Legal

Privacy policy

Last updated: 12 September 2026

1. Controller

Benjamin Helzle, Banaan
Roetgenbachstraße 66, 52159 Roetgen, Germany
Email: info@banaan.app

2. Data Banaan processes

We process personal data only where needed to operate and secure Banaan and provide the features you use. This may include account and contact data, language and settings, training and activity data, connected providers, fueling plans and reviews, technical logs, and subscription and payment status.

3. Purposes and legal bases

Processing is carried out in particular for performance of the contract and provision of the app (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), legitimate interests in secure and reliable operation (Art. 6(1)(f) GDPR), or consent where required (Art. 6(1)(a) GDPR).

4. Account, login and email

Banaan processes your email address and the data required for the login method you choose. Google Login uses data necessary for authentication. Magic Link uses your email address to deliver the sign-in link. Service and fueling messages are sent according to your message preferences.

5. Connected training services

If you connect Intervals.icu or Strava, Banaan processes the training, activity and profile data you authorize where needed for calculation, planning, synchronization or analysis. Connections are made only after your authorization and can be disconnected.

6. Payments through Paddle

Paid subscriptions are processed through Paddle as Merchant of Record. Paddle processes data required for checkout, payment, invoicing, tax, fraud prevention, refunds and subscription management under its applicable terms and privacy notices. Banaan receives the subscription and transaction information needed to provide and manage product access.

7. Hosting, server logs and security

Banaan is operated on server infrastructure in Germany. Technical data such as IP address, timestamp, requested resource, user agent and error data may be processed in server logs for stability, troubleshooting and abuse prevention.

8. Cookies and sessions

Banaan uses technically necessary cookies or session information for login, security, language and app functions. Non-essential tracking or marketing technologies will only be used on an appropriate legal basis and with the required information or consent.

9. Retention

Data is retained only as long as necessary for its purpose, the contractual relationship or legal retention duties. When you delete your account, personal app data is deleted or anonymized unless legal obligations or legitimate reasons require further retention.

10. Recipients and international transfers

Depending on the features you use, data may be transferred to technical service providers or connected services. Where data is transferred outside the EEA, we use the safeguards required by the GDPR where applicable.

11. Your rights

Subject to the GDPR, you have rights including access, rectification, erasure, restriction, portability and objection. You can withdraw consent at any time for the future and may lodge a complaint with a competent data protection authority.

12. Privacy contact

For privacy requests, contact us at info@banaan.app.