Privacy Policy
Last updated: July 26, 2026
Data Controller
Dia Amadores S.R.L.
Bd. Tutora 7, 700169 Iași, Romania
Tax ID / VAT: RO27486825
Iași Trade Register, EUID: ROONRC.J2010001355225 (registered 08/10/2010)
Privacy contact: [privacy contact email to be added]
What data we process and on what legal basis
Mandatory data (account)
Email address: account creation, authentication, credential recovery, security communications. Legal basis: contract performance (Art. 6.1.b GDPR) — no consent is required for this processing, taking notice of this policy is sufficient.
Optional data (profile)
Full name, phone number: personalizing your experience and optionally sending notifications (SMS/WhatsApp/Telegram). Legal basis: freely given consent, expressed by voluntarily filling in these optional profile fields — removable at any time from settings.
App operational data (zero-knowledge architecture)
The memories, documents, photos and videos you upload are encrypted directly on your device before being transmitted and stored: we never hold the keys that decrypt them. See the Disclaimer page for details on this architecture and its practical implications.
Sub-processors
To deliver the service we rely on the following third-party providers:
| Provider | Location / data residency | Role | Purpose |
|---|---|---|---|
| Supabase Inc. | USA (data servers in Ireland, EU) | Data processor | Database, authentication, file storage |
| Bunny Way d.o.o. (Bunny.net) | Slovenia (EU) | Data processor | CDN and encrypted file storage (video) |
| Resend Inc. | USA (Standard Contractual Clauses) | Data processor | Transactional email delivery (confirmation, password reset) |
| Paddle.com Market Ltd | UK / EU | Independent controller (merchant of record) | Payments, invoicing, tax compliance |
Payments (Paddle)
Premium subscriptions are handled entirely by Paddle.com Market Ltd, which acts as merchant of record: we never receive or store any credit card or banking data on our servers, only confirmation of subscription status.
Your rights
You can access, correct, request portability of, or withdraw consent for optional data at any time from the app's settings. The right to erasure can be exercised directly from the app (Settings → Delete Account), which permanently removes your email, name, phone number and all associated content — or by writing to [privacy contact email to be added].
Data retention
We retain data for as long as the account exists. If deleted, data is removed from production servers within 30 days, except where a different legal retention obligation applies.
Security
All connections use encrypted protocols (HTTPS/TLS). The contents of your rooms are end-to-end encrypted before ever leaving your device.
Site traffic analytics
This site uses a privacy-respecting analytics tool (Plausible Analytics) that does not use cookies and does not collect personally identifiable data — no prior consent is therefore required.