Privacy policy

1. Data controller

Raúl Arpal Sánchez, Tax ID (NIF) 20572479Z, Plaza Europa 6, 08600 Berga (Barcelona). Contact: vinqlo.app@gmail.com.

2. What data we process

• On this website: the data from the contact form (name, email, type of enquiry and message) and, if you sign up to “Let me know when it's out”, your email. The website does not use analytics or advertising cookies.
• In the app, when you create your account: email address, password (stored encrypted), name, username, confirmation that you are 16 or older, and the code of the organisation you join with.
• In the app, only if you want to: photo, bio, interests and gender. Gender is only used so that notifications address you correctly; nobody else can see it.
• What you do in the app: posts, comments, reactions, statuses, text and voice messages, friendships, blocks and reports.
• We do not ask for your phone number or location, and we never ask about diagnoses, disability or any other medical information or your legal situation.

3. What we use it for

To make the app work (your profile, suggestions of people with the same interests, chat, posts and notifications), to moderate and keep the community safe, to send you the emails you need (verifying your email, resetting your password or deleting your account) and to reply to anything you send us through the website.

There is no advertising, we do not build commercial profiles and we do not sell or share your data with anyone for commercial purposes.

4. Legal basis

Providing the service you agree to when you create your account (the Terms and conditions of use); your consent for optional data, notifications and the contact form, which you can withdraw at any time; and our legitimate interest in keeping the community safe and moderating content.

5. Who sees what

• Your posts and statuses are seen by the Vinqlo community, never by anyone outside the app.
• Your messages are only seen by you and the person you're talking to. The Vinqlo team only reviews a message if someone reports it.
• Only you can see your gender and your badges.
• Nobody in the app knows which organisation you belong to: only the Vinqlo team knows, to manage access. Your organisation cannot see your conversations, your activity or lists of people.

6. How long we keep it

For as long as you have an account. You can ask for it to be deleted from the app or by writing to vinqlo.app@gmail.com: as soon as we receive and confirm the request, everything is deleted immediately and is no longer visible to anyone. We would only keep some data if a law required us to.

Messages you send us through the website are kept for as long as needed to reply to you. The “Let me know when it's out” email is only used to tell you about the launch: we delete it after letting you know, or sooner if you ask.

7. Who we share data with

Only with the providers we need for the service to work, under their data processing agreements:

• Supabase: the app's database and files. Data is stored in the European Union (Ireland).
• Vercel: hosting for this website and anonymous visit statistics (how many visits there are and which pages are viewed), with no cookies or data that identifies you.
• Resend: sending the app's and the website's emails, and the “Let me know when it's out” waiting list.
• Apple and Google: downloading the app from the App Store and Google Play and, if you turn on notifications, delivering them. Notifications never show the content of your messages.

Read-aloud works on your own phone: the text never leaves your device. We would only share data with an authority if a law required us to.

8. International transfers

Some of these providers are companies based outside the European Economic Area. When they process data outside it, they do so with the safeguards required by the GDPR (standard contractual clauses, the EU-US Data Privacy Framework or another valid mechanism).

9. Minimum age

Vinqlo is for people aged 16 or over. If we learn that an account belongs to someone younger, we delete it.

10. Your rights

You can access, correct and delete your data, object to or restrict its use, and take it to another service by writing to vinqlo.app@gmail.com. You can also download a copy of your data and delete your account from the app. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

11. User registration

Each person registers themselves, using their organisation's invitation code and verifying their email, and they are the one who accepts these terms. Registration never asks for medical information or details about legal guardianship.

12. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration: connections are encrypted, passwords are stored encrypted and only the Vinqlo team can access the service's administration.