Legal

Privacy Policy — Dabble

Last updated: August 2026

1. Controller

The controller responsible for data processing in the Dabble mobile application is:

BurmCorp Labs UG (haftungsbeschränkt)
Kollwitzstraße 76
10435 Berlin
Germany

Represented by: Nils Torben Burmeister
Email: legal@burmcorp.com
Phone: +49 30 20009797

This privacy policy applies to the Dabble iOS/iPad app. For the burmcorp.com website, see our general privacy policy.

2. What Dabble processes

Depending on how you use the app, we may process:

  • Account data — email address, display name, authentication identifiers (including Sign in with Apple where used), password hash if you register with email
  • Usage & progress — enrollments in packs, completed days, streak and points, preferences from onboarding
  • Content you create — private packs you create, optional journal/reflection text, optional photo references associated with challenges
  • Technical data — device/app version as needed to provide the service, secure API access tokens, server logs (IP address, timestamps) for security and operations
  • Purchases — Pro subscription status processed via Apple In-App Purchase; we store entitlement state on our servers, not your full payment card details

3. Purposes and legal bases

We process data to provide the app (Art. 6(1)(b) GDPR — contract), to secure and improve the service (Art. 6(1)(f) GDPR — legitimate interests), to comply with legal obligations (Art. 6(1)(c) GDPR), and where you consent (Art. 6(1)(a) GDPR). We do not currently run advertising trackers in the app.

4. Hosting and processors

Backend infrastructure may be hosted with cloud providers (e.g. for API, database, and file storage). Processors act under data processing agreements pursuant to Art. 28 GDPR. Apple processes App Store and In-App Purchase data under Apple’s terms.

5. Retention

We keep account and progress data for as long as your account is active. You may request deletion; we will erase or anonymize personal data unless retention is required by law. Server logs are kept only as long as needed for security and operations.

6. Your rights

Under the GDPR you may have the right to access, rectification, erasure, restriction, data portability, and objection. You may lodge a complaint with a supervisory authority, e.g. the Berliner Beauftragte für Datenschutz und Informationsfreiheit (https://www.datenschutz-berlin.de).

Contact: legal@burmcorp.com or labs@burmcorp.com.

7. Changes

We may update this policy. The current version is always available at this URL. Material changes will be reflected by the “Last updated” date above.