Girovo Privacy Policy

1About Girovo

Girovo is a banking app for accounts at German banks that offer FinTS (HBCI with PIN/TAN). It is available on Google Play for Android and on GitHub for Android, Windows and Linux. Girovo connects your device directly to your bank: there is no Girovo server in between, and you do not need an account with us. This policy covers all versions of Girovo and the website girovo.de.

2Data Controller and Contact Details

The controller for data processing related to Girovo is:

For privacy questions about Girovo, write to contact@girovo.de.

More details about the provider are in the legal notice (Impressum).

3This Website (girovo.de)

Hosting

girovo.de is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), acting on behalf of MT-Media (data processing under Article 28 GDPR). When you visit the website, Cloudflare processes your IP address, date and time, the address you request, your browser's identifier (user agent) and the page you came from, to deliver the website and protect it from attacks.

No cookies, no tracking

girovo.de sets no cookies and uses no analytics or advertising services. Fonts, images and all other files of the website are loaded from girovo.de itself.

Email

If you write to contact@girovo.de, we process your email address and the content of your message to answer it, and delete it once it is dealt with and no retention obligation applies.

4Data Girovo Processes

Login name and PIN

You enter them, and Girovo sends them only to your bank, over an encrypted connection, to log you in and to approve orders. Girovo does not store your PIN – unless you turn on fingerprint login on Android: then your PIN is stored on your phone, encrypted with a key in the Android Keystore that only your fingerprint unlocks. Adding a new fingerprint to the phone deletes it.

Account data from your bank

Balances, transactions, pending bookings, standing orders, messages and the account holder's name, as your bank sends them. Girovo shows them, and they stay on your device. Girovo keeps transactions beyond your session only if you turn on "Umsätze behalten" (keep transactions) – then encrypted with your PIN.

Transfers

The payee's name, IBAN, amount and reference you enter go to your bank so it can carry out the order – including your bank's verification of the payee. Templates, account names, notes and budgets you create are stored on your device, encrypted.

Google Play subscription (Google Play version only)

The Google Play version offers an optional subscription for additional features. Purchase, payment, renewal and cancellation are handled entirely by Google Play and your Google account. MT-Media never receives payment details such as card numbers or bank details. Girovo asks Google Play whether a subscription is active (product, purchase state and purchase token) to unlock the features; that status is stored on your device. Through the Google Play Console, MT-Media receives order data for each purchase, such as order number, product, price, country and date, but not your name or email address.

Fingerprint (Android)

Android checks your fingerprint. Girovo never receives fingerprint data.

GiroCode scanning (Android)

Girovo uses Google's code scanner from Google Play services. Girovo has no camera permission and receives only the text of the scanned code. Images and PDFs you share with Girovo or pick are read on your device and are not uploaded.

Company logos (optional)

Off until you agree. Then merchant names from your transactions are sent to Brandfetch to load their logos; Brandfetch sees your IP address. You can turn this off at any time in the session menu.

Category text model (optional)

A download from Hugging Face, which sees your IP address. Sorting transactions into categories happens on your device.

Updates

The version from GitHub asks GitHub for new versions; GitHub sees your IP address. The Google Play version is updated by Google Play.

Error reports

When something unexpected goes wrong in the app, it sends an error report to a server at telemetry.elnino0916.de, run by a technical service provider on behalf of MT-Media. Reports are scrubbed of account data, amounts and names; they contain technical details (app version, operating system, where the error happened) and a random ID for that app start. The server sees your IP address.

Usage data (optional)

Only if you agree ("Nutzungsdaten teilen"), to the same server: which parts of the app you use, how logins go and how long your bank takes to answer, with its bank code (BLZ), plus a random installation ID. Never your login name, PIN, IBANs, balances, transactions, amounts or payees. You can turn this off at any time in the session menu; that deletes the installation ID.

5Legal Bases (GDPR)

Article 6(1)(b) GDPR – contract

for the functions you use: connecting to your bank, showing your accounts, transfers, and for the Google Play subscription.

Article 6(1)(a) GDPR – consent

for usage data, company logos, fingerprint login and keeping transactions. You can withdraw your consent at any time in the app.

Article 6(1)(c) GDPR – legal obligation

for keeping subscription order data as long as tax and commercial law require.

Article 6(1)(f) GDPR – legitimate interest

for error reports, update checks and delivering and protecting this website, to find and fix errors and keep the app and the website secure.

6Where Data Is Stored

Your banking data is stored only on your device, in the app's private storage – encrypted with your PIN where it is kept beyond a session. MT-Media runs no server that stores your banking data. Your bank processes your data under its own privacy policy.

7Recipients

Your bank

for everything you do with your account in Girovo.

Cloudflare

delivers girovo.de on behalf of MT-Media (data processing under Article 28 GDPR).

Google

Google Play for downloads, updates and the subscription of the Google Play version, and the code scanner from Google Play services. Google processes this data as a separate controller under its own privacy policy.

Technical service provider for error reports and usage data

It runs the server at telemetry.elnino0916.de on behalf of MT-Media and is bound by its instructions (data processing under Article 28 GDPR).

Brandfetch, Hugging Face and GitHub

only if you turn on company logos, download the text model or use the GitHub version.

Girovo does not sell data, shows no ads and does not track you across apps. Cloudflare, Google, Brandfetch, Hugging Face and GitHub may transfer data to the USA; they rely on the EU-US Data Privacy Framework or standard contractual clauses for this.

8Retention and Deletion

Data on your device stays until you delete it: in the session menu ("Gespeicherte Daten löschen", "Gerät vergessen", turning off "Umsätze behalten"), by logging out, which ends the session, or by uninstalling the app. Error reports and usage data are kept only as long as needed to analyse errors and improve the app. MT-Media keeps subscription order data as long as tax and commercial law require, usually up to ten years.

9Your Rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw consent at any time. You can also lodge a complaint with a data protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. To exercise your rights, write to contact@girovo.de. You cancel your subscription in Google Play under "Payments & subscriptions".

10Children

Girovo is not directed at children.

11Security

Girovo connects only over encrypted connections (TLS). Saved data is encrypted on your device. No method of storage or transmission is completely secure.

12Changes to This Policy

This policy may change when the app or the law changes. The current version is always published on this page.