputes, and legal duties. You may request deletion via support; we remove or anonymise personal data within a reasonable period unless longer retention is required by law.

Under the GDPR you have rights including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is based on consent. Contact legal@burmcorp.com.

You may lodge a complaint with a supervisory authority. The competent authority for our company is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
https://www.datenschutz-berlin.de

Almende is not directed at children under 16. We do not knowingly create accounts for children under 16.

For the BurmCorp website and general company processing, see the company privacy policy and imprint.

This policy applies specifically to the Almende application and related product surfaces (including this Labs product page). It does not apply to Amble or other Labs products.

We may update this policy to reflect product or legal changes. The current version is always available at this URL. The date of the last update is noted at the top of this page.