Last updated: 2026-09-30
This privacy policy applies to the Friendly Reminder application for mobile devices and to the website at friendly-reminder-app.com, together with the services operated behind them (collectively, the "Application"). The Application is operated by Benjamin Winkler, Austria, contactable at friendly.reminder.contact@gmail.com, hereafter the "Service Provider", who is the controller of the personal data described below within the meaning of the GDPR.
The Service Provider does not sell personal data, does not serve advertising, and does not use the Application for cross-app tracking.
The Application is under active development. Features may change, and this policy is updated as they do.
Effective as of 30 September 2026.
The Application requires the following personally identifiable information, which is retained and used as described in this policy:
Where you add another person to a meetup, their participation and anything you write about them become visible to everyone else involved in it.
A copy of your data is cached on your device so the Application works offline. This cache is cleared on sign-out and on account deletion, except for your analytics preference and some technical app settings, and is excluded from iCloud and Android cloud backups. Cookies and cached files from pages opened in the Application's built-in browser are kept separately and are removed only when you uninstall the Application. Calendar files you export remain in the Application's documents folder until you delete them.
The Application does not access your photos, contacts, location, microphone or device calendar.
If you permit notifications, the Application stores a device registration token issued by Firebase Cloud Messaging, one per device, with no accompanying device metadata. Notifications are sent for friend requests and acceptances, meetup invitations and responses, and approaching response deadlines.
Meetup notifications contain the activity and location text entered by you or the organiser, together with the number of attendees. This text passes through Google's notification infrastructure and may appear on a locked screen.
Tokens are removed on sign-out, when reported stale, and when account deletion is requested. You can turn notifications off in your device settings at any time.
Calendar synchronisation is optional and disabled until you enable it.
Where you connect Google Calendar, the Application requests a single restricted scope covering only calendars it creates itself. It creates its own calendar in your Google account and writes your meetups to it, including activity, notes, location and times, and reads back only from that calendar in order to keep it current. The Service Provider has no access to your other calendars or to appointments not created through the Application; this is enforced by Google. Stored are the identifier of the created calendar and your synchronisation setting.
On iOS there is no device calendar integration; meetups may be exported as .ics files and opened in a calendar application of your choice.
You can disconnect at any time in the Application or in your Google account settings.
Purchases are processed by the Google Play Store and the Apple App Store. The Service Provider receives no payment card details, billing address or payment name. Stored are the purchase token issued by the store, the product purchased, the store it came from, the claim date and the expiry date. Tokens are re-submitted to the stores daily to confirm continued validity, and are used to prevent a single purchase being claimed by more than one account.
Each account is issued a referral code. Where an account is created from an invitation link, the Service Provider records the referring code and connects the two accounts as friends. To prevent repeated deletion and re-registration for referral rewards, a one-way cryptographic hash of the email address and of the Google or Apple account identifier behind a deleted account is retained. The hash cannot be turned back into an address, but it can be compared against an address someone already knows. It is used only to stop referral rewards being claimed again, is stored with nothing but the deletion date, and has no fixed expiry.
The Application uses PostHog to measure how it is used, hosted on PostHog's EU infrastructure in Germany. Events record which screens are opened and which features are reached, together with counts and yes/no indicators — for example whether a meetup had notes, or how many friends were selected. They do not carry the text you enter, your name, username, email address or account identifier.
Events are attributed to a random identifier generated on your device and are not linked to your account. The analytics library additionally attaches device information to each event: manufacturer, model and device type, operating system and application version, screen size, language, time zone, connection type and mobile carrier. PostHog also receives your IP address when events are sent and uses it to derive an approximate location, such as country and city.
The Application does not currently record crash reports. The Service Provider reserves the right to introduce crash reporting in future to diagnose and fix faults; if it does, this policy will be updated before crash reporting is enabled. The Application records no session replays. It uses no advertising identifiers and no cross-application tracking.
These analytics are processed on the basis of the Service Provider's legitimate interest in understanding and improving how the Application is used. You can turn them off at any time in the Application's settings, and no further events are sent once you do.
The Application provides a feedback form and a form for reporting a problem with another user. Both are Google Forms, opened in a browser window inside the Application.
The Application sends nothing to these forms on your behalf. No account identifier, username or email address is filled in for you; only what you type is submitted. Your answers go directly to Google and are not stored in the Application's own database.
The feedback form asks for the type of feedback, a description, the platform you are using, and optionally bug details, your email address or username, and further comments. The report form asks for a category, a description of what happened, whether you are personally involved, and optionally the username of the account you are reporting, your own username and a way to contact you. Where you supply a username or email address, your answers can be linked to your account.
