Slovensky

Privacy Policy - Stretko

Last updated: September 28, 2026

1. Data Controller

The data controller for the Stretko application (package com.joinly.app, formerly "Joinly") is Marcel Šoták (hereinafter "we"). This policy explains what personal data we process, why, where it is stored, and what rights you have.

Contact: marcel.sotak123@gmail.com

2. Age Requirement

Stretko is intended only for people aged 16 and older. Before registering (by email or with Google) you must confirm that you are at least 16 years old. We do not knowingly collect data from anyone under 16. If we learn that an account belongs to a younger person, we delete it. If you know of such an account, please contact us.

3. What Data We Collect

• Registration data: name, email address, password (managed by Firebase Authentication, we never see it in readable form) or Google account data when signing in with Google
• Profile: profile photo, bio, preferred event categories
• Location: device GPS coordinates, only while using the map and only with your consent
• Content you create: events (title, description, images, date, place), event chat messages and direct messages, event ratings
• In-app activity: event attendance, waitlists, check-ins, favorites, friends, invitations, reports and no-show records
• Technical data: push notification token (FCM), installation ID, advertising ID, device and crash data, anonymous usage statistics

4. Purpose and Legal Basis

• Providing the app (account, events, chat, map, invitations, friends) – performance of a contract (Art. 6(1)(b) GDPR)
• Location and notifications – your consent (Art. 6(1)(a)). You can withdraw it at any time in your phone settings.
• Safety and moderation (automated text and image checks, reports, blocking, no-show penalties) – legitimate interest in a safe community (Art. 6(1)(f))
• Event recommendations – performance of a contract; calculated directly on your device
• Crash reports and statistics – legitimate interest in fixing bugs and improving the app
• Ads (AdMob) – personalized ads only with your consent, given on first launch (Google UMP). Without consent, non-personalized ads are shown.

5. What Other Users Can See

Other signed-in users can see your name, profile photo, bio, the events you created and your event attendance. Event chat messages are visible only to that event's attendees and creator. Direct messages are visible only to the two participants. Your email address is not shown to other users.

6. Where Data Is Stored

For transfers outside the EU (mainly to the USA) we rely on the GDPR safeguards provided by these processors – the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses. All communication between the app and the servers is encrypted (HTTPS).

7. Data Sharing

We do not sell your data or share it with third parties for marketing purposes. Data is processed only by the processors listed above and additionally:

• Google Cloud Vision API and Natural Language API – automated checks of uploaded images and texts for inappropriate content. Check results are not stored.
• Ticketmaster and public event calendars – we only import public events from them. We do not send them any of your data. Tickets are purchased outside the app.

8. Data Retention

• Account data is kept for as long as you have an account.
• Events are deleted automatically after they end (usually within a few days, at most 1 year after the event).
• If an account is suspended for breaking the rules, its data is kept for review of the case for at most 1 year.
• Crash reports and statistics are kept by Google according to its own retention periods (generally no longer than 14 months).

9. Account Deletion

You can delete your account at any time directly in the app: Settings → Delete account. This immediately deletes your profile, the events you created, your messages (event chats and direct messages), your event attendance, friends, invitations, reports you submitted and the login account itself.

Images uploaded to Cloudinary are not yet deleted automatically – we delete them within 30 days on request by email. If you no longer have the app, you can also request deletion on the web: Delete Account & Data.

10. Your Rights (GDPR)

You have the right to:

• access your personal data,
• correct inaccurate data (most of it you can edit in your profile),
• erasure ("right to be forgotten"),
• restriction of processing and data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time (location, notifications, personalized ads),
• lodge a complaint with a supervisory authority, in Slovakia the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk).

To exercise your rights, email marcel.sotak123@gmail.com. We reply within 30 days.

11. Location

The app requests location access only to show nearby events and calculate distance. Your current location is not permanently stored on our servers. Only the locations of events you create yourself are stored.

12. Security

Access to data is limited by database security rules (each user can modify only their own data), transmission is encrypted and passwords are managed by Firebase Authentication. However, no internet service can guarantee complete security.

13. Changes to This Policy

We will inform you of material changes within the app. The current version is always available on this page.

14. Contact

Questions and complaints: marcel.sotak123@gmail.com