Privacy Policy

Scope of Use

The app is intended exclusively for users over 18. Minors are not permitted to use the service.

Types of Data Processed

• Account Data: email, display name, profile photo, bio, age/date of birth, place of birth, status messages.
• Social Media Content: public notes, comments, likes, private messages.
• Instant Pin Content: photos taken with the camera, voice notes of up to 7 seconds, optional text, and the position where the pin was saved (precise or approximate), together with its address, date and time.
• Location Data: current location only, visible to other users only when the user voluntarily activates it via the dedicated button on the homepage. The app also lets you browse a primary zone (based on your device location) and an optional secondary zone (a second area you set manually) to view map content — this browsing data is never shared with other users. We do not keep a history of your movements: of your current location we only retain the latest value. The only positions stored over time are those you deliberately save as Instant Pins (see below).
• Technical and Tracking Data: We do not collect device info/logs for tracking purposes.

Purposes and Legal Basis of Processing

• Provision of social features on the map (notes, nearby users, chat) — Performance of the contract.
• Viewing local events/transport — Performance of the contract.
• Saving Instant Pins (photo, voice note, text and position) in the user's private map — Performance of the contract.
• Security, anti-fraud, and moderation (e.g. reporting management, abuse prevention, automated checks on uploaded photos and texts) — Legitimate interest.
• Internal aggregate statistics (not individual profiling) — Legitimate interest.
• Sharing location between users — Explicit consent, revocable at any time.

How Location Sharing Works

• By default, the location is invisible.
• The location only becomes visible when the user taps the dedicated button on the homepage.
• After activation, the location remains visible for 1 hour; if the user updates the location, the 1-hour timer restarts.
• The user can deactivate visibility at any time from the app.
• No location history is kept: we only store the last updated point.

Instant Pin

Instant Pin lets you save a reminder exactly where you are standing. Each Instant Pin can contain:

• a photo taken with the camera;
• a voice note of up to 7 seconds;
• an optional text — if left empty, the address, date and time of the pin are used instead.

One of the three is enough to save the pin.

Instant Pins are stored in your private map and are visible only to you and to the co-editors you invite. They never appear on the public map. If you don't have a private map yet, the app offers to create one.

Photos and texts in Instant Pins go through the same automated checks used for every note in the app.

Device Permissions

When you use Instant Pin, the app only asks for the access it needs, and only at the moment you use it:

• Camera: opens only when you tap the photo frame in Instant Pin.
• Microphone: requested the first time you hold the record button. Audio is recorded only while the button is held and stops automatically after 7 seconds.
• Location: in Instant Pin, it is read only while the sheet is open, to place the pin precisely. If precise location is turned off, the pin is saved with the approximate position and the app shows you how to turn it on.

You can revoke these permissions at any time from your device settings.

Recipients and Suppliers (Data Processors)

We use infrastructure and service providers necessary for the operation of the app:

• Google Firebase (Authentication, Firestore Database, Cloud Storage) for authentication and data storage.
• Google Maps SDK/APIs for map and geolocation features.

These providers process data on our behalf, based on appropriate agreements and security measures.

Data Transfers Outside the EU

Data may be processed on servers located outside the European Economic Area. In such cases, the transfer is based on Standard Contractual Clauses (SCC) and other guarantees provided by applicable law.

Retention Periods

• Account and profile: until the account is deleted by the user or the Data Controller.
• Social media content (notes, comments, likes) and private messages: until removed by the user or for the time necessary to provide the service.
• Instant Pins (photo, voice note, text and position): until deleted by the user or until the account is deleted.
• Shared location: only the last updated value; visible for a maximum of 1 hour when activated.

Data Subject Rights

Users can exercise their rights to access, rectification, erasure, restriction, portability, and objection, as well as withdraw their consent at any time (e.g. for location). Requests can be sent to: info@chatmapp.app.

Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Data Security

We adopt technical and organizational measures to protect data, including:

• authenticated access to services;
• database and storage access rules based on the principle of least privilege;
• data minimization.

Notifications

We may send push and in-app notifications related to the operation of the service (e.g. messages, comments, likes). We do not engage in marketing activities without specific and separate consent.

Minors

The service is not available to users under the age of 18.

Contact

For inquiries regarding privacy or exercising your rights: info@chatmapp.app.

Updates to This Policy

We may update this Privacy Policy to reflect regulatory or functional changes. Any changes will be communicated in the app and the version shown above will be updated.

Data Controller

Roman Soldatenkov
Email: info@chatmapp.app