Privacy Policy (EN)
Effective Date: April 2026
​
Last Updated: April 2026
​
This Privacy Policy explains how Groopzy collects, uses, and protects your personal data. It applies to our website, our iOS app (App Store), and our Android app (Google Play Store).
1. Data Controller
The data controller responsible for processing your personal data is:
​
Tobias Neef
Käfertaler Straße 21, 68167 Mannheim, Germany
tobias@linus.works
​
Daniel Schotte
Mascha-Kaleko-Straße 3, 50321 Brühl, Germany
daniel@linus.works
2. What Data We Collect
Website (groopzy.app - Beta Waitlist)
When you sign up for the Groopzy beta waitlist, we collect:
​
-
Your email address (required)
-
Your first name (required)
-
Your last name (required)
-
Your current way of planning meetups (optional)
Mobile App (Groopzy — iOS & Android)
During app usage, we collect:
​
-
Your name (as provided during account creation)
-
Your email address
Â
These are stored and linked to your user account to provide the Groopzy service.
Groopzy uses OpenAI's API to power its AI assistant features. Messages you send within the app are processed by OpenAI on our behalf. OpenAI acts as a data processor and does not use this data to train its models by default. For details, see OpenAI's Privacy Policy.
Automatically Collected Data (Website)
Our website is hosted via Wix.com. When you visit groopzy.app, Wix and Wix Analytics may automatically collect:
​
-
IP address
-
Browser type and version
-
Operating system
-
Pages visited and time spent
-
Referral source
-
Device type
Â
This data is used to analyze website traffic and improve user experience. Wix acts as a data processor on our behalf. For details, see Wix's Privacy Policy.
3. How We Use Your Data
-
Send beta invitation to waitlist signups — Consent (Art. 6(1)(a) GDPR)
-
Provide and operate the Groopzy app — Contract performance (Art. 6(1)(b) GDPR)
-
Identify users within the app — Contract performance (Art. 6(1)(b) GDPR)
-
Analyze website traffic via Wix Analytics — Legitimate interest (Art. 6(1)(f) GDPR)
-
Comply with legal obligations — Legal obligation (Art. 6(1)(c) GDPR)
​
We do not sell your data, use it for advertising, or share it with third parties for their own purposes.
4. Data Sharing
We share your data only with:
​
-
Wix.com — our website hosting provider (processes data on our behalf, GDPR-compliant)
-
OpenAI — AI responses within the app are powered by OpenAI's API; OpenAI processes message content on our behalf as a data processor (no model training on your data by default). See OpenAI's Privacy Policy.
-
Law enforcement or authorities — only if legally required
Â
All processors are contractually bound to handle data in compliance with applicable data protection law.
5. Data Retention
-
Waitlist data is retained until the beta program ends or until you request deletion.
-
App user data is retained as long as your account is active or as long as required to provide the service.
-
Upon your request, we will delete your data without undue delay, unless we are legally required to retain it.
6. Cookies
Our website uses cookies through Wix.com, including:
-
Strictly necessary cookies — required for the website to function
-
Analytics cookies — used by Wix Analytics to understand visitor behavior
You can manage cookie preferences via the cookie banner on our website or through your browser settings.
7. Children's Privacy
Groopzy is not intended for children under the age of 13 (or 16 in jurisdictions where this applies, e.g., Germany). We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.
8. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
​
-
Access — request a copy of your data (Art. 15 GDPR)
-
Rectification — correct inaccurate data (Art. 16 GDPR)
-
Erasure — request deletion of your data (Art. 17 GDPR)
-
Restriction — limit how we use your data (Art. 18 GDPR)
-
Portability — receive your data in a portable format (Art. 20 GDPR)
-
Objection — object to processing based on legitimate interest (Art. 21 GDPR)
-
Withdraw consent — at any time, for consent-based processing
Â
To exercise your rights, contact us at the addresses listed in Section 1. You also have the right to lodge a complaint with your local data protection authority.
9. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Only authorized personnel have access to personal data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review this page periodically.
11. Contact
For any privacy-related questions or requests, please contact:
​
Tobias Neef — tobias@linus.works
Daniel Schotte — daniel@linus.works