crisp is an app for finding and rating drinking fountains in Switzerland. This page explains exactly what we store, why, and how to get rid of it. It's short, because we collect very little.
The short version. We store your email, username and password so you can have an account, plus the ratings, favourites and photos you choose to add. Your location never leaves your phone. There are no analytics, no advertising, and no tracking of any kind. You can delete everything from inside the app at any time.
When you create an account we store your email address, a username, and your password. The password is never stored in readable form — it is hashed with bcrypt, a one-way function, so we cannot see or recover it. We also record when the account was created.
When you use the app we store the things you actively add:
Our server keeps standard request logs, which include your IP address, the time of the request and which part of the API was called. These exist to keep the service running and to detect abuse, and are not used to build a profile of you.
This list is as important as the one above.
Under the GDPR, each kind of processing needs a legal basis:
| Data | Basis |
|---|---|
| Account details | Performance of a contract (Art. 6(1)(b)) — we can't give you an account without them. |
| Ratings and favourites | Performance of a contract (Art. 6(1)(b)) — these are the service itself. |
| Photos you upload | Your consent (Art. 6(1)(a)), given by choosing to upload. You can withdraw it by deleting the photo or your account. |
| Server logs | Legitimate interests (Art. 6(1)(f)) — keeping the service available and secure. |
If you are in Switzerland, the equivalent provisions of the revised Federal Act on Data Protection (revDSG) apply, and the rights described below are equivalent.
We don't sell or share your data. A small number of providers necessarily handle it in order for the app to work:
You can delete your account and everything attached to it from inside the app: open Account, scroll to the bottom and tap delete account. You'll be asked to confirm, because it cannot be undone.
This permanently removes your email, username, password hash, ratings, favourites and uploaded photos. Aggregate fountain scores are recalculated so your ratings no longer count towards them. If you'd rather do it by email, write to crisp@ifmv.org and we'll handle it.
You can ask us to:
Write to crisp@ifmv.org and we'll respond within one month. You don't need to give a reason.
If you think we've handled your data badly, you can complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or in the EU the data protection authority of the country you live in.
All traffic between the app and our server is encrypted with TLS. Passwords are hashed with bcrypt and are never stored or transmitted in readable form. Sessions use signed tokens, held in your device's secure keychain rather than ordinary app storage. Access to the production database is restricted to the operator of the service.
No system is perfectly secure, but crisp deliberately holds very little sensitive data — there is no payment information, no real-name requirement and no location history to lose.
crisp is not directed at children and we don't knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we'll remove it.
Ratings and photos you add are visible to other users of the app, and your username appears on the public leaderboard alongside the number of ratings you've made. Your email address is never shown to other users. Please don't upload photos of identifiable people without their agreement.
If we change how we handle data we'll update this page and move the date at the top. For anything significant we'll tell you in the app before it takes effect.
The controller for the data described on this page is:
Isabella Müller-Vogt
Im Bäumle 4
71706 Markgröningen
Email: crisp@ifmv.org
Questions, requests or complaints about your data go to the same address, and we'll respond within one month.