SwiadkujPrivacy policy
This is an English translation provided for convenience. The Polish version is the binding one; in case of any discrepancy, the Polish text prevails.
Swiadkuj is an app for iPhone and Android for organizing events with a group of friends — birthdays, trips, bachelor and bachelorette parties and other parties: invitations, group chat, polls, cost splitting, surprise mode and — if you want — location sharing. We collect only what is needed for these features to work. We do not show ads, we do not track you and we do not sell data.
1. Who is the data controller
The controller of your personal data is B. Cyniak, a natural person running the service as a hobby (hereinafter: “we”).
For matters concerning personal data, write to: [email protected]. We have not appointed a data protection officer — we are not required to.
2. What data we process
On first launch the app creates a temporary account for you — without an email address, phone number or password. The account has a random identifier. We only ask for:
- your first name (or a nickname), which people in your events will see,
- confirmation that you are at least 18 years old (we store only “yes”, without a date of birth),
- acceptance of the terms of use (we store the date of acceptance).
Nickname — if you want. In each event you can set a separate nickname: only people in that event see it, and without it your profile name is shown. You can change or delete your name and nickname yourself in the app.
When you organize or join an event: the event name, type (birthday, trip with friends, bachelor party, bachelorette party or other event), the guest of honor's name, the date, description, the surprise mode setting, your role in the group (organizer, co-organizer, participant, guest of honor), invitation codes and joining dates. To stop anyone from guessing codes, we also record the time of failed join attempts (without the codes entered).
Chat: message content, time sent, pins and deletions. Messages pass through a filter that masks slurs from our list (section 6).
Polls: questions, answers and your votes.
Cost splitting: expenses (amount, category, note, who paid, how the cost was split), repayments between participants and the history of changes to these entries. The app does not handle payments — we do not know any account or card numbers.
Location — only when you turn it on yourself (the “Find” feature): geographic position, its accuracy and time of measurement, the duration of sharing and the people who are to see it. We store only the latest position, without a route history (section 5).
Reports and blocks: the reported message, the reason for the report, who reported it and when, and the list of people you have blocked (section 6).
Technical data: IP address and technical connection data, which end up in our providers' logs (Supabase, Cloudflare) with every connection to the server. We do not combine them with content or analyze them.
The swiadkuj.pl website: for each page view the server records a count for visit statistics — without an IP address, cookies or an identifier (section 7).
When you write to us: your email address and the content of your message.
Surprise mode. When the organizer turns it on, the guest of honor cannot see the group chat, polls or costs — this is enforced by the server (database permissions), not just by how the app looks.
We do not ask for your surname, address, phone number, date of birth or health information. The current version of the app does not send photos (including a profile photo), has no sign-in with Apple, Google or email and does not send push notifications — when we add them, we will update this policy first.
3. Why and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and maintaining the account (name, nicknames in events), events, invitations, chat, polls, cost splitting, surprise mode, account deletion | Art. 6(1)(b) — performance of the contract for the provision of the service (terms of use) |
| Sharing location with selected people | Art. 6(1)(a) — your consent, which you give by turning sharing on; you withdraw it with the “Stop” button or in your phone's settings |
| Security and moderation: slur filter in chat, names and nicknames, reports, blocks, join attempt limit, technical logs | Art. 6(1)(f) — our legitimate interest: the safety of users and the service, protection against abuse; for reports of illegal content also point (c) — obligations under the Digital Services Act |
| Database backups | Art. 6(1)(f) — our legitimate interest: restoring data after a failure |
| Visit statistics for the swiadkuj.pl website | Art. 6(1)(f) — our legitimate interest: knowing whether and how the website is visited |
| Replies to messages, complaints and reports of illegal content | Art. 6(1)(b), (c) or (f) — handling the contract, an obligation under the Digital Services Act, or correspondence |
| Establishing, pursuing or defending claims | Art. 6(1)(f) |
We do not profile you, we do not make automated decisions about you within the meaning of Art. 22 GDPR and we do not use data for advertising.
4. Who we share data with
We use service providers who process data on our behalf and on our instructions, under data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Supabase (Supabase, Inc., USA) | Database, accounts, live updates (chat, location) | Data stored in the EU — Frankfurt; remote access by technical support from the USA possible |
| Cloudflare (Cloudflare, Inc., USA) | Hosting of the swiadkuj.pl website and invitation links, visit statistics (Workers Analytics Engine) | Global server network, also outside the EEA |
| GitHub (GitHub, Inc., USA) | Storage of encrypted database backups (6 days, section 8) and Android app installation files | USA |
Independent controllers. Some entities receive technical data not from us but directly from your phone, and process it under their own rules:
- OpenFreeMap (openfreemap.org) — provides the map tiles in the “Find” feature. When you view the map, your phone downloads tiles from its servers, so the provider sees your IP address and the map area you are viewing — but not the positions of people in your group or any account data. Map data © OpenStreetMap.
- Apple and Google — as the stores you download the app from (App Store, Google Play), and as the map apps opened by the “Navigate” button (Apple Maps, Google Maps) — in that case we pass them only the route destination.
Data may also be disclosed to public authorities if the law requires us to do so. Content from an event is visible to the other members of that event, according to their roles and surprise mode.
Transfers outside the European Economic Area. Supabase, Cloudflare and GitHub are companies headquartered in the USA. Data is transferred to the USA on the basis of:
- the European Commission decision of 10 July 2023 finding an adequate level of protection under the EU–US Data Privacy Framework (Art. 45 GDPR) — Cloudflare and GitHub participate in this framework,
- standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR), included in the data processing agreements of Supabase, Cloudflare and GitHub — also for transfers to other countries outside the EEA.
