Hauspot Privacy Policy
Draft. Hauspot is in testing. This text needs a lawyer's review before publication.
1. Who is responsible for your data
The joint controllers of your personal data are Piotr Żmudzki and Karolina Kraszewska, natural persons running the Hauspot service ("the Operator", "we").
For anything concerning personal data, write to us: kontakt@hauspot.pl.
This policy covers:
- the Hauspot mobile app - searching for pet-friendly places, reviews and favourites,
- the Hauspot website, including its contact forms and the launch waitlist,
- the Business Panel - venue owners' accounts and their venues' information.
2. What data we process and why
We collect only what we need for the service to work. All categories are listed below.
2.1 App account
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Signing in, contact about the account | Performance of a contract (Art. 6(1)(b) GDPR) |
| Display name | The signature under your reviews | Performance of a contract |
| Sign-in identifier | Linking the account to the sign-in service (Firebase Authentication) | Performance of a contract |
We do not know your password. Sign-in is handled by Firebase Authentication (Google); we only receive confirmation that it is you.
Signing in with Google or Apple. When you sign in with Google or Apple, they give us your email address and your name, and Google also your profile photo. If you choose Apple's "Hide My Email", we get Apple's relay address instead of yours. When you delete an account created with Apple, we ask Apple to disconnect Hauspot from your Apple ID.
2.2 Reviews and favourites
| Data | Purpose | Legal basis |
|---|---|---|
| Rating, review text, date, your display name | Reviews are public - every user sees them on the place's page | Performance of a contract |
| List of favourite places | Your list in the app; it is not public | Performance of a contract |
Reports and blocks. When you report a review, we record who reported it, which review, for what reason and with what comment. When you hide an author's reviews for yourself, we record that block and pass that review on for checking. A report and a block both serve moderation, and a block also stops you seeing those reviews.
2.3 Location
- With your permission in the phone's settings, the app reads the approximate position of the device to show places nearby and the distance to them.
- The position is sent to our server in queries for places and is not stored in your account. It may appear in the server's technical logs (section 2.7).
- The last position is remembered only on your device, so the app works straight away when it starts.
- We work out the name of the city and district ("Warszawa, Śródmieście") by sending the OpenStreetMap Nominatim service the position rounded to about 100 m - from our server, with no data about you.
- Without location permission the app keeps working; distances are then counted from the last known position or from the centre of Warsaw.
Legal basis: performance of a contract (searching nearby is a feature you ask for). You can withdraw location access at any time in the phone's settings.
2.4 Place suggestions
When you suggest a place that is not in Hauspot, we process the place's name and address, your note, the photo you add and - if you are signed in - the link between the suggestion and your account.
Legal basis: our legitimate interest in growing the database of places (Art. 6(1)(f) GDPR).
2.5 The "I run a venue" form
The venue's name, an email address and, if you give them, your full name, phone number and message. We use them to contact you about adding the venue.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
2.6 Business account (Business Panel)
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, contact person's full name, phone number | The account, contact about verifying the venue | Performance of a contract |
| Date and version of the accepted terms and policy | Demonstrating acceptance | Legal obligation and legitimate interest |
| Venue information and its history of changes | Verification, publication, resolving disputes | Performance of a contract and legitimate interest |
| Sign-up source (e.g. a poster), if you came from a link with such a source | Counting which activities reach owners | Legitimate interest |
The contact details of the person running the account are not public. What is public is the venue information the owner enters for guests: name, address, the venue's phone and website, hours, menu, photos.
Every version of a venue's information is kept, so that it is known who changed what and when.
2.7 Technical data
- Session: the session refresh token - in the app in the phone's secure storage, on the website in the browser tab's storage (
sessionStorage, cleared when the tab is closed). On the server we keep its hash, so that the session can be signed out. - Server logs: IP address, date and time, the request address (which may contain an approximate position from a search) and information about the browser or app. They serve security and fixing errors; we keep them for 30 days.
- Abuse protection: the IP address for 1 minute, to count requests.
- Error reports: when the app, the website or the server meets an error, we send a report to an error-tracking tool (GlitchTip) that runs on our own server and passes no data to other parties. A report contains a description of the error, the type of device or browser and an internal user ID. It contains no IP address, email address, location or form content. We keep it for 90 days.
- Backups: every day we make a copy of the database, so that the service can be restored after a failure. We keep the copies for 14 days; data deleted from the database disappears from the copies after that time at the latest.
Legal basis: legitimate interest - the security and operation of the service.
2.8 Emails
We send only messages related to the service: confirmation of the email address, a link to set or change the password, decisions about your venue, a one-off reminder about a venue not yet sent, and announcements for businesses (e.g. about a change to the terms or about fees) - in the Business Panel - as well as confirmation that an account was deleted. We do not send newsletters or advertising.
Sent messages. We record every email we send (to whom, when, its content), so that we can show that we informed you of a decision, a change to the terms or fees. We keep them for 3 years after sending - also after the account is deleted, because they serve as evidence in a dispute.