A report may describe another person and name their account. The Service Provider processes reports in order to investigate them, to keep users safe, and where necessary to comply with legal obligations. Reports are reviewed by the Service Provider and are not shown to the person reported unless action is taken that requires it.
Loading a form transmits your IP address and device and browser information to Google, which may set cookies, as with any Google page. Those cookies and the browser cache are held in the Application's own storage on your device until you uninstall the Application.
Responses are stored in Google Forms in the Service Provider's Google account. Reports are kept for as long as is needed to investigate and act on them, and longer where the law requires it. Feedback is kept indefinitely so that it can be aggregated and used to improve the Application; any contact details you supplied with it are deleted once any questions arising from it have been resolved. Responses are not linked to your account record and are not deleted when you delete your account; if you want a submission removed, contact friendly.reminder.contact@gmail.com.
Friendly Reminder is a social application, and parts of your profile are visible to others within it.
Your username, display name, avatar, profile text, interests, weekly availability and pinned friends are readable by any signed-in user of the Application. Your profile record also holds your referral code, the referral code of the person who invited you, your registration date, an internal account identifier and some technical status flags; these are not shown in the Application, but can be read by other signed-in accounts through the database interface. The referral fields are cleared when your account is permanently deleted. Your email address is not readable by other users. A meetup's activity, location, notes, times, responses, votes and comments are visible to everyone invited to it, including people who are not your friends. A participant removed from a meetup retains access to it and stops receiving its notifications.
Your settings, including notification tokens and your calendar connection, are private to your account. Purchase records, consisting of the store purchase token, the product purchased, the store it came from and the claim date, are stored so that a single purchase cannot be claimed by more than one account. They are not shown anywhere in the Application, but are currently readable by other signed-in accounts through the database interface.
The Service Provider processes personal data on the following bases under Art. 6(1) GDPR:
The Service Provider does not sell personal data and does not share it for advertising. The following providers process personal data on the Service Provider's instructions under a data processing agreement: Google Firebase (authentication, database, server functions, push notifications and remote configuration), PostHog (analytics), the Google Calendar API (calendar synchronisation), Google Play and Apple (purchase verification), GitHub (website hosting), Google Analytics (analytics), and Google Forms (feedback and reports).
Their privacy policies: Google · Firebase · PostHog · Apple · GitHub
The Service Provider may also disclose personal data where required by law, where necessary to comply with legal process, or where necessary to protect its rights or the safety of any person. Child sexual abuse material, and the data of the accounts involved, is reported to the relevant authorities and recognised child protection organisations, as described in the Child safety section in the Terms and Conditions.
The database and server functions run in Google Cloud's europe-west1 region in Belgium. Analytics data is held on EU infrastructure in Germany.
Several of these providers are US companies operating EU infrastructure. Where personal data is processed outside the EEA — for support and engineering access, or for sign-in and push services operating globally — such transfers are made under the European Commission's Standard Contractual Clauses and, for certified providers, the EU–US Data Privacy Framework. Details are available on request.
Account and profile data, friendships, friend requests and purchase records are retained until you delete your account. Accounts whose email address is never verified are retained until deleted on request. Notification tokens are retained until sign-out, expiry, or a deletion request. Analytics data is retained for one year. The anti-abuse hash described above currently has no fixed expiry.
Where the law requires data to be preserved in connection with a breach of the Child safety section or a law enforcement request, it is kept for as long as that obligation lasts, even after account deletion.
Meetups are retained for as long as any participant still holds an account, and may be removed only by the last remaining participant. Because they are shared records involving other people, an erasure request concerning a meetup is weighed against the other participants' interests.
After deletion, a placeholder record is retained indefinitely so that past meetups continue to display correctly. It contains no personal data, only an internal identifier, the original registration date and the deletion date.
You may delete your account within the Application. Deletion requires re-authentication and, on supported devices, biometric confirmation.
Deletion proceeds in two stages. Immediately on request, notifications cease and you are marked as not attending upcoming meetups; nothing is erased, and the request may be reversed within 30 days. After 30 days, your profile is overwritten and your email address, profile text, interests, name, username and referral codes are cleared; your settings, saved ideas and purchase records are deleted; every friendship and friend request involving you is deleted; your meetups are cleaned up; your authentication account is deleted; and, for Apple sign-in, the connection to Apple is revoked.
Because analytics are never linked to an account, analytics events cannot be identified for deletion and expire on the schedule above.
