Draft to be reviewed before publishing. The Italian version prevails.

Privacy policy

Last updated: [date]

This policy explains which personal data the Raduna app and the www.appraduna.com website process, why, and what rights you have (Articles 13 and 14 of Regulation (EU) 2016/679, "GDPR").

1. Controller

[Full name or company name], [address], email: [privacy@appraduna.com].

2. What data we process

• Account: email address and the identifier of the Google or Apple account you sign in with. With Apple, the name Apple gives us on your first sign-in.
• Profile: username, first and last name, date of birth (only to check you are an adult; you can hide it), comune (you can hide it), short bio, photo, interests, public or private profile.
• Activity in the app: groups you belong to and your role, groups and events you create, answers to events, waitlists, reminders, subscriptions to event updates, posts and updates you publish with their photos, people you follow or block, groups pinned or hidden from your profile, notification preferences.
• Device: your phone's push notification token and its operating system (Android or iOS).
• Location: we do not use GPS. To show nearby groups and events we use the comune on your profile. Events have an exact meeting point, chosen by the organizers.
• Website: no cookies and no analytics. To delete your account from the website we use your email to send you a code.

3. Why, and on what basis

• Providing the service (account, profile, groups, events, answers, notifications): performance of a contract, Art. 6(1)(b) GDPR.
• Checking you are an adult: performance of a contract.
• Security and abuse prevention: legitimate interest, Art. 6(1)(f) GDPR.
• Push notifications: shown only if you allow them on your phone; you can turn each kind off in the app's Settings.

4. Who sees your data

Other users see your profile according to your settings (public or private, date of birth and comune hidden or shown). A group's admins see who answered its events. Content of public groups is visible to anyone, including on the website through shared links.

We use these providers, who process data on our behalf:

• Supabase (database, sign-in, photo storage) — [server region].
• Google Firebase Cloud Messaging and Apple Push Notification service (notifications).
• Google and Apple (signing in with their accounts).
• Cloudflare (website and place search data).
• OpenFreeMap (maps: your phone downloads maps from their servers, which see your IP address).
• [Email provider] (sending sign-in codes).

Some providers are based outside the European Union. Transfers then rely on the safeguards the GDPR provides (EU-US adequacy decision or standard contractual clauses).

5. How long

We keep data while you have an account. When you delete your account we immediately delete your profile, photos, memberships, answers and device tokens. Posts, updates and events you published in groups that remain stay visible without your name. [State whether and for how long copies remain in backups.]

6. Your rights

You can ask for access, rectification, erasure, restriction and portability of your data, and object to processing, by writing to [privacy@appraduna.com]. You can change much of your data directly in the app; you can delete your account in the app (Settings → Delete account) or on this page. You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Minors

Raduna is for adults only.

8. Changes

If we change this policy, we update the date above and, for important changes, tell you in the app.