Privacy
What the Abili app collects, why it is collected, how long it is kept, and what you can ask us to do about it.
Who is responsible
The controller for the processing described here is Abili UG (haftungsbeschränkt),Postfach 12 19, 82184 Gröbenzell,Deutschland. Contact: info@abili.de.
What the app collects
Account data
Creating an account stores the email address, name and telephone number you provide, together with an encrypted password. Signing in issues an access token that is stored in the secure keystore your operating system provides — the iOS Keychain or the Android Keystore — and never in ordinary app storage.
Order data
Placing an order stores what you ordered and for whom: the recipient's telephone number, the amount, the selected product and the order's status over time. This data is necessary to perform the contract you enter into.
Payment evidence
When you pay by bank transfer you can upload a receipt as proof. The image you select is uploaded to our servers and attached to the order. We use it only to match your payment to your order.
Push notifications
If you allow notifications, the app registers a device token so we can tell you when an order's status changes. Notifications carry only what is needed to open the right screen; the details are fetched from our servers after you open the app. You can revoke the permission in your device settings at any time, and the token is deleted when you sign out or delete your account.
App updates
On launch the app asks the update service that distributes its releases whether a newer version exists. That request carries the app version, the platform, and a random identifier created the first time the app runs on a device. The identifier is generated by the app, is not derived from anything about your phone, is not an advertising identifier, and is not connected to your account — it distinguishes one installation from another so an update can be rolled out gradually. The check happens whether or not you are signed in, and it carries no personal data.
Technical data
Our servers record the technical information needed to operate and secure the service, such as the time of a request, the endpoint called and the result. Crash and error reports from the app include the app version and the technical context of the failure. Access tokens, passwords and payment evidence are excluded from logs and error reports.
What the app does not collect
- We do not use advertising identifiers and do not track you across other apps or websites.
- We do not collect your location.
- We do not read your contacts, photos or files beyond the single image you choose to upload.
Who else is involved
Some processing necessarily involves other parties, and each receives only what its function requires:
- the mobile network operator in the destination country, which receives the recipient's telephone number — that is what delivering a top-up consists of,
- the app distribution platform you installed from, and the push notification service your device uses,
- our hosting provider, and the service that delivers our email,
- the banks that execute your transfer, which we do not choose and which see the transfer as your own bank shows it to them.
The company's published policy names the individual providers it uses. We do not sell personal data, and nothing is shared with advertising networks or data brokers.
How long data is kept
Account data is kept while your account exists. Orders, invoices and payment records are kept for the statutory retention periods that German commercial and tax law sets for accounting records; those periods are set by law rather than chosen by us. See account deletion for what is removed when you close your account and what must be retained.
Your rights
You can close your account yourself, from this website or from inside the app: see account deletion.
Under the GDPR you may request access to the personal data we hold about you, correction of inaccurate data, deletion, restriction of processing, portability of the data you provided, and you may object to processing based on legitimate interests. To exercise any of these, write to info@abili.de from the address your account uses.
You also have the right to lodge a complaint with a data protection supervisory authority in the country where you live or work.
Changes
When this notice changes materially we will say so in the app before the change takes effect.