Privacy Policy

This Privacy Policy explains how DeafMap ("we", "us", "our") collects, uses, and protects your personal data when you use our mobile application and website (deafmap.org).

We are committed to protecting your privacy. We collect only the data needed to provide the service, never sell your data, and you can delete your account at any time.

1. Who we are

Data controller: DeafMap
Contact: contact@deafmap.org

2. What data we collect

2.1 Account data

• Email address — required for account creation, login, and account recovery.
• Display name — shown to other users when you add places, events, or reviews.
• Country and city (optional) — to personalize content and filter places by location.
• Profile picture (optional) — uploaded by you, stored in our secure storage.
• Password — stored as a one-way cryptographic hash. We cannot read your password.

2.2 Content you create

• Places, events, and job listings you add to the map.
• Reviews and ratings you write for places.
• Favourite places you save.
• Photos you upload with content.

2.3 Location data

With your permission, the app uses your device's GPS location to:

• Show places near you
• Calculate distance to venues
• Auto-detect your country

Your precise location is processed on your device only. We do not store or transmit your real-time GPS location to our servers. You can revoke location permission at any time in your device settings.

2.4 Device data

• Device locale (language and region) — for translating the app interface.
• Device timezone — for showing event times correctly.

3. Why we process your data (legal basis)

• To provide the service (Art. 6(1)(b) GDPR — contract performance): account, places, events, jobs, reviews.
• Legitimate interest (Art. 6(1)(f) GDPR): security, fraud prevention, moderation of community content.
• Consent (Art. 6(1)(a) GDPR): location access, optional profile data.

4. Who we share data with

We share data only with the following service providers, who act on our behalf:

• Supabase (Frankfurt, Germany / EU) — database and authentication. Privacy policy.
• OpenStreetMap / Nominatim — geocoding addresses (no personal data sent). Privacy policy.
• Google Translate (free endpoint) — used optionally when you tap "Translate" to translate place descriptions. Text is sent to Google. Privacy policy.
• Cloudflare — hosting for this website only. Privacy policy.
• Apple App Store / Google Play — app distribution. We do not have access to your store account.

We do not sell, rent, or share your personal data with advertisers or any other third party.

5. Where your data is stored

Your data is stored on Supabase servers located in the European Union (Frankfurt, Germany). All data transfers are encrypted (TLS).

6. How long we keep your data

• Account data: for as long as your account is active.
• Content (places, events, etc.): remains in the app even if you delete your account, with your name removed (anonymized).
• Reviews: deleted when you delete your account.
• Avatar photos: deleted when you delete your account or remove the avatar.
• Backups: retained for up to 30 days for disaster recovery.

7. Your rights (GDPR)

If you are in the EU/UK, you have the right to:

• Access your personal data
• Correct inaccurate data (in the app: Edit Profile)
• Delete your account and personal data (in the app: Edit Profile → Delete Account)
• Restrict processing
• Data portability — receive a copy of your data
• Object to processing based on legitimate interest
• Withdraw consent at any time (e.g., revoke location access)
• Lodge a complaint with a supervisory authority (in Poland: UODO)

To exercise these rights, contact us at contact@deafmap.org. Most actions (correction, deletion) can be done directly in the app.

8. Children

DeafMap is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us.

9. Security

We use industry-standard security measures: encrypted connections (HTTPS/TLS), encrypted password storage, role-based access controls, and database row-level security. No system is 100% secure, but we work continuously to protect your data.

10. Cookies (website only)

This website (deafmap.org) does not use cookies or any analytics tracking. The mobile app does not use cookies.

11. Changes to this policy

We may update this Privacy Policy occasionally. The latest version is always available at deafmap.org/privacy. Significant changes will be communicated in the app and via email if you have an account.

12. Contact

Questions about this policy? Email us at contact@deafmap.org.