Privacy Policy

Your personal data is stored and processed on secure servers operated by our hosting provider, INTROSERV d.o.o., located in:

• Primary Data Center: Naaldwijk, Netherlands
• Backup/Failover Locations: Naaldwijk, Netherlands

If personal data is transferred outside the European Economic Area (EEA) — for example, to our cloud service providers or partners located in countries that do not have an adequacy decision by the European Commission — we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (BCRs) where applicable
• Encryption and pseudonymization to enhance data protection

We process your personal data based on one or more of the following legal grounds:

• Consent: When you voluntarily provide data or agree to optional features
• Performance of a Terms of Service: To provide the App’s services and functionalities
• Legal Obligation: To comply with applicable laws
• Legitimate Interests: For analytics, improvements, and fraud prevention

We use your data to:

• Operate and maintain the App
• Personalize your experience
• Respond to customer support requests
• Send service-related notifications and updates
• Analyze app usage for improvements
• Comply with legal obligations

We do not sell your personal data. We may share it with:

• Service providers and partners who support the app’s functions
• Authorities when required by law or court order
• Affiliates and subsidiaries under common ownership
• Third-party analytics providers (e.g., Google Analytics)

If your data is transferred outside the European Economic Area (EEA), we ensure adequate protection by:

• Using countries with adequacy decisions by the European Commission, or
• Applying Standard Contractual Clauses (SCCs) approved by the European Commission

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Criteria include:

• Duration of your account activity
• Legal obligations
• Resolution of disputes

As a data subject, you have the following rights:

• Right to Access: Know what personal data we hold
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion (“right to be forgotten”)
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent
• Right to Lodge a Complaint with a supervisory authority

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption
• Access controls
• Regular audits
• Incident response procedures

We implement appropriate technical and organizational security measures to protect your personal data. However, in the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach (as per Article 33 GDPR).
• Inform affected users directly and without undue delay, describing the nature of the breach, its likely consequences, and the steps taken to address it (as per Article 34 GDPR), unless the breach is unlikely to result in a risk to your rights.