Evidence Base Logo

Privacy Policy

As of: September 2026

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Navid Fred Sarrafpour
Wuhlestraße 7a
12683 Berlin
Germany

Email: info@evidence-base.app
VAT identification number: DE463193105

2. General information on data processing

The protection of your personal data is important to us. This privacy policy informs you which personal data we collect, process and use when you use the mobile application "Evidence Base" and the associated website, and for what purposes.

Personal data is any information relating to an identified or identifiable natural person.

3. Legal bases for processing

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis.

For processing of personal data necessary for the performance of a contract (e.g. use of the app, premium subscription), Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary for pre-contractual measures.

Where processing of personal data is necessary to fulfil a legal obligation, Art. 6 (1) (c) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis.

4. Provision of the app and hosting

The app "Evidence Base" is technically operated and hosted via an external service provider. The data you enter and generate (in particular user, content and usage data) is stored and processed on the systems of this service provider.

The service provider acts as a processor within the meaning of Art. 28 GDPR and processes the data exclusively on behalf of and on the instructions of the controller.

During purely informational use of the app, technically necessary data such as IP address, device type, operating system version and time of access may be processed. The legal basis for this is Art. 6 (1) (f) GDPR (legitimate interest in the technically flawless provision and security of the app).

5. Registration and user account

Using certain functions of the app requires creating a user account. The following data is processed in particular:

  • Email address
  • Name or display name
  • Profile picture (if uploaded)
  • Authentication data

Processing takes place to fulfil the user contract (Art. 6 (1) (b) GDPR).

6. Login options

You can log in to the app in the following ways:

  • With email address and password
  • Via Google
  • Via Apple
  • Via Microsoft
  • Via Facebook

When logging in via one of the third-party providers, certain profile data (in particular email address, name and, if applicable, profile picture) is transmitted to us by the respective provider. Processing is based on your consent (Art. 6 (1) (a) GDPR) and for the performance of a contract (Art. 6 (1) (b) GDPR).

Further information on data processing by the respective providers can be found in their privacy policies.

7. Premium subscriptions and payments

When concluding a premium subscription, the data required for the execution of the contract is processed (in particular information on subscription status and term).

Payment processing takes place exclusively via the respective app stores (Apple App Store and Google Play). We generally only receive information from the store operators as to whether a subscription is active, but not complete payment or credit card data.

The legal basis is Art. 6 (1) (b) GDPR (performance of contract).

8. Community features and user content

Within the app, users can create and share content, in particular:

  • Stacks
  • Experiences (user experiences)
  • Comments
  • Profile pictures

This content is stored and displayed to other users of the app. Processing takes place to fulfil the user contract (Art. 6 (1) (b) GDPR) and on the basis of our legitimate interest in providing the community features (Art. 6 (1) (f) GDPR).

Users are themselves responsible for not publishing illegal content or content that infringes the rights of third parties. We reserve the right to remove content and to block or delete user accounts in the event of violations of the Community Guidelines.

9. Profile pictures

Uploaded profile pictures are stored on the systems of the technical service provider and displayed within the user profile. Processing is based on the performance of the contract (Art. 6 (1) (b) GDPR) or your consent.

10. Email communication

We may send you emails in connection with the use of the app, in particular:

  • Welcome emails after registration
  • Confirmations of premium subscriptions
  • Notices regarding account deletion
  • Technically necessary messages

These emails are sent from the address info@evidence-base.app. Processing takes place for the performance of a contract (Art. 6 (1) (b) GDPR) or on the basis of our legitimate interest in proper communication (Art. 6 (1) (f) GDPR).

11. Storage period

Personal data is only stored for as long as is necessary for the respective purposes or as long as statutory retention periods exist.

When you delete your user account, the associated data is deleted unless statutory retention obligations (e.g. commercial or tax law periods) conflict with this. Content that you have shared publicly (e.g. stacks or experiences) may remain in anonymous or pseudonymized form insofar as complete deletion is technically not possible or only possible with disproportionate effort.

12. Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw a granted consent (Art. 7 (3) GDPR)

To exercise your rights, you can contact us at any time at info@evidence-base.app.

You also have the right to lodge a complaint with a data protection supervisory authority.

13. Minors

The app is aimed at persons aged 16 and over. Persons under 16 may not use the app. We do not knowingly process personal data of children under 16.

14. Changes to this privacy policy

We reserve the right to adapt this privacy policy as needed so that it always meets current legal requirements or to implement changes to our services. The current version is available in the app and on the website.

15. Contact

If you have any questions regarding data protection, you can reach us at:

Navid Fred Sarrafpour
Wuhlestraße 7a
12683 Berlin
Email: info@evidence-base.app