Privacy Policy

⚠️ This is a working draft, not a final legal text. Before launching the app to real users, have this document reviewed by a lawyer specializing in GDPR - especially if you'll have users from the EU.

What data the app collects

At registration: email, username, and password (the app never sees your password in readable form - that's handled by Supabase Auth).

While using the app: videos and posts you upload, comments, ratings, subscriptions, watch history, and technical data such as your registration date.

What the app uses this data for

To run the app itself - logging in, displaying content, recommending videos, computing statistics, and general app functionality. The app does not sell your data or share it with advertising companies.

Who has access to the data

App data is stored with our providers, Supabase (database and authentication) and Cloudflare (video). Both are contractually bound to protect data under their own data processing terms.

Your rights (GDPR)

  • Right of access - in Settings you can download a copy of all your data.
  • Right to erasure - in Settings you can permanently delete your account and all its data.
  • Right to rectification - you can update your profile information at any time.
  • Right to data portability - exported data is in a machine-readable format (JSON).

Cookies

The app only uses technical cookies/local storage necessary for login and remembering preferences (e.g. app theme). The app does not use tracking cookies for advertising.

Legal basis for processing

The app processes your data mainly because it's necessary to provide the service you requested (creating an account, uploading videos, displaying content). Some data (e.g. optional preferences) is processed based on your consent, which you can withdraw at any time by changing your settings or deleting your account.

Where your data is processed

The app runs on infrastructure provided by Supabase (database, authentication) and Cloudflare (video). Both are global companies, which may mean your data is processed outside the European Union. In that case, the transfer is covered by Standard Contractual Clauses (SCCs) or other safeguards required by GDPR - [fill in the specific region settings for Supabase/Cloudflare before launching the app publicly].

Right to lodge a complaint

If you believe the app has mishandled your data, you have the right to lodge a complaint with your national data protection authority (in the Czech Republic: the Office for Personal Data Protection, www.uoou.cz), or the equivalent authority in your country.

Contact

Questions about your data can be directed to [add contact email].

Last updated: [add date]