zweikarta

GeldSpace

Privacy policy

Effective date: 12 October 2026

GeldSpace helps you see what you own and what you owe, on your own or with your partner. This policy explains what information GeldSpace uses, why, who can see it, and the choices you have. We've tried to keep it short and plain.

1. Who we are

GeldSpace is provided by Shrikant Chaudhari and Mohini Babhulkar, Zeuschelstraße 36B, 13127 Berlin, Germany ("we", "us"). We are the controller of your personal data. You can reach us about privacy at hello@zweikarta.com.

2. The short version

  • Your numbers are only what you type or confirm. GeldSpace never asks for bank or broker logins.
  • Mine is private. Your partner never sees what's in your Mine: not the names, not the values, not even how many things you have.
  • Ours is shared with your partner only. You both see it, and you both see who updated what and when.
  • We don't sell your data, show ads, or use your data for advertising.
  • Usage data is off unless you say yes. Crash reports never include your numbers, names or notes.
  • You can export everything or delete everything from Settings at any time.

3. What we collect

If you use GeldSpace without an account (guest) What you add stays on your phone. It isn't sent to us. Prices for gold and crypto are read from a shared prices list that contains no information about you.

When you sign in with Apple or Google

  • Account details: your name, your email address, your profile photo (Google only; Apple doesn't share one) and an account ID, provided by Apple or Google when you sign in. If you use Apple's "Hide My Email", we receive a relay address instead. We never see your Apple or Google password. GeldSpace shows your name, email and photo in Settings. The app reads them from your sign-in on your phone, and doesn't copy them into your GeldSpace data or send them in usage data. The photo is downloaded from Google's servers when the app needs it, and we don't store it.
  • What you add: names and types of assets and loans, their values and currencies, quantities and units (for example grams of gold), notes you write, whether an item is in Mine or Ours, and the history of values with who set them and when.
  • Settings: your main currency, your monthly reminder day, and your choices about usage data and crash reports.
  • Couple information, if you invite or join a partner: which two accounts are connected, invite codes, and each partner's monthly check-in status (not started, in progress, done) and the shared streak. Your partner sees your status, never what's in your Mine or how many items you checked.
  • Device information for notifications: a notification token for each phone you sign in on, and its platform (Android or iOS).

Crash reports If the app crashes or hits an error, it sends a crash report: what went wrong in the code, the app version, the phone model and system version, and a random installation ID. Before anything is sent, the app removes text, email addresses, IDs and numbers from error messages. Crash reports never include your amounts, asset names or notes. You can turn crash reports off in Settings › Privacy.

Usage data (only if you agree) If you say yes to "Help improve GeldSpace?", the app records a few simple events, such as "an asset was added" with its type (for example gold), "signed in" with the provider, "reminders turned on", "export shared" and which screens you open (the screen's name only, for example Home or Recap). This is done with Google Analytics for Firebase. These come with a random app ID, the app version, the phone type and an approximate region (country level) that Google works out from the connection. They never include amounts, asset names, notes, your name, your email or anything about your partner. You can turn this off at any time in Settings › Privacy.

Invite links When you open an invite link and then install the app, the app reads the invite code from the link once, so you don't have to type it. On Android it comes from Google Play's install information; on iPhone, the app checks the clipboard once on first launch, and your iPhone asks you first. We keep only the invite code.

Emails you send us If you write to hello@zweikarta.com (for support, feedback or a deletion request), we receive your email address, your message and anything you attach. We use it only to reply to you, and keep it as described in section 8.

What we don't collect No bank or broker logins, no card or payment details, no contacts, no photos from your camera or gallery (only your profile picture from Google, if you have one), no precise location, no advertising ID.

What Why Legal basis (GDPR / UK GDPR)
Account details, what you add, settings, couple information To run GeldSpace: save and sync your numbers across your phones, share Ours with your partner, run the monthly check-in and streak, export and delete Performing our agreement with you (Art. 6(1)(b))
Notification token To send the notifications you expect, such as "Your partner joined" or "Your partner finished their check-in". Notifications never show amounts or asset names. Performing our agreement with you (Art. 6(1)(b))
Crash reports To find and fix crashes and keep the app reliable Our legitimate interest in a working, secure app (Art. 6(1)(f)). You can switch it off.
Usage data To learn which features help, so we can improve them Your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings
Emails you send us To answer you Our legitimate interest in supporting you (Art. 6(1)(f))
Records needed by law To meet legal obligations Legal obligation (Art. 6(1)(c))

Information about what you own and owe is financial information. It is not a "special category" under the GDPR, but we treat it with extra care: we never use it for advertising, profiling or credit decisions, and we never give it to anyone except as described here.

GeldSpace doesn't give financial advice and makes no automated decisions about you.

