Privacy Policy for the Bimmerfit App
Effective date: 4 September 2026
Controller
Yener Yaman, Altein & Yaman GbR, Koblenzerstr. 29, 57482 Wenden, Germany
Email: info@bimmerfit.de
Data We Process
To provide a remote connection, the app processes a randomly generated installation identifier, IP and connection data, the vehicle identification number (VIN), vehicle model, connection time and technical latency values. Access tokens are stored in encrypted form on the device.
If you voluntarily submit feedback or a portal ticket, your message and, depending on your input, its category, rating, your name, email address, device model and VIN are transmitted to us. Password recovery requests store the username, timestamps and only the hash of a short-lived one-time code.
If coder self-registration is enabled, we process the username, display name, email address, verification status, account status and subscription status. Payments are processed by PayPal; Bimmerfit stores only the PayPal subscription identifier, its status and payment timestamps, but no payment details.
Purposes and Legal Bases
We process this data solely to provide and secure the remote-coding connection initiated by you, diagnose technical faults and respond to support requests. The legal bases are Article 6(1)(b) and Article 6(1)(f) GDPR.
Recipients and Retention
Connection data is visible to the remote coder authorised for the relevant session. The server is hosted by Hetzner Online GmbH in Germany. If subscriptions are enabled, the data required to create and verify a subscription is transferred to PayPal. Active session tokens expire after no more than three hours. Vehicle history and app feedback are held only in the relay service's memory and deleted when the service restarts. Portal tickets remain stored while they are being handled and are visible only to the relevant coder and administrators. Password recovery requests expire after no more than 24 hours, and issued codes after 20 minutes. Security logs may contain IP addresses and are deleted in accordance with our operational retention periods.
No Advertising or Tracking
The app does not use advertising SDKs, analytics SDKs or cross-app tracking. We do not collect location data.
Your Rights
You may have rights to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. You can delete local app data at any time in Settings. For server-side access or deletion requests, contact info@bimmerfit.de.
BMW Notice
Bimmerfit is an independent service and is not affiliated with or authorised by BMW AG.