Privacy Policy for the NA App

The party responsible for data processing in this app is:

Narcotics Anonymous Regions-Service Komitee e.V. (NARSK e.V.)
c/o Narcotics Anonymous Büro
Haus der Volksarbeit
Eschenheimer Anlage 21
60318 Frankfurt am Main
Germany
Represented by the board: L. Bittner
E-mail: vereinsvorstand@narcotics-anonymous.de

This statement describes what data the app processes. There is no advertising and no sharing of your data for advertising purposes.

1. Data that stays on your device only

Name, clean time date, favourites, subscribed channels, listened markers and settings are stored by the app locally only. This information is voluntary and is not transmitted to us or to third parties. You can change or delete it at any time in the options.

2. Loading content from the internet

Meetings, media library, conventions and messages are loaded by the app from our server or from the meeting databases (BMLT). When content is retrieved, your IP address is – unavoidably for technical reasons – transmitted to the respective server. Audio files in the media library are streamed directly from our server. The legal basis is our legitimate interest in providing the app content (Art. 6(1)(f) GDPR).

3. Access to the media library

The audio files in the media library are access-protected on our website. The app signs in using a shared access whose password you enter in the options. No personal user account is created and no assignment to an individual person takes place. During sign-in and file retrieval, the access credentials and your IP address are transmitted to our server and stored there in the usual server log files. The legal basis is our legitimate interest in protecting the content against unauthorised access (Art. 6(1)(f) GDPR).

4. Map view and location search

When you open the map, the map tiles are loaded from the servers of OpenFreeMap (vector tiles based on OpenStreetMap data). When you search for a place, your input is transmitted to the geocoding service Nominatim of the OpenStreetMap Foundation. In both cases your IP address is transmitted to these servers. The legal basis is Art. 6(1)(f) GDPR.

5. Location

If you use the “Near me” function, the app determines your device location. It is used on the device only, in order to display meetings in your vicinity, and is not transmitted to us or to third parties. The location permission is voluntary and can be withdrawn at any time.

6. Push notifications (Firebase Cloud Messaging)

Only if you allow push notifications does the app use Google’s Firebase Cloud Messaging service. In doing so, a device identifier (push token) and your IP address are transmitted to Google; processing in third countries (including the USA) is possible. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by deactivating notifications.

7. Abuse protection (Firebase App Check)

To prevent our messaging server from being queried abusively, the app uses Firebase App Check with Google Play Integrity to verify that it is a genuine, unmodified installation of this app. In doing so, technical information about the app and device is transmitted to Google; no reference to your person is created. The legal basis is our legitimate interest in the security of our systems (Art. 6(1)(f) GDPR).

8. Anonymous usage statistics (Matomo)

In order to improve the app, we record anonymously which areas of the app are opened. This is done using Matomo on our own server (narcotics-anonymous.de); the data does not leave our infrastructure and is not passed on to third parties. No cookies are set, no device identifiers and no search terms are recorded; the visitor identifier is assigned randomly anew each time the app starts, so recognition across sessions is not possible. Your IP address is truncated on the server side. Any conclusions about your person are therefore excluded. You can switch the statistics off completely at any time in the options under “Usage statistics”. The legal basis is our legitimate interest in designing the app to meet users’ needs (Art. 6(1)(f) GDPR).

9. Device backup

If Android backup is active on your device, parts of the locally stored app data may be included in your own Google backup. We have explicitly excluded name and clean time date from backup and device transfer. We have no influence over your Google backup itself.

10. Obtaining the app via Google Play

The app is distributed via the Google Play Store. When downloading and updating, Google LLC or Google Ireland Limited processes data on its own responsibility (including Google account, device information, IP address). We have no influence over this. Google’s privacy policy applies: https://policies.google.com/privacy

11. Your rights

Under the GDPR you have the right to information, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Please contact the address given above.

Last updated: July 2026