For the Nimroo app and nimroo.loobia.net
Mehrdad Eshghabadi
Fennebergstr. 2
65307 Bad Schwalbach
Deutschland
Email: eshghabadi000@gmail.com
Sign-in works only through Sign in with Apple or Google. There is no password. We receive a unique identifier and, if you allow it, your email address. With Sign in with Apple you may use a private relay address — that is enough for us. We store the identifier, the email address (private, never public), your pseudonym, your karma score, your role, and the optional onboarding details (country, city, language, and optionally gender for the "female practitioner" filter).
Questions, answers, ratings, helpful votes, saved questions, reports, and your participation in the daily pulse question. Only the text, the pseudonym and the karma level are public. How you voted in the pulse question is visible to you alone — only the aggregate result is published.
Photos attached to a post are re-encoded on your device, which removes all EXIF data including GPS coordinates. Only the image itself reaches our server, under a random filename.
Location is requested only when you use "near me" or automatic country detection. For country detection the coordinates are sent rounded to one decimal place (roughly 11 km). For radius search, coordinates and radius are sent for the calculation. Your location is not stored.
For push messages we store the Firebase Cloud Messaging device token. You can disable push in the app or in your operating system.
When you tap "call", "website" or "directions" on an entry, we record that a contact took place. This serves two purposes: only people who actually made contact may leave a rating, and we bill partners for contacts generated through Nimroo. For billing we store only the target domain, the type of contact and the time — with no link to your account.
Access logs (IP address, time, path, error codes) are created for operation, debugging and abuse prevention, including per-IP rate limiting. Cloudflare sits in front of our server as protection against overload and attacks.
Nimroo is funded by advertising through Google AdMob. On iOS the app asks via Apple's App Tracking Transparency prompt before any cross-app tracking. If you decline, no personalised advertising is served. On Android you can reset or delete the advertising ID in your system settings. Provider: Google Ireland Limited, Dublin, Ireland (privacy policy).
| Service | Purpose | Location |
|---|---|---|
| Google Firebase (Authentication, Cloud Messaging) | Sign-in, push notifications | EU/USA |
| Google AdMob | Advertising | EU/USA |
| Cloudflare | Protection against overload and attacks | EU/USA |
| Anthropic (Claude) | Automated pre-screening of posts for abuse, hate and spam | USA |
| Hosting provider | Servers and database | Germany |
For automated pre-screening the text of your post is sent to Anthropic. Your pseudonym, email address and identifier are not included. Transfers to the USA rely on the EU Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, objection, and to withdraw consent at any time. You can delete your account directly in the app under "Profile → Delete account", which permanently removes your account and your content. You may also contact us at eshghabadi000@gmail.com, and you have the right to lodge a complaint with a supervisory authority.
Nimroo is intended for people aged 16 and over. We do not knowingly collect data from younger children; if we learn of such an account, we delete it.
All traffic is encrypted (HTTPS/TLS). The database is not reachable from the internet. Administrative functions are separately protected.