Privacy Policy

1. Who processes your data

The data controllers are Kateřina Horáková and Jakub Strnad, private individuals who run the app together (joint controllers). You can contact either of us with any questions or requests at wheresmymatcha.app@gmail.com.

2. What data we store

• Account: username, email, your password only in irreversibly hashed form (we never store the password itself), your chosen language and the date the account was created. With Sign in with Apple there is no password: we store an identifier from Apple, the email address Apple shares with us, if it does (this can be a private relay address Apple creates for you), and a token that lets us also disconnect your Apple ID when you delete your account.
• Sign-in: hashed sign-in tokens valid for 60 days.
• Reviews: rating, text, price range, what you had and the date.
• Photos you add. When uploaded, we strip all metadata, including the GPS location where they were taken.
• Favourite spots and when you saved them.
• Blocking and reports: who you blocked, what you reported, the reason and any comment.
• Spots you add and opening-hour changes you make.
• Technical server logs: IP address, time and request path. Passwords and tokens are never written to them.

We don’t store your location, phone number, real name, date of birth, contacts or device data.

3. Location

The app uses your location only if you allow it on your iPhone, and only while the app is open (never in the background). It shows the spots around you and how far away they are. It is sent to our server only to find spots nearby. We don’t store it and it never appears in our technical logs. Your iPhone also uses an Apple service to work out which country you are in. You can revoke the permission anytime in your iPhone settings.

4. Why we process it

• to provide the app and your account (performance of a contract),
• to show the spots, reviews and photos you add to other users (performance of a contract),
• to protect the app from misuse, handle reported content and keep it running (legitimate interest),
• location is processed only with your consent, given through your iPhone permission.

5. What others can see

Spots, reviews and photos you add are shown to other users in the app together with your username. Your email is never shown to others.

6. Who else works with the data

We never sell your data.

• DigitalOcean, LLC runs our server, database and backups and processes data only on our instructions. Data is stored in its data centre in Frankfurt, Germany. DigitalOcean is a US company certified under the EU-US Data Privacy Framework, so any transfer of data to the US is also protected under the GDPR.
• OpenStreetMap (the Nominatim service) only receives the text you type into the address search. The request is sent by our server, so it never sees your IP address.
• Apple provides Sign in with Apple, map data, working out your country from your location, and distribution through the App Store, and follows its own privacy policy.

7. How long we keep data

We keep your data for as long as you have an account. You can delete your account in the app under Settings → Delete account. Your account and all related data (reviews, photos, favourite spots, blocks and sign-ins on all devices) are deleted immediately and permanently. They disappear from backups within 5 weeks at the latest.

Spots you added, opening-hour changes you made and your reports stay in the app, but without any information that they came from you.

Technical server logs are size-limited and continuously overwritten.

If you can’t sign in (for example, you forgot your password), email us at wheresmymatcha.app@gmail.com and we’ll delete your account for you.

8. Your rights

You have the right to access, correct, delete, restrict and port your data, to object, and to withdraw consent. Just write to wheresmymatcha.app@gmail.com.

You can also lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz).

9. Changes to this policy

If we change this policy, the current version will always be on this page, and we will notify you of significant changes in the app.