Privacy policy

Last updated: November 2026

Controller

The controller is the provider named in the imprint.

Please send questions about privacy and requests about your rights by email to the address given there.

This website

This website sets no cookies, uses no tracking and loads nothing from third parties. It is delivered through Cloudflare, which processes technically necessary connection data such as your IP address to deliver the page and protect it from attacks. Our server does not store IP addresses or write them to logs. The server runs at Hetzner in data centres in Germany and Finland.

Tester wait list

On this website you can sign up to test the app. For that we store:

• the email address of your Google account,
• whether you use Android or an iPhone,
• your town or postcode, if you give one,
• the page's language, the version of the consent text and when you signed up.

We use these details only to invite you to the test. Before that, we ask you by email to confirm your sign-up. Your town or postcode shows us where the app is needed.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time by emailing hallo@nextplug.app, and we then delete your details.

When we invite you, we add your email address to the tester list in Google Play Console. Google then receives it so it can give you access to the test on Google Play. Data may be transferred to the USA in the process. We give your details to no one else. Like the whole website, the sign-up goes through Cloudflare, and it is stored on our server at Hetzner.

We keep your details until the test phase ends, at most 12 months after you signed up, or until you withdraw your consent, whichever comes first.

To prevent abuse, our server uses your IP address briefly in memory to limit how many sign-ups can be made per hour. It does not store it or write it to logs.

The app

The app works without an account. So that it can notify you, our server processes:

• a random identifier the app creates on first use; only a hash of it is stored,
• your device's push token, the platform (Android or iOS) and the app's language,
• the charger you chose, your settings for it, the notifications you asked for, and the messages we sent you.

The legal basis is Art. 6(1)(b) GDPR: without this data the app cannot deliver the notifications you asked for.

Location and place search

The app uses your location only when you tap "Use my location". It then sends the coordinates to our server, which uses them, rounded, to look up nearby chargers in MobiData BW's Open ChargePoint DataBase. We do not store your location or write it to logs. When you search for a place, our server forwards the search term to the OpenStreetMap Foundation's Nominatim service; the request comes from our server, not from your device. We keep search results only briefly in memory.

Car and providers

Your car details and the providers you hide stay on your device. The app sends them only when it asks for nearby free chargers. The server does not store them.

Push notifications

Notifications are delivered through Expo's push service (650 Industries, Inc., USA) and Google's Firebase Cloud Messaging. These services receive the push token and the message content. Data may be transferred to the USA in the process.

IP addresses

The app's requests also go through Cloudflare. Our server uses your IP address only briefly in memory to limit how many new installs can be created per hour. It does not store it or write it to logs.

No ads, no tracking

The app contains no ads, no analytics or tracking tools, and sends no crash reports to third parties.

Retention

We keep the app's data while you use the app. If the app has not contacted our server for 6 months, we delete it automatically. You can delete it yourself at any time, in the app under Settings → “Delete my data”. Here is how. A push token that has become invalid is removed automatically.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can also complain to a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.