Privacy Policy

1. Controller and scope

This notice describes processing carried out by the individual data controller George Alin Gilea through the Floovibe app, floovibe.com and the connected backend services. The project is non-commercial. For privacy questions, contact privacy@floovibe.com.

2. Data we process

We process information you provide when creating and using an account, including name, email address, phone number where required, date of birth, nickname, profile photo, biography and preferences.

We also process content and activity needed for requested features: events, attendance, messages, comments, reviews, polls, stories, uploaded photos and videos, galleries, shared expenses and reimbursement identifiers you enter voluntarily.

When you use maps, nearby events or navigation, we process precise or approximate location according to the device permission you grant. During navigation started by you, location may also be used in the background.

For authentication, security, notifications and technical operation, we process user IDs, session and installation/device identifiers, push tokens, IP address, user-agent, device model and operating system, app version, sign-ins, failed sign-in attempts and security changes. We do not access your device address book.

3. Purposes

We use data to create and protect accounts; provide profiles, events, social relationships, chat, maps, routes, notifications, media and shared expenses; enforce privacy settings; prevent abuse and unauthorised access; handle reports and support; provide export, correction and deletion; and comply with legal obligations.

We do not use data for behavioural advertising and do not combine Floovibe data with data from other apps or websites to track users.

4. Legal bases

Processing needed to create an account and provide requested features is based on performance of the contract. Security, abuse prevention, protection of the service and report handling may rely on legitimate interests balanced against users’ rights. Location, notifications and access to camera, microphone or the media library depend on the user’s choice and operating-system permissions. Retention or disclosure required by law is based on legal obligations. Any promotional communications require a separate, revocable choice.

5. Recipients and sharing

Content is shown to other users only according to the feature used and visibility settings. Technical providers may process data on Floovibe’s behalf to the extent needed for the service: Supabase for authentication, database and storage; Apple and Google for user-selected authentication and platform services; Expo, APNs and Firebase Cloud Messaging for notifications; email providers for operational messages; cloud infrastructure, Redis and processing queues; and MapLibre, OpenStreetMap, Valhalla and tile/geocoding/routing providers for map features.

We may disclose data to authorities or competent parties where required by law or necessary to protect users and the service. We do not sell personal data or share it with data brokers or advertising networks.

6. Security and moderation

Floovibe uses authentication, device-bound sessions, rate limits, security logs and authorisation controls. Users can report content and profiles and can block other accounts. Reports and related content may be reviewed by authorised personnel where necessary.

7. Your rights

You may request access, correction, deletion, restriction, portability and objection where provided by the GDPR, and withdraw consent without affecting earlier processing. In the app you can edit your profile, download a copy of your data and request account deletion. You can also contact privacy@floovibe.com and lodge a complaint with the competent data-protection authority.

8. Security measures

Communications with Floovibe services use encrypted connections. Tokens and credentials are handled through the app’s authentication and secure-storage infrastructure. We apply access controls, session management, security auditing, limited backups and incident-response procedures. No system is entirely risk-free; report security issues to security@floovibe.com.

9. Retention and deletion

We retain data while the account is active and for as long as needed for the purposes described. After a confirmed deletion request, the account enters a 30-day recovery period; afterwards associated data is deleted or anonymised by the configured processes, except where retention is required for law, security, fraud prevention, disputes or user protection.

Some content has feature-specific durations: stories expire according to the TTL shown by the product, event-gallery media has a technical expiry, and sessions and export files expire automatically. Security logs and records are retained for periods proportionate to their purpose and then deleted or anonymised.

10. International transfers

Some providers may process data outside the European Economic Area. Where applicable, we use mechanisms recognised by data-protection law, such as adequacy decisions or standard contractual clauses, according to the provider and the service actually configured.

11. Store disclosures

Floovibe collects data needed to operate the service, including account data, user content, authorised location, technical identifiers, interactions and security data. These categories must be disclosed in App Store Connect and Google Play Console.

The current configuration does not include advertising SDKs, attribution SDKs, Firebase Analytics, Firebase Crashlytics or Sentry and does not perform cross-app or cross-site tracking. Firebase Cloud Messaging is used only to deliver Android notifications.

12. Local storage and web technologies

The mobile app uses encrypted or protected local storage, caches, session tokens and technical identifiers needed for authentication, security, offline maps and preferences. They are not used for advertising or tracking.

Floovibe does not use advertising or analytics cookies. The public website may generate standard technical hosting/CDN logs for security and operation. See “Technologies & Storage” for more details.

13. Children

Floovibe is not intended for children under 16. If you believe a child created an account contrary to applicable requirements, contact privacy@floovibe.com. Content involving minors must comply with the law, the Terms and the rights of the people depicted.

14. Changes

We will update this notice when data, purposes, providers or applicable obligations change. Material changes will be communicated through appropriate means. The date above identifies the current version.

15. Contact

Data controller: George Alin Gilea Privacy: privacy@floovibe.com Support: support@floovibe.com Security: security@floovibe.com