Datenschutz

PRIVACY POLICY
• Effective Date: 01. 08. 2025
• The operator of the service is a subject whose identity is protected and who is, for the purposes of legal representation and efficient administration, represented by the company Baby Data s.r.o., ID: 17783747, with its registered office at Bělehradská 858/23, 120 00 Prague, Czech Republic. This company provides invoicing, service management, and legal representation on behalf of the operator.
• Applies to: all users of the App worldwide, including in the EU, USA, Canada, and other jurisdictions.
1. What Data We Collect and Why
As part of providing and operating the App, we collect the following personal data:
a) Identity and Contact Information
• Name, surname, date of birth, gender – for the purpose of verifying the user's age and ensuring compliance with legislation (e.g. age restrictions).
• Email address – for communication, technical support, and account security purposes.
• Phone number (optional) – for additional authentication and simplified communication.
• Country of origin – to tailor the App’s functionality and legal framework.
b) User Content
As a social network, we allow uploading and sharing of user content. In this context, we collect:
• Photos, videos, posts, comments, reactions (e.g. “likes”) and other interactions created by users or otherwise handled within the App.
This content is an integral part of the service and will be stored and displayed in accordance with the user’s settings and terms of use.
c) Location Data (Geolocation)
With the user’s explicit consent, we may process their:
• Precise or approximate location – to enable location-based features (e.g. local content, filtering content by place) and to display posts to other users based on their location.
This feature is always optional and the user can disable location access at any time in their device settings.
d) Technical and Analytical Data
We also collect technical data, which includes:
• IP address, device type, operating system, browser settings, language preferences and cookies, which are used to:
• ensure the security and operability of the App,
• detect and prevent misuse or attacks,
• internal analytics, traffic measurement, and service improvement.
2. Data Sharing
We do not sell your data to third parties.
Selected analytical data (e.g. number of clicks, in-app behavior) may be shared with advertising partners who have purchased ads through the Operator – typically via the Google AdMob network.
Personal data such as name, email, or date of birth is not shared with these partners.
3. Data Retention
After the user account is deleted:
• data are retained for 30 days for the purpose of possible account recovery, legal claims processing, or billing,
• after which they are securely deleted or anonymized, unless otherwise required by law.
4. Data Security
The Operator applies appropriate technical and organizational measures to protect personal data, in particular:
• encryption of passwords and sensitive data,
• restricted access to databases,
• firewall and antivirus protection,
• regular audits and vulnerability testing.
USER RIGHTS
In accordance with applicable data protection laws, in particular:
• General Data Protection Regulation (GDPR) – applicable in the EU/EEA,
• California Consumer Privacy Act (CCPA) – applicable to California (USA) residents,
• other regional regulations (e.g. LGPD in Brazil, PIPEDA in Canada),
users have the following rights:
1. Right of Access
You have the right to request confirmation whether your personal data are being processed, and to obtain a copy of the data we hold about you.
2. Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
3. Right to Erasure (so-called Right to be Forgotten)
You may request the deletion of your personal data, especially if:
• the data are no longer necessary for the purposes for which they were collected,
• you withdraw your consent to processing (if processing is based on consent),
• you object to the processing and there are no overriding legitimate grounds,
• the processing was unlawful.
Note: Some data may need to be retained for a period required by law (e.g. accounting, security records, etc.).
4. Right to Restriction of Processing
You have the right to request restriction of processing if:
• you contest the accuracy of the data,
• the processing is unlawful and you request restriction instead of erasure,
• we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims.
5. Right to Data Portability
To the extent provided by law (in particular GDPR), you have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit them to another controller.
6. Right to Object
You have the right to object at any time to the processing of data we perform based on:
• legitimate interest,
• direct marketing (including profiling).
7. Rights under the CCPA (for California Residents)
In addition to the above rights, California users have the right to:
• request information about the categories of personal data we collect about them and the purposes of use,
• object to the “sale of personal data” (we do not sell your data),
• be free from discrimination for exercising their rights (we will not restrict your access to the App if you exercise your rights).
8. How to Exercise Your Rights
You can exercise your rights through:
• the user settings in the App (if available),
• by sending an email to: support@peoplezip.com.
We will process your request without undue delay, but no later than within 30 days of receipt (the deadline may be extended by 60 days in case of complexity or a high volume of requests, in which case you will be informed).
DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
Due to the international nature of the services provided, some user personal data may be transferred outside the European Economic Area (EEA), including to countries that may not provide an equivalent level of data protection as EEA legislation (e.g. GDPR).
1. Where Data May Be Transferred
Data transfers may occur particularly in the following cases:
• Storage of data on servers and cloud services located outside the EEA (e.g. in the USA),
• Use of third-party services (e.g. hosting providers, analytics services, advertising networks),
• Access by technical support, developers, or other authorized persons located outside the EU.
