The responsible body, address, representative, contact addresses for support, data protection and child protection as well as the responsible data protection supervisory authority must be completed and legally checked before the protected hosting configuration is released to the public.
1. Responsible body
Responsible for the processing of personal data in connection with BELANO is:
[Name of responsible person or company]
[Full address for summons]
Representative: [authorized representative]
Privacy: datenschutz@belano.app
2. To whom this information applies
It applies to the BELANO apps, this web portal, support, account deletion as well as moderation and security processes. BELANO is not aimed at children under 13 years of age. Depending on the country, additional consent requirements for minors may apply.
3. What data we process
| Category | Examples | Purpose |
|---|---|---|
| Account and access | Email address, user ID, login times, session data | Registration, account security and abuse prevention |
| Profile and age | Username, avatar, date of birth, age status, city and country | Profile, age verification and representation in the community |
| Content | Challenge photos, thumbnails, comments, answers and reactions | Delivering the social experience you choose |
| Social relationships | Friend requests, friendships and blocks | Social features, privacy and security |
| Security and Moderation | Reports, preservation of evidence, measures, objections and moderation protocols | Protecting the community and dealing with rule violations |
| Location | Device location to determine city/rural; In principle, only the city and country are shown in the profile | Optional location display |
| Notifications | Push token, time zone and selected reminder times | Reminders and social alerts activated by you |
| Technology and diagnosis | Device/app version, error text, truncated stack traces, security and rate limit events | Stability, bug fixes and attack detection |
4. Legal basis and purposes
We process data in particular to fulfill the user contract (Art. 6 Para. 1 lit. b GDPR), to fulfill legal obligations (lit. c), based on legitimate interests in security, misuse prevention and reliable operation (lit. f) and - where necessary - on the basis of your consent (lit. a). You can revoke your consent with effect for the future.
Optional diagnostic data is only sent after activation. Security protocols necessary to prevent misuse can be processed independently.
5. Publication and Visibility
When you publish a challenge, your photo, username, profile picture, city/country, and interactions can be shown to other people according to the visibility you choose. Before publishing, the app displays the intended recipient group. Private local photo archives are not published solely through their local storage.
6. Location and device permissions
Camera, location and notifications are only used after a device share. Location resolution can be done through a platform or mapping service; The exact position can be technically transferred to this provider. The authorization can be changed at any time in the device settings.
7. Recipients and processors
Hosting, database, authentication, email, push, geocoding, monitoring and support providers can be used for deployment. They only receive the data necessary for their purpose and are contractually and technically limited. A complete, product-specific recipient list is available upon request via the Privacy Contact.
8. Transfers outside the EEA
To the extent service providers process data outside the European Economic Area, we use a permitted transfer mechanism, such as an adequacy decision or EU standard contractual clauses, and consider additional protective measures.
9. Storage period
- Account data and active content: generally until the account or the respective content is deleted.
- Security and moderation credentials: only as long as necessary for investigation, legal defense and compliance with legal obligations.
- Optional diagnostic events: time-limited and automatically deleted after the specified retention period has expired.
- Backups: are overwritten as part of the technical backup cycle and blocked from productive use until then.
10. Account Deletion
You can delete your account in the app or through the web account deletion page. The account, profile, social relationships and associated media files are deleted or, if a legal retention requirement applies, blocked and deleted after the retention period. Security or moderation data may be stored temporarily under a pseudonym when strictly necessary.
11. Your rights
Subject to the legal requirements, you have rights to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent. Contact datenschutz@belano.app.
You may also lodge a complaint with a data protection supervisory authority. The competent authority is: [Responsible data protection supervisory authority].
12. Minors
BELANO uses a neutral age check. People below the minimum age cannot access the service. Teen users receive stronger safety controls and privacy-friendly defaults. Please report a suspected underage account to safety@belano.app.
13. Web portal and local storage
This website does not use marketing trackers. For protected account and team functions, the browser stores a technically required Supabase session. It can be removed by logging out or clearing browsing data. Servers can create technically necessary access and security protocols.
14. Changes
If there are significant changes, we will inform you in the app or on this page. If new consent is required, we will request it before it comes into force.