Uninstalling the Application stops further collection from your device but does not delete data already transmitted. Requests may also be sent to friendly.reminder.contact@gmail.com.
You have the right to access your personal data and obtain a copy of it, to have inaccurate data corrected, to have your data erased, to restrict processing while a dispute is resolved, to object to processing based on legitimate interest, to receive your data in a machine-readable format or have it transmitted to another provider, and to withdraw consent at any time without affecting processing carried out before withdrawal. Much of your data can be corrected directly in the Application.
To exercise any of these rights, contact friendly.reminder.contact@gmail.com. The Service Provider will respond within one month.
Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.
The website at friendly-reminder-app.com is a static site hosted by GitHub Pages. GitHub receives the IP address and browser information of every visitor in order to serve the site. The Service Provider operates no server, database or server-side logic of its own for the website, and the website has no forms and no sign-up.
Fonts, scripts, icons and the store badges are served from the website's own domain. Opening a page contacts no other company.
No cookies are set when a page is opened. A banner asks for your consent to Google Analytics 4, which is loaded only if you accept; if you decline or ignore the banner, nothing is loaded and no request reaches Google. Where you accept, Google Analytics sets its own cookies (_ga and a related _ga_* cookie) and processes page views, referrer, approximate location, device and browser. Google Analytics 4 does not store IP addresses. For visitors in the EU the data is processed by Google Ireland Limited and retained for two months following your last visit. Your choice is stored in your browser under the key fr-consent and is never transmitted. You can withdraw it at any time through "Cookie settings" in the footer, which deletes these cookies.
When you open an invitation link, the website reads the invitation code from the address in your browser and forwards you to the Google Play Store or the App Store with the code attached, so that it can be applied after installation. The website does not record the code, but Google or Apple receive it as part of the store link. The code is then held on your device until you complete registration.
The account page reached from password-reset and email-verification emails loads the Firebase SDK from Google and submits the code from the link to Firebase Authentication, so Google receives your IP address on that page. It carries no analytics.
The Application is not intended for anyone under 16 years of age, and the Service Provider does not knowingly collect personal data from children under 16. A parent or guardian who believes a child has registered should contact friendly.reminder.contact@gmail.com, and the account will be deleted.
Child sexual abuse and exploitation are prohibited under the Child safety section in the Terms and Conditions. Where the Service Provider becomes aware of such content or behaviour, the data involved is preserved where legally required and reported to the relevant authorities and recognised child protection organisations.
Personal data is held on Google Cloud infrastructure and is encrypted in transit and at rest. Access to the production database is limited to three developers and the automated service accounts that run the backend. Access between accounts is controlled by server-side rules, accounts must verify their email address or sign in through Google or Apple before they can interact with other users, and purchases are verified server-side rather than trusted from the device.
No system is perfectly secure. Where a breach of personal data is likely to result in a risk to you, the Service Provider will notify you and the competent supervisory authority as required by applicable law.
This policy is updated as the Application changes, and the date above always reflects the current version. Where a change materially affects the use of your data, the Service Provider will give notice in the Application before it takes effect and will obtain consent where the law requires it.
Questions regarding this policy may be sent to friendly.reminder.contact@gmail.com.
These terms and conditions apply to the Friendly Reminder application for mobile devices and to the website at friendly-reminder-app.com (collectively, the "Application"), operated by Benjamin Winkler, Austria (the "Service Provider").
The Application is a service for keeping in touch with friends and organising meetups. It is not supported by advertising.
By creating an account or using the Application, you agree to these terms. Please read them before you do.
Effective as of 30 September 2026.
You must be at least 16 years old. If the law where you live requires a higher age for you to agree to terms of this kind on your own, that age applies instead.
The details you give when registering must be accurate, and your username and display name must not impersonate another person.
You are responsible for keeping your sign-in details secure and for what happens through your account. Tell the Service Provider promptly if you believe someone else has access to it.
One account per person. You may delete your account at any time in the Application; the Privacy Policy describes what happens to your data when you do.
The Application connects real people, so please use it accordingly. You must not:
The Service Provider does not review content before it appears. If something breaches these terms, report it to friendly.reminder.contact@gmail.com.
Friendly Reminder has zero tolerance for child sexual abuse and exploitation (CSAE), including child sexual abuse material (CSAM).
You may not use Friendly Reminder to:
You can report users or content directly in the app via Settings → Advanced (at the bottom of the Settings tab), through the reporting form, or by emailing friendly.reminder.contact@gmail.com. Reports related to child safety are reviewed with the highest priority. If a child is in immediate danger, contact your local emergency services or police first.