5. Who can see your information

  • You. Everything in your account.
  • Your partner, only if you connect as a couple, and only the Ours part: the items in Ours, their values and history, who updated them and when, the Ours recap, your check-in status and the streak. Your partner never sees your Mine.
  • Our service providers, only to run GeldSpace for us and under contract:
    • Google (Firebase): sign-in (Firebase Authentication), database (Cloud Firestore), server functions, notifications (Cloud Messaging), invite links, crash reports (Crashlytics) and, if you agree, usage data (Google Analytics for Firebase). Google Ireland Ltd for people in the EU/UK, Google LLC elsewhere.
    • Email forwarding: emails you send to hello@zweikarta.com pass through our forwarding service, Forward Email (forwardemail.net), and arrive in our mailbox at Google (Gmail).
    • Apple: if you sign in with Apple, and to deliver notifications to iPhones.
  • Authorities, only if the law requires us to.

We don't sell your personal data, and we don't share it with advertisers or data brokers.

When you export your data, the spreadsheet goes wherever you send it. That's up to you.

6. Where your information is stored

Your account data (what you add, settings, couple information) is stored in Google Cloud data centres in the European Union (Firestore multi-region eur3, functions in Frankfurt). Sign-in, notifications, crash reports and usage data are run by Google globally and may be processed in the United States and other countries. Where data leaves the EU or UK, Google relies on the EU-US Data Privacy Framework (and its UK extension) and on Standard Contractual Clauses. You can ask us for a copy of these safeguards.

On your phone, GeldSpace keeps a copy of your data so it works offline. If Android backup is on for your phone, Android may include GeldSpace's data in your own Google account backup. The app-lock passcode is never backed up.

7. How we protect it

  • Data is encrypted in transit (TLS) and at rest on Google's servers.
  • Database rules let only you read your Mine, and only you and your partner read your Ours.
  • On your phone, data is protected by the phone's own encryption. You can also lock GeldSpace with Face ID, fingerprint or a 6-digit passcode.
  • Please know: GeldSpace is not end-to-end encrypted. Your partner can never see your Mine, but because your data is stored on our servers, we (and our hosting provider, Google) could technically access it. We only do so when you ask us to (for example for support) or when the law requires it. We may add end-to-end encryption for Mine later.

8. How long we keep it

  • Your account and what you add: for as long as you have an account.
  • Items you remove: marked as removed right away and permanently deleted from our database within 30 days.
  • When you delete your account: your account, your Mine, the Ours items you added and all your history are deleted right away. Ours items your partner added stay with them.
  • When you leave a couple: the Ours items you added move back to your Mine, and the ones your partner added go back to them. The couple connection ends.
  • Notification tokens: removed when you sign out, or when the notification service tells us a token no longer works.
  • Invite codes: expire after 7 days and are deleted within 30 days.
  • Crash reports: up to 90 days.
  • Usage data: up to 14 months.
  • Support emails: up to 12 months after we've answered.
  • Backups: none.

9. Your choices and rights

In the app:

  • Export everything (Settings › Your data) gives you a spreadsheet of everything you can see.
  • Delete everything (Settings › Your data) deletes your account and data.
  • Usage data and crash reports can be switched on or off in Settings › Privacy.
  • Notifications can be turned off in your phone's settings.
  • Sign out removes your data from that phone and keeps it in your account.

Deleting your account without the app: if you no longer have the app, email hello@zweikarta.com from the email address you signed in with, with the subject "Delete my GeldSpace account". We'll confirm it's you, delete your account and data as described in section 8, and tell you when it's done, within 30 days. You can also follow the steps on Delete your GeldSpace account.

Under the GDPR and UK GDPR you can also ask us to:

  • give you access to your data, or a copy in a portable format;
  • correct it;
  • delete it;
  • restrict or object to how we use it (including crash reports);
  • withdraw consent at any time (this doesn't affect what happened before).

Write to hello@zweikarta.com. We'll answer within one month. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), or the one where you live or work. In the UK, that's the Information Commissioner's Office (ico.org.uk).

10. Children

GeldSpace is meant for adults. It isn't directed at children, and we don't knowingly collect data from anyone under 16 (under 13 in the US). If you think a child has given us data, write to hello@zweikarta.com and we'll delete it.

11. Changes to this policy

If we change this policy, we'll update the date at the top. If a change matters, for example a new kind of data or a new provider, we'll tell you in the app before it applies.

12. Notice for US residents

We don't sell personal information and we don't share it for cross-context behavioural advertising. The categories we collect are described in section 3, the purposes in section 4, and the recipients in section 5. You can ask to know, correct or delete your information by writing to hello@zweikarta.com. We won't treat you differently for using these rights.

13. Contact

Shrikant Chaudhari and Mohini Babhulkar Zeuschelstraße 36B, 13127 Berlin, Germany hello@zweikarta.com