Privacy Policy

1. Introduction

Your privacy is important to us. This Privacy Policy explains how we collect, use, store and protect your personal information. The data controller is BOJAN TIBERIU PERSOANA FIZICA AUTORIZATA (sole trader), CUI (tax ID) 54794539, Trade Registry No. F2026028274003, registered office: Str. Wolfgang Amadeus Mozart, Nr. 16, Sc. B, Demisol, Ap. 4, Sector 2, Bucharest, Romania. Data protection contact: [email protected].

2. Personal Data Collected

2.1 Data provided directly

• Identification data: name, surname, email address
• Authentication data: password (stored encrypted)
• Preferences: preferred city, categories of interest
• Generated content: reviews, comments, ratings

2.2 Data collected automatically

• Location data: GPS coordinates (only with your permission)
• Technical data: device type, operating system, app version
• Usage data: pages visited, features used

2.3 Data we do NOT collect

• Financial or banking data
• Identity documents
• Sensitive data (ethnic origin, religious beliefs, health data)

3. Processing Purposes

• Providing services (account, offers, favorites)
• Experience personalization
• Displaying nearby offers (with consent)
• Points and rewards system
• Service communications
• Application improvement
• Legal compliance

4. GPS Location

Location data is used exclusively to display offers near you. Location is optional — the app works without it. We do not store location history.

5. Data Sharing

We do not sell, rent or share personal data with third parties for marketing purposes.

We may share data only with:

• Service providers: hosting, cloud storage (in EU)
• Partner businesses: only public reviews
• Authorities: if required by law

6. Data Security

• Password encryption (bcrypt)
• Secure connections (HTTPS)
• Token authentication (JWT)
• Restricted database access
• Periodic backups

7. Storage Period

• User account: Until account deletion
• Reviews: Until deleted by user
• Location data: Not permanently stored
• Technical logs: Maximum 90 days

After account deletion, data is removed within 30 days.

8. Your Rights (GDPR)

• Right of access to personal data
• Right to rectification
• Right to erasure
• Right to data portability
• Right to object
• Right to withdraw consent

You can file a complaint with the National Supervisory Authority (ANSPDCP): www.dataprotection.ro

9. Cookies

On the web platform we only use essential cookies for site operation (authentication) and preference cookies. We do not use tracking or advertising cookies.

10. Contact

We will respond within 30 days of receiving your request.