2. Legal Basis for the Transfer
All data transfers outside the EEA are carried out in accordance with Chapter V of the GDPR, in particular based on one of the following legal bases:
• European Commission adequacy decisions (e.g. Israel, Canada for commercial entities, etc.),
• Standard Contractual Clauses (SCC) approved by the European Commission,
• Binding Corporate Rules (BCR), if implemented,
• Explicit user consent, if no other legal basis is available and the transfer is necessary.
3. Protection During Transfer
For every transfer, the Operator applies appropriate technical and organizational measures to ensure data security, including:
• encryption of transmitted data,
• access limitation based on authorization only,
• regular review of contractual relationships with third parties.
4. Notice to Users Outside the EU
Users located outside the EU/EEA acknowledge that:
• their data may be transferred to and processed in jurisdictions different from their home country,
• such transfer is necessary to provide the App on a global scale,
• access to their data may be granted in accordance with applicable local laws.
COOKIES AND TRACKING TECHNOLOGIES
What Are Cookies?
Cookies are small text files stored on your device when you visit a website or use the App. They are used to recognize the user, remember their preferences, or track their interactions.
In addition to cookies, other tracking technologies may also be used, such as pixel tags, SDK identifiers, local storage, or device fingerprinting.
What Types of Cookies Do We Use?
Within the App, the following categories of cookies may be used:
a) Necessary (Technical) Cookies
• Ensure the basic functionality of the App (e.g. login, security, language settings).
• The service would not work without them.
• Do not require consent.
b) Analytical and Performance Cookies
• Help us understand how the App is used (e.g. number of visits, in-app behavior).
• We use them to improve the services and user experience.
• Processed anonymously or pseudonymously.
• Require user consent (e.g. via cookie banner).
c) Marketing Cookies
• Used to display personalized ads within advertising networks (e.g. Google AdMob).
• Allow tracking across apps and devices.
• Require the user's prior explicit consent.
Cookie Settings
When using the App for the first time, the user is prompted to choose their preferences via a cookie banner. The user may:
• accept all categories of cookies,
• reject all except the necessary ones,
• customize their preferences (e.g. only analytics, no marketing).
Settings can be changed at any time via the “Cookie Settings” section in the App or on the website.
Third-Party Tracking
Some cookies may be set by third parties (e.g. analytics and advertising providers), who act as independent data controllers. Typically, these include:
• Google AdMob (for displaying ads),
• Google Analytics or Firebase Analytics (for user statistics and behavior).
The Operator is not responsible for processing carried out by these entities beyond our control. The user is always informed about their involvement through the cookie management interface.
LEGAL BASES FOR PROCESSING PERSONAL DATA
We process personal data in accordance with Article 6 of the GDPR (and similar laws outside the EU), based on the following legal grounds:
1. Contract Performance (Art. 6(1)(b) GDPR)
Processing is necessary to provide the features of the App, including:
• creating and managing the user account,
• enabling uploading, displaying, and interacting with content,
• ensuring secure access to the service and user support.
2. Compliance with Legal Obligations (Art. 6(1)(c) GDPR)
In some cases, we are required to retain or disclose data due to:
• accounting and tax regulations,
• fraud prevention or misuse,
• cooperation with public authorities (e.g. courts, police).
3. Legitimate Interest of the Operator (Art. 6(1)(f) GDPR)
We apply legitimate interest in cases where:
• we conduct internal analysis and statistics to improve App functionality,
• we detect and prevent abuse or security incidents,
• we contact users in connection with the operation of the service (non-marketing).
When applying legitimate interest, we always perform a proportionality test and respect users’ rights and freedoms.
4. User Consent (Art. 6(1)(a) GDPR)
In some cases, we require the user’s explicit consent, especially for:
• processing location data,
• storing marketing cookies,
• sending direct marketing communications (e.g. newsletters).
Consent is always voluntary and can be withdrawn at any time without negative consequences.
5. Protection of Vital Interests or Rights of Third Parties (Art. 6(1)(d) or (e) GDPR)
In exceptional cases, processing may be necessary, for example, to:
• protect the health, life, or safety of the user or others,
• fulfill a task carried out in the public interest (if required by law).
CHANGES TO THIS POLICY
The Operator reserves the right to unilaterally modify this Privacy Policy at any time, especially:
• in response to changes in legislation,
• when expanding the functionality of the App,
• to clarify or enhance transparency.
You will be informed of all material changes in a timely manner via the App, email, or another appropriate method.
By continuing to use the App after the changes take effect, you agree to this Policy.
If you do not agree with the new version, we recommend you stop using the App and, if applicable, request account and data deletion.