PeakWorld
Legal

Privacy policy

Last updated: October 2026

This English version is provided for convenience. The German version is legally binding.

1. Controller

The controller responsible for data processing in the PeakWorld app and on this website is:

Nikolas Korten
Detterstr. 11
94469 Deggendorf, Germany
Email: [email protected]

2. Overview

PeakWorld is a tour journal. We only process data that is required for the app's features. We show no advertisements, sell no data and create no advertising profiles.

3. Data in the app

Account

Email address, username, optional display name, profile picture and bio. When you sign in with Google or Apple, we receive your email address and an identifier from them. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

Tours and content

Title, date, activity, distance, elevation, duration, summits, optional GPX data, photos, captions and notes. Personal notes and GPX data are protected against access by others on the server side. Others only see photos and tour data if your profile is public or you are confirmed friends.

Social features

Friend requests, confirmed friendships, likes on photos and your position in the friends leaderboard.

Feedback

When you send feedback, we process your message, up to three screenshots and your account identifier so we can reply and fix bugs (Art. 6(1)(f) GDPR).

Weather

You can optionally select the weather for a tour yourself. It is stored with the tour. No external weather service is queried.

4. Services used

Supabase

Database, sign-in and file storage run on Supabase Inc. The servers are located in London (United Kingdom), for which an adequacy decision by the EU Commission exists. A data processing agreement is in place with Supabase.

Mapbox

The map is loaded from Mapbox Inc. (USA). Technical data such as IP address, device type and map section are processed. Mapbox may collect anonymous usage statistics; you can turn this off via the info icon on the map. The transfer to the USA is based on the EU-US Data Privacy Framework or standard contractual clauses.

Google and Apple

If you sign in with Google or Apple, their privacy policies also apply.

Google Play

When you download and update the app, Google processes data under its own terms; we have no influence on this.

Partner links and discount codes

PeakWorld shows no advertisements. The app may, however, contain labelled partner links (affiliate links) and discount codes from partners in the mountain sports world. No data is sent to partners when they are displayed. Only when you open a partner link do you switch to the partner's website. Its privacy policy applies there, and the partner can see that you came via PeakWorld. If a purchase results from this, we may receive a commission. Your price does not change.

5. This website

The website is self-hosted and delivered via Cloudflare Inc. Technically necessary data such as IP address, time and requested page are processed briefly (Art. 6(1)(f) GDPR). There are no cookies and no tracking. For account deletion, the page communicates directly with Supabase.

6. Retention

We store your data for as long as your account exists. If you delete your account in the app or on this website, your profile, tours, friendships, conquered countries and continents as well as photo entries are removed immediately. Statutory retention obligations remain unaffected.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Just send us an email.

You can also lodge a complaint with a supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Minimum age

PeakWorld is generally intended for people aged 16 and over.

9. Changes

We update this policy when the app or the legal situation changes. The version published here applies.