Privacy policy
Last updated: [DATE]
1. Who is responsible
The controller for the processing of your personal data under the EU General Data Protection Regulation (GDPR) is:
[FULL NAME OR COMPANY]
[STREET AND NUMBER]
[POSTCODE CITY], Germany
Email: privacy@letsjones.com
2. What we process, and why
Your account
Your email address, your display name, and, if you sign in with Google or Apple, the
account identifier that provider gives us. If you sign in with Apple, we also store an
encrypted Apple token so we can revoke the app's access when you delete your account. We
record that you confirmed you are at least 18 and accepted these terms, and when.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
What you do in the app
Your friends and friend requests, your activity categories, the invitations you send and
receive, your answers (I'm in, Maybe, I'm out), event times, and any place you add to an
invitation or save for later (an address and its position on the map). Only the people
you invite see an invitation.
Legal basis: Art. 6(1)(b) GDPR.
Notifications
If you allow notifications, we store a device token for your phone and send
notifications through Google Firebase Cloud Messaging and, on iPhone, Apple Push
Notification service.
Legal basis: Art. 6(1)(b) GDPR. You can turn notifications off at any time in your phone's
settings.
Security
To protect the service against abuse, we limit how often requests can be made and keep a
security log of important account events (for example sign-in and account deletion).
This log stores a hashed form of your IP address, never the address itself.
Legal basis: our legitimate interest in a secure service (Art. 6(1)(f) GDPR).
Product statistics
We count how features are used (for example how many invitations are sent) to improve
the app. We do not use advertising or third-party tracking.
Legal basis: Art. 6(1)(f) GDPR.
3. Who else receives data
- Hosting: the app's servers and database run on infrastructure operated by [HOSTING PROVIDER, COUNTRY].
- Google (sign-in with Google, Firebase Cloud Messaging) and Apple (Sign in with Apple, Apple Push Notification service), only for the purposes above. These providers may process data outside the EU; such transfers rely on the EU-U.S. Data Privacy Framework or the EU standard contractual clauses.
We do not sell your data and do not share it for advertising.
4. How long we keep it
We keep your data for as long as you have an account. When you delete your account, you have 7 days to change your mind. After that, we erase your personal data. Other people's invitations that you took part in keep their shape but show a deleted user in your place. Security log entries are kept for [RETENTION PERIOD] and then deleted. How to delete your account.
5. Your rights
You have the right to access your data (Art. 15 GDPR), to correct it (Art. 16), to have it erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). To use any of these rights, email privacy@letsjones.com.
You can also complain to a data protection supervisory authority, for example the one in the German federal state where you live or where we are based.
6. Children
Let's Jones is only for people aged 18 and over.
7. Changes
If we change this policy in a way that matters, we tell you in the app before the change applies.