Privacy Policy

Scope of Use

The app is intended exclusively for users over 18. Minors are not permitted to use the service.

Types of Data Processed

• Account Data: email, display name, profile photo, bio, age/date of birth, place of birth, status messages.
• Social Media Content: public notes, comments, likes, private messages.
• Location Data: current location only, visible to other users only when the user voluntarily activates it via the dedicated button on the homepage. The app also lets you browse a primary zone (based on your device location) and an optional secondary zone (a second area you set manually) to view map content — this browsing data is never shared with other users. We do not retain any location history (we only retain the latest value).
• Technical and Tracking Data: We do not collect device info/logs for tracking purposes.

Purposes and Legal Basis of Processing

• Provision of social features on the map (notes, nearby users, chat) — Performance of the contract.
• Viewing local events/transport — Performance of the contract.
• Security, anti-fraud, and moderation (e.g. reporting management, abuse prevention) — Legitimate interest.
• Internal aggregate statistics (not individual profiling) — Legitimate interest.
• Sharing location between users — Explicit consent, revocable at any time.

How Location Sharing Works

• By default, the location is invisible.
• The location only becomes visible when the user taps the dedicated button on the homepage.
• After activation, the location remains visible for 1 hour; if the user updates the location, the 1-hour timer restarts.
• The user can deactivate visibility at any time from the app.
• No location history is kept: we only store the last updated point.

Recipients and Suppliers (Data Processors)

We use infrastructure and service providers necessary for the operation of the app:

• Google Firebase (Authentication, Firestore Database, Cloud Storage) for authentication and data storage.
• Google Maps SDK/APIs for map and geolocation features.

These providers process data on our behalf, based on appropriate agreements and security measures.

Data Transfers Outside the EU

Data may be processed on servers located outside the European Economic Area. In such cases, the transfer is based on Standard Contractual Clauses (SCC) and other guarantees provided by applicable law.

Retention Periods

• Account and profile: until the account is deleted by the user or the Data Controller.
• Social media content (notes, comments, likes) and private messages: until removed by the user or for the time necessary to provide the service.
• Location data: only the last updated value; visible for a maximum of 1 hour when activated.

Data Subject Rights

Users can exercise their rights to access, rectification, erasure, restriction, portability, and objection, as well as withdraw their consent at any time (e.g. for location). Requests can be sent to: info@chatmapp.app.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Data Security

We adopt technical and organizational measures to protect data, including:

• authenticated access to services;
• database and storage access rules based on the principle of least privilege;
• data minimization.

Notifications

We may send push and in-app notifications related to the operation of the service (e.g. messages, comments, likes). We do not engage in marketing activities without specific and separate consent.

Minors

The service is not available to users under the age of 18.

Contact

For inquiries regarding privacy or exercising your rights: info@chatmapp.app.

Updates to This Policy

We may update this Privacy Policy to reflect regulatory or functional changes. Any changes will be communicated in the app and the version shown above will be updated.

Data Controller

Roman Soldatenkov
Email: info@chatmapp.app