You can obtain a copy of these safeguards by writing to the address in section 1.
5. Location
- Sharing is off by default. It starts only when you choose a duration: 1 hour, 4 hours or until the end of the event (always 24 hours at most). You can stop it with one button; it also ends by itself when the time is up, when the event ends or when you withdraw permission on your phone.
- Only the people you choose can see your position: the whole event group or selected participants. With surprise mode on, the guest of honor cannot see it unless you explicitly select them.
- We ask only for “While using the app” access. After the screen turns off, sharing continues until the end of the chosen time — your phone then shows the system location indicator (on Android, a persistent notification with a “Stop” button).
- We store only the latest position, without a route history. We delete it when sharing ends, and after 24 hours at the latest.
6. Content safety: filter, reports and blocks
- Chat messages pass through an automatic filter that replaces slurs from a short list (hate speech) with asterisks. The same filter applies to the profile name and event nicknames. The filter does not assess you and stores nothing beyond the masked text.
- You can report any message, giving a reason. We review reports daily, within 24 hours at the latest; we then see the reported message, its author, the event and the reason. The event organizer can delete messages in their event.
- When you block a person, their messages are no longer visible to you. The blocked person is not notified. Only you can see your block list.
7. Visit statistics for the swiadkuj.pl website
When you view the swiadkuj.pl website, the Cloudflare server records one count in the Workers Analytics Engine service. The count contains only: the page address without the part after the “?” sign and without the invitation code, the country (determined by Cloudflare from the IP address), the domain of the page you came from, the device type (phone or computer), whether it is a bot, and the time. We do not record the IP address or a browser identifier, we do not use cookies, browser storage or scripts, and we do not assign you an identifier. We see only totals. Cloudflare keeps the counts for 3 months. The statistics do not allow us to identify you (Art. 11 GDPR). The mobile app has no statistics or analytics.
8. How long we keep data
| Data | Period |
|---|---|
| Account and name | Until the account is deleted. A temporary account that does not belong to any event is deleted 30 days after it was created, last signed in or last joined an event (whichever is latest), in the same way as with “Delete account”. |
| Nickname in an event | Until it is changed or removed (reverting to the name), or the event or account is deleted |
| Event with chat, polls and cost splitting | Until the event is deleted, no longer than 24 months after it ends; an event without a set date — 24 months from the last activity (a change to the event or the last message) |
| Location | Only the latest position — until sharing ends, 24 hours at most |
| Message reports | Together with the message and event they concern. Until a report is resolved, we do not automatically delete the event or the temporary accounts of the author and the reporter — we do so after it is resolved. |
| Blocks | Until unblocking or account deletion |
| Failed join attempts | Until account deletion |
| Database backups | Made daily, encrypted, each kept for 6 days — data of a deleted account disappears from backups after 7 days at the latest |
| Providers' technical logs (Supabase, Cloudflare) | Up to 7 days |
| Website visit statistics (without IP) | 3 months |
| Correspondence with us | Until the matter is settled, and then until the limitation period for any claims expires |
Deleting your account: in the app: Profile → Delete account. Deletion is immediate and irreversible: we delete the account, name, nicknames, age declaration, the content of your messages (a “message deleted” marker stays in the conversation), shared location and your block list. Expenses, repayments and votes in other people's events remain without a name, as “Deleted user” — otherwise other people's balances and results would change. Events you organized are taken over by someone from the group; if there is no one, we delete them. Without the app: write to [email protected] — we will delete the account within 30 days (details: account deletion).
9. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification of data — you can change your name yourself in Profile, and your nickname on the event dashboard (“My nickname in this group”); anything else on request by email,
- erasure of data (“right to be forgotten”) — also by yourself, with the “Delete account” button,
- restriction of processing,
- data portability — on request you will receive your data in a machine-readable format (JSON),
- withdraw consent to location sharing at any time; withdrawal does not affect earlier processing,
- lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).
Right to object. At any time you may object to the processing of your data based on our legitimate interest (Art. 6(1)(f) GDPR, section 3) — on grounds relating to your particular situation.
To exercise your rights, write to the address in section 1. App accounts have no email address, so give your profile name and the event name — we may ask for confirmation from the app to make sure the request comes from you. We will reply without undue delay, within one month at the latest.
10. Do you have to provide data
Providing data is voluntary, but a name and confirmation of being an adult are a condition of using the app (a contractual requirement). A nickname and location are entirely optional — the app works without them.
11. Age
The app is intended only for people who are at least 18 years old (some events are parties with alcohol). We do not knowingly collect data from minors. If we learn that a person under 18 is using the app, we will delete their account.
12. Phone storage and cookies
The app stores on your phone only what is strictly necessary for the service you request: the sign-in session key (in the system's secure storage — Keychain on iPhone, Keystore on Android) and app settings. It contains no ads, advertising identifiers, analytics or tracking libraries; we do not collect crash reports. The swiadkuj.pl website does not use cookies or analytics scripts.
You grant permissions (location) to your phone's system and can revoke them in its settings; the app also works without them.
13. Changes to the policy
We may change the policy, e.g. when we add a new feature or provider. We will publish the new version on this page with a new date. App accounts have no email address, so we will also announce significant changes in the app or in the update description in the store.