Mobile App Development Company in Hamburg

We scope and quote each build rather than publishing bands. A scoped MVP iOS or Android app for a Hamburg D2C brand or fintech is a ten to fourteen week engagement, including BFSG accessibility from day one and a GDPR/TTDSG consent flow. A production cross-platform app (React Native or Flutter) for an Otto-pattern e-commerce or About You-pattern fashion-discovery experience adds a backend, personalisation, payment integration, and App Store optimisation. Full native iOS plus native Android builds with AR (Mytheresa-grade luxury), offline-first sync (Lufthansa Technik MRO field), or MDR companion-device pairing (Olympus endoscopy) sit at the top of the range. Hamburg sits at Berlin and Munich levels — slightly above Leipzig and Hannover.

The BFSG implemented the EU Accessibility Act and became enforceable on 28 June 2025. Consumer-facing mobile apps in scope (e-commerce, banking, e-books, telecoms tickets, transport tickets) must meet WCAG 2.1 AA + EN 301 549 V3.2.1 mobile accessibility requirements. Our builds ship with screen-reader (VoiceOver iOS, TalkBack Android) support, dynamic type scaling, minimum 4.5:1 contrast, keyboard and switch-control navigation, captioned video, and a published Barrierefreiheitserklärung (accessibility statement) including the feedback mechanism §16 BFSG requires. Marktüberwachungsbehörden can audit and fine up to EUR 100,000 per violation. We deliver evidence packs in German with the conformance claim and known-limitation log.

TTDSG §25 (Telekommunikation-Telemedien-Datenschutz-Gesetz, in force December 2021) requires opt-in consent for storing or accessing information on a user’s device beyond what is strictly necessary, applied to mobile-app identifiers (IDFA, Android Advertising ID, fingerprinting) as well as browser cookies. Our mobile consent flow combines App Tracking Transparency (ATT) on iOS with a custom TCF 2.2-compliant CMP (consent management platform) on both platforms, persists granular purpose-level consent under GDPR Art. 7, and replays consent state to analytics, attribution, and personalisation SDKs. The Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit has been particularly active on TTDSG mobile-app enforcement — Hamburg-headquartered clients face direct scrutiny.

Yes. We ship AR try-on for apparel, eyewear, and footwear using Apple ARKit (with RoomPlan for sizing context on iPhone Pro models with LiDAR) and Google ARCore on Android. For luxury (Mytheresa pattern) we deliver high-fidelity garment draping via either custom-built TryOnDiffusion-style pipelines server-side rendered or licensed Snap AR Lens partners for white-label deployments. Performance budgets are strict: 30+ FPS on iPhone 13 and newer, 30+ FPS on Pixel 6 and Samsung Galaxy S22 and newer, sub-3-second AR initialisation. Personalisation backends train on opt-in style preferences with full GDPR Art. 17 right-to-erasure plumbing — important for German privacy-aware shoppers. AR session telemetry stays in eu-central-1, never crosses to US analytics defaults.

Yes. Aviation MRO at Lufthansa Technik, MTU Maintenance, and Hamburg Airport airside operations runs in hangars with spotty Wi-Fi and explicit RF restrictions near aircraft. We build offline-first iOS and Android apps with conflict-resolving local storage (Realm, SQLite with custom CRDT layer, or WatermelonDB on React Native), background sync that resumes cleanly on flaky 4G/5G, and EASA Part-145 audit-trail capture for each defect report. SAP S/4HANA integration handles work-order assignment and parts lookup. Hardware-accelerated barcode/QR scanning identifies parts and life-limited items, with EASA Form 1 release-to-service traceability. Devices are MDM-enrolled (Intune or Workspace ONE) with EU data residency and Lufthansa Technik corporate VPN posture checks before sync.

Yes. EU MDR (Regulation 2017/745) Annex I §17.2 cybersecurity essential requirements, IEC 62304 medical-device software lifecycle, IEC 81001-5-1 health-software security, and FDA Premarket Cybersecurity Guidance 2023 govern medical-device companion mobile apps. For Olympus-pattern endoscopy and microscopy companions, we deliver a documented software lifecycle (planning, requirements, architectural design, detailed design, implementation, integration testing, system testing, release) with traceability matrices Notified Bodies (TÜV SÜD, DEKRA, BSI Group) demand. Risk management aligns with ISO 14971. Cybersecurity controls implement IEC 81001-5-1 with secure pairing to the device, signed firmware updates, post-market vulnerability management with CVD (coordinated vulnerability disclosure), and SBOM generation. 21 CFR Part 11 electronic-records integrity controls are baked in for FDA-bound product variants.

German mobile commerce is not US-centric. SEPA direct debit (Lastschrift) is dominant for repeat-purchase consumer commerce, PayPal is the second-largest method by share, Klarna (Pay Later, Sofort, Pay in 3) is strong especially in fashion (About You, Zalando, Mytheresa, Bonprix), Apple Pay and Google Pay are now mainstream on iPhone and Android Pixel/Samsung, Giropay covers bank-account-direct, and credit cards (Visa, Mastercard) are a distant fifth. We integrate Stripe (with SEPA support and PSD2 SCA), Adyen (Amsterdam-headquartered, strong DACH support, used by Otto Group), Mollie (Amsterdam, popular with mid-market German e-commerce), or Computop (Bamberg, German processor used by Otto and Tchibo). PSD2 Strong Customer Authentication step-up is wired with biometric fallback on FaceID, TouchID, and Android BiometricPrompt.

We manage Apple App Store and Google Play submissions, with full German localisation review (German is the first-party language for App Store DACH metadata, not English translated), Impressum and Datenschutzerklärung links per §5 TMG, age-rating per IARC and USK (Unterhaltungssoftware Selbstkontrolle) for any in-app content rated above 0+, and Apple’s App Privacy nutrition labels mapped to actual data collection. For DSA (Digital Services Act) reporting we maintain the points-of-contact and the trusted-flagger response flow. Apple’s Digital Markets Act alternative-distribution rules (sideloading on iOS 17.4+ in EU) are evaluated case-by-case — Hamburg fashion clients have generally stayed in App Store for trust, while some publishers are testing alternative marketplaces. We file response packages to App Review Board rejections in 24-48 hours.