2.9 Push notifications
If you agree to notifications on your phone, the app passes us the device's notification identifier (a token), the system (Android or iOS), the app version and the "Announcements" setting. While you are signed in, we link the device to your account, so that we can tell you when your review is hidden and about decisions on your venue. When you sign out or request deletion of the account, we remove that link. We also send announcements about how the app works, e.g. about downtime or a new version. We do not send advertising. We send notifications only while they are allowed in the phone's settings and "Announcements" is on.
You can turn notifications off in the app (Account, Notifications) or in the phone's settings.
Sent notifications. We record every notification we send (to whom, when, its content) and keep it for 12 months.
Legal basis: performance of the contract (information about your account, reviews and venues) and legitimate interest (announcements about how the app works).
2.10 Launch waitlist
On the website you can leave an email address, so that we write to you once when the app launches. We record that address and, if we know it, where you came from (e.g. a poster), so that we can count which activities reach people. We will send you one message about the launch of the app; we do not add you to a newsletter or any other list.
Legal basis: your consent (Art. 6(1)(a) GDPR). We keep the address until the launch message is sent or you withdraw your consent. You can withdraw consent at any time by writing to kontakt@hauspot.pl; withdrawal does not affect the lawfulness of processing before it. After you withdraw, we remove your address from the list.
3. Who we share data with
We do not sell data. We use providers who process data on our behalf:
| Provider | Purpose |
|---|---|
| Google (Firebase Authentication, Cloud Storage for Firebase) | Sign-in; storing photos and logos |
| Google (Sign in with Google) and Apple (Sign in with Apple) | Signing in, if you choose that method |
| Google (Google Maps, Android) and Apple (Apple Maps, iOS) | Showing the map in the app - the map provider receives the data needed to show it, under its own privacy policy |
| OpenStreetMap Foundation (Nominatim) | Finding the coordinates of a venue's address and the name of the city and district for an approximate position - with no data about you |
| Resend | Sending the messages described in section 2.8 |
| Expo (650 Industries, Inc.) | Relaying push notifications to Google and Apple |
| Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) | Delivering push notifications to the phone |
| OVHcloud | The server (VPS) in Canada on which Hauspot runs |
Some providers are based outside the European Economic Area (e.g. in the USA), and our server is in Canada. Data is then transferred on the basis of a European Commission adequacy decision (for Canada, Decision 2002/2/EC; for the USA, the EU-US Data Privacy Framework) or standard contractual clauses.
We may also disclose data to public authorities when the law requires it.
4. How long we keep data
| Data | How long |
|---|---|
| App account | Until the account is deleted. After a deletion request the account disappears at once and the personal data is erased after 30 days; until then you can restore it by signing in |
| Reviews | Until the review is deleted; from the deletion request the review shows without the author's data ("Deleted user") - the rating concerns the place, and removing it would allow the average to be manipulated |
| Favourites | Until the account's data is erased, 30 days after the deletion request |
| Review reports | Until the review is deleted; a resolved report for 12 months from the decision |
| Hidden review authors | Until unblocked or until the account's data is erased |
| Business account | As the app account; the venues are hidden at once after the deletion request |
| Venue history of changes | For as long as the venue exists in Hauspot and 3 years after it is deleted |
| Place suggestions and "I run a venue" forms | 12 months |
| Sent emails | 3 years after sending, also after the account is deleted |
| Acceptance of the terms and the privacy policy | For as long as the account exists and 3 years after its data is erased |
| Notification device | 12 months after the app was last launched |
| Sent push notifications | 12 months after sending, also after the account is deleted |
| Server logs | 30 days |
| Error reports | 90 days |
| Database backups | 14 days |
5. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification of your data,
- erasure of your data - you can delete the account yourself in the app (Account → Delete account), in the Business Panel (Profil → Usuń konto) or by writing to us,
- restriction of processing,
- portability of the data you gave us,
- object to processing based on our legitimate interest,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
To exercise your rights, write to kontakt@hauspot.pl. We will reply within a month.
Giving data is voluntary, but without an email address you cannot create an account, and without contact details - a business account. You can browse places without an account, and you can leave the waitlist at any time.
We do not make decisions about you based solely on automated processing, including profiling.
6. Cookies and device storage
The website does not use analytics or advertising cookies. The Business Panel keeps the session in the browser tab's storage (section 2.7). If you reach the website from a link with a source (e.g. a poster), we remember that source in the browser tab's storage (sessionStorage) until the end of the visit, to attach it to a registration or a waitlist sign-up.
The app stores on the device: the session token (in secure storage), the chosen language, theme, the last position and the notification setting.
7. Children
Hauspot is for everyone, including families with children. We set no minimum age. Browsing places does not require an account. A person under 16 creates an account with the consent of a parent or legal guardian (Art. 8 GDPR), and the same applies to joining the waitlist. A parent or guardian may ask us to delete a child's account at any time.
8. Changes to this policy
We will announce material changes in the app or by email. Venue owners will accept the new version at their next sign-in to the panel.