Draft, to be reviewed by a lawyer before launch.
Privacy policy
Who is responsible
[not configured] OPERATOR_NAME
[not configured] OPERATOR_ADDRESS
Email: hello@eternalwomen.app
What data we process
Account: your email address (or the address forwarded by Apple) for signing in, your username, your chosen language and notification settings, your confirmation that you are 16 or older, and the version of the terms you accepted. Your username is public; your email address never is.
Posts: photos, the kind of artwork, title, artist, caption, the location of the artwork (the pin on the map), city and country, and the date. Photos are resized on your phone, which removes all metadata (for example GPS data and camera model).
Activity: whom you follow, your reactions, reports and blocks.
Device: a token for push notifications if you allow them. Your location is used only while you use the app, to centre the map and to suggest where a photo you take was taken; we do not store it.
We use no analytics, advertising or tracking tools.
Purposes and legal bases
Providing the app and its features (Art. 6(1)(b) GDPR). Moderating reported content, preventing abuse and fixing errors (Art. 6(1)(f) GDPR; our legitimate interest is a safe, working service). Push notifications only with your consent, which you can withdraw at any time in your phone's settings (Art. 6(1)(a) GDPR).
Recipients
We use these service providers as processors:
Supabase (database, sign-in, photo storage; servers in Frankfurt, Germany)
Vercel (this website; EU region)
Resend (sending emails; EU region)
Sentry (crash and error reports, without names, email addresses or photos; EU region)
MapTiler (map tiles and place search; Switzerland)
Expo (delivering push notifications)
Apple and Google (app stores, sign-in with Apple or Google if you choose it, push notification delivery)
Where data is processed outside the EU, this is based on an adequacy decision or the EU standard contractual clauses.
How long we keep data
Your data is kept until you delete your post or your account. Deleting your account immediately deletes your posts, photos, reactions, follows, blocks and sign-in data. Reports you filed are kept without any link to you. Posts that never finished uploading are deleted after 24 hours. Notification logs are deleted after 30 days.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to hello@eternalwomen.app; we answer within one month. You can also complain to a data protection supervisory authority.
Minimum age
The app is for people aged 16 and over.