Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

We collect the following categories of personal data:

a) Information You Provide

• Account information: first name, last name, email address, password
• Profile details: nationality, country of residence, occupation, profile photo
• Organizer information: organization name, type, and description
• Identity Verification (Organizers only): images of government-issued IDs, live selfies, and professional social media links
• User-generated content: events, communities, messages, and RSVPs
• Communications: messages sent through the App's chat feature

b) Information Collected Automatically

• Device information: device type, operating system, unique device identifiers
• Usage data: app interactions, features used, timestamps
• Location data: approximate location (only when you grant permission)
• Push notification tokens: for delivering notifications

c) Information from Third Parties

• Firebase Authentication: for secure account management
• Firebase Cloud Firestore: for data storage
• Expo Push Notifications: for notification delivery

3. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a)): When you create an account and accept these terms
• Contract Performance (Art. 6(1)(b)): To provide the App's services to you
• Legitimate Interests (Art. 6(1)(f)): To improve our services, ensure security, and prevent fraud
• Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulations

4. How We Use Your Information

We use your personal data to:

• Create and manage your account
• Provide, maintain, and improve the App's features
• Enable communication between users
• Send push notifications about events, messages, and updates
• Facilitate event discovery based on location preferences
• Verify and approve organizer accounts (including identity and document verification)
• Enforce our Terms of Service and protect user safety
• Respond to support requests and inquiries
• Analyze usage patterns to improve user experience

5. Data Sharing and Disclosure

We do NOT sell your personal data. We may share your information with:

• Other Users: Your public profile information (name, profile photo, occupation) is visible to other users. Event details posted by organizers are publicly visible within the App
• Service Providers: Firebase (Google LLC) for authentication, database, and cloud functions; Expo for push notification delivery
• Legal Authorities: When required by law, court order, or governmental request
• Safety: When necessary to protect our rights, safety, or property, or those of our users

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (for Firebase/Google services). Such transfers are safeguarded by:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Google's commitment to GDPR compliance for Firebase services

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data: Retained until you delete your account
• Messages: Retained until deleted by users or account deletion
• Event data: Retained for the lifetime of the event plus 12 months
• Usage logs: Retained for up to 24 months

After account deletion, we may retain certain data for up to 30 days for backup purposes and as required by law.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restrict Processing (Art. 18): Limit how we use your data
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw your consent at any time

To exercise any of these rights, contact us at abrahamdministryfoundation@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication through Firebase
• Biometric authentication options (FaceID/Fingerprint)
• Firestore Security Rules to restrict unauthorized data access
• Regular security reviews and updates

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The App is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. Push Notifications

With your consent, we send push notifications about:

• New events matching your interests or location
• Event reminders and updates
• New messages from other users
• Community activity and announcements

You can manage notification preferences in the App settings or disable them through your device settings at any time.

12. Cookies and Tracking

The App does not use cookies. However, Firebase and Expo may collect anonymous analytics data to help us understand usage patterns and improve the App. This data does not personally identify you.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

15. Supervisory Authority

If you are not satisfied with our response, you have the right to file a complaint with: