Privacy Policy for sliiidea

Last Updated: 2024-07-24

1. Introduction and Responsible Party

We, palmstudio GmbH, take the protection of your personal data very seriously. This Privacy Policy informs you about how we handle your data and what rights you have.

Responsible for data processing is:

palmstudio GmbH Pfalzgrafenstraße 38 67434 Neustadt Germany

Email: hi@sliiidea.com Phone:+49 175 6636977

Represented by the Managing Director: Benedikt Falkenstein

2. Collection and Processing of Personal Data

2.1 Data Collected During Registration

• Email address
• Password
• When signing in via Apple or Google: Name and profile picture
• Optional: Phone number

2.2 Data Collected During App Usage

• IP address
• Location data
• Device specifications (iOS)
• User agent information

2.3 Purpose of Data Processing

We process your data for the following purposes:

• To provide and improve our services
• For user identification and authentication
• To communicate with you (e.g., notifications, support)
• To ensure the security of our services
• For analytical purposes to improve the app
• For marketing purposes (e.g., personalized advertising, newsletters)

2.4 Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

• Your consent (Art. 6(1)(a) GDPR)
• Performance of a contract (Art. 6(1)(b) GDPR)
• Our legitimate interests (Art. 6(1)(f) GDPR), unless overridden by your interests or fundamental rights

2.5 Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by law. Specifically:

• Account data: For the duration of your account usage
• IP addresses: A few weeks (Firebase Authentication)
• Location data and device specifications: Temporarily for service provision
• Usage data: Permanently in anonymized form

After deleting your account, your data will be removed from our active systems within 7 days and from all backup systems within 180 days.

3. Sharing of Data

We only share your personal data when necessary to provide our services or when legally required. We work with the following service providers:

• Firebase (Google LLC): For database and authentication
• Google Analytics: For data analysis
• Mailgun: For sending emails
• Stripe: For payment processing
• Cloudflare: For domain management and security

Some of these service providers may be located outside the EU/EEA. We ensure that data transfers to third countries comply with applicable data protection regulations.

4. Cookies and Similar Technologies

Our mobile app uses Async Storage for local data storage. In the web version of our app, we use cookies and local storage to improve your user experience and recognize you upon repeated visits.

5. Analytics Tools

We use Google Analytics to analyze and improve the usage of our app. This involves collecting standard analytical data such as device information, usage behavior, and demographic characteristics.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to access
• Right to rectification
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise these rights, please contact us at hi@sliiidea.com. Please note that exercising certain rights may limit your ability to use our app.

For California residents (CCPA):

• Right to know what personal information is collected, used, shared or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information
• Right to non-discrimination when exercising CCPA rights

To exercise your CCPA rights, please contact us using the information provided in Section 1.

7. Data Security

We implement technical and organizational security measures to protect your data from unauthorized access, loss, or misuse. These include Firebase Security Rules and strict internal access controls.

8. Children's Privacy

Our app is not specifically designed for children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as needed. We will inform you about significant changes via email.

10. Contact

If you have any questions about the processing of your personal data or to exercise your rights, please contact us at:

hi@sliiidea.com

11. Additional Information for California Residents (CCPA)

Categories of Personal Information Collected

In the last 12 months, we have collected the following categories of personal information:

• Identifiers (e.g., email address, IP address)
• Personal information categories listed in the California Customer Records statute (e.g., name, phone number)
• Internet or other similar network activity (e.g., browsing history, app usage)
• Geolocation data

Business Purpose for Collecting Personal Information

We collect and use these categories of personal information for the business purposes described in Section 2.3 of this policy.

Categories of Personal Information Sold

We do not sell personal information to third parties.

Categories of Personal Information Disclosed for a Business Purpose

In the last 12 months, we have disclosed the following categories of personal information for a business purpose:

• Identifiers
• Personal information categories listed in the California Customer Records statute
• Internet or other similar network activity
• Geolocation data

We disclose your personal information for a business purpose to the following categories of third parties: service providers.

Your Rights and Choices

The CCPA provides consumers (California residents) with specific rights regarding their personal information. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you.

You also have the right to request deletion of your personal information that we collected from you and retained, subject to certain exceptions.

To exercise your rights under the CCPA, please submit a verifiable consumer request to us by contacting us using the information provided in Section 1.

12. International Data Transfers

As our app is available worldwide, your data may be transferred to and processed in countries outside your country of residence. We ensure that such transfers comply with applicable data protection laws, including by using standard contractual clauses approved by the European Commission or other suitable safeguards for transfers from the EU/EEA.