When the Service Provider becomes aware of content or behaviour that violates this section, the Service Provider will:
Questions about the Service Provider's child safety practices can be directed to friendly.reminder.contact@gmail.com.
Please report anything that looks wrong — it is the main way problems come to light. You can do so in the Application under Settings → Advanced, through the reporting form, or by emailing friendly.reminder.contact@gmail.com. Reports are read by the Service Provider, who decides what action to take, which may include warning, suspending or closing an account.
Report honestly and only what you believe to be true. Submitting deliberately false or malicious reports is itself a breach of these terms. There is no guarantee that a report will lead to a particular outcome, and you will not always be told what was decided.
If someone is in immediate danger, contact your local emergency services rather than using the form.
What you write — meetups, notes, comments, your profile — remains yours. You grant the Service Provider the permission needed to store, display and transmit it in order to operate the Application, and nothing beyond that. It is not used for any other purpose.
Meetups are shared records. Content you contribute to a meetup remains visible to the other participants even after you leave it or delete your account, because it also forms part of their record of the event.
The Application offers optional paid features. Purchases are made through the Google Play Store or the Apple App Store, which act as the seller. Your payment relationship is with the store, not with the Service Provider, and the store's own terms apply to the transaction.
A lifetime purchase means access to the paid features for as long as the Application is operated. It is not a guarantee that the Application will be available indefinitely, and it does not cover features sold separately in future.
Prices may change. A change never affects a purchase you have already made.
Refunds are handled by the store you bought from, under its own refund policy. The Service Provider cannot process refunds for purchases made through Google Play or the App Store.
If you are a consumer in the EU, you normally have 14 days to withdraw from a purchase of digital content. Because access to paid features is granted immediately, you agree to immediate performance at the point of purchase and thereby lose that right of withdrawal, as permitted under Art. 16(m) of Directive 2011/83/EU. Where the store's own refund policy is more generous, it applies.
The Application is provided as it is, without a guarantee of uninterrupted availability. Parts of it require an internet connection, and your mobile provider's charges may apply.
The Service Provider may add, change or withdraw features, and may require you to install updates in order to keep using the Application. Older versions may stop working. There is no guarantee that the Application will remain compatible with every operating system version.
You may stop using the Application and delete your account at any time.
The Service Provider may suspend or close an account that breaches these terms, or where necessary to protect other users or comply with the law. Where it is reasonable to do so, you will be told why and given a chance to respond. Serious or repeated breaches may result in immediate closure.
The Service Provider may also discontinue the Application. Where that happens, reasonable notice will be given in the Application, and any unexpired paid subscription will be refunded proportionately.
On closure, your right to use the Application ends and your data is handled as set out in the Privacy Policy.
The Application itself, its design, code, name and logo belong to the Service Provider. You may not copy or modify the Application, attempt to extract its source code, or create derivative versions of it, except where the law expressly permits.
This does not affect your rights in the content you create.
The Service Provider is not responsible for things outside its control: your device running out of battery, losing connectivity, or a third-party service being unavailable. Nor is the Service Provider responsible for what other users write or do, or for arrangements you make with them through the Application.
The Service Provider is liable without limit for intent and gross negligence, and for injury to life, body or health. Otherwise, liability is limited to the extent permitted by the law that applies to you. Nothing in these terms excludes or limits liability that cannot be excluded or limited under that law.
Nothing in these terms limits your statutory rights as a consumer.
The Application is a tool for organising social plans, not a reminder service you should rely on for anything important. Notifications depend on your device and network and may be delayed or fail to arrive.
The Privacy Policy explains what personal data the Application collects, who can see it, and how long it is kept. It forms part of your use of the Application and is worth reading alongside these terms.
The Application relies on third-party services, each with its own terms: Google Firebase, PostHog, Google Play, Apple, GitHub and Google Analytics.
These terms may be updated as the Application changes. Material changes will be notified in the Application before they take effect, and the date above always shows the current version. If you do not accept a change, you can stop using the Application and delete your account.
These terms are governed by the law of the country in which the Service Provider is established, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, this does not deprive you of the protection of any mandatory provisions of the law where you live, and you may bring proceedings before the courts there.
If any provision of these terms is found invalid, the rest remain in force.
Questions about these terms: friendly.reminder.contact@gmail.com.
Have questions or feedback about Friendly Reminder? We'd love to hear from you!
Email: friendly.reminder.contact@gmail.com
We typically respond to inquiries within 24-48 hours.