Privacy Policy

This Policy explains what personal data the QMaply mobile app (the “App”) and the website qmaply.com (together, the “Service”) process, why, who receives the data and what rights you have. It is prepared under the Law of Ukraine “On Personal Data Protection” and serves as the notice to the data subject under Article 12 of that Law.

1. Owner of personal data

Owner of personal data: IT Zeyz, [ЄДРПОУ / РНОКПП], registered address: [Юридична адреса, Київ, Україна]. Email for personal data questions: support@qmaply.com.

2. What data we process

2.1. Data you provide

• Account data: name, email address and/or phone number, the residential complex you chose. If you sign in with Apple or Google, we receive the identifier and email that service shares. Passwords are stored only as hashes.
• Business data: business name, category, location in the complex (building, section, entrance), opening hours, contact phone, website or social media links, photos. If a sole proprietor runs the business, this data may include their name and phone. Business data is published on the map and visible to all users.
• Messages: content reports, map error reports, support emails.

2.2. Data collected automatically

• Location (precise or approximate), only with your permission in the phone settings. It is used on the device to show where you are and build routes. We do not send coordinates to our servers or keep a location history.
• Technical data: device model, operating system and App version, language, push notification identifier.
• Diagnostics: crash and error reports with an installation identifier.
• Usage data: screen views and actions in the App, such as opening a business card, building a route or tapping “Call”. Business owners see aggregated statistics for their card (views, routes, calls) with no data about individual users.

2.3. What we do not process

Phone contacts, photos you did not choose, payment data, health data, biometric data, advertising identifiers (IDFA/AAID).

3. Purposes and legal grounds

The legal grounds are set out in Article 11 of the Law of Ukraine “On Personal Data Protection”.

4. Processors and other recipients

We do not sell personal data or share it for advertising. Data may be received by:

• Personal data processors that process data on our behalf and only for the purposes of this Policy:
  • Google LLC (USA): Firebase and Google Cloud for data storage, authentication including SMS sign-in by phone number, push notifications (Firebase Cloud Messaging), crash reports (Crashlytics) and usage analytics;
  • Apple Inc. (USA): push notifications on iPhone (Apple Push Notification service), Sign in with Apple;
  • Vercel Inc. (USA): hosting of the website qmaply.com;
  • [Mapbox / Google Maps / OpenStreetMap]: map display.
• Other users: only public business data (name, location in the complex, hours, contacts, photos).
• Public authorities: in the cases and manner provided by law.
• A legal successor: if the Service is reorganised or sold, with prior notice to users.

5. Transfers outside Ukraine

The Service’s main database is hosted on servers in the European Union. Some data (crash reports, push tokens, website technical logs) may be processed on servers in the USA. Such transfers comply with Article 29 of the Law of Ukraine “On Personal Data Protection”: they are needed to perform the Terms of Use concluded in your interest and are made with the consent you give when you register. We only work with providers that are contractually bound to protect the data.

6. Retention

• Account data: while the account is active, and no more than 30 days after it is deleted.
• Business data: while the card is published or until a deletion request.
• Messages and reports: up to 12 months after they are handled.
• Diagnostics and technical logs: up to 90 days.
• Data with a retention period set by law: for that period.

7. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection” you have the right to:

• know what data about you we process, why, where it is stored and who receives it;
• access your data;
• be told whether your data is processed within 30 calendar days of your request;
• require correction or destruction of inaccurate or unlawfully processed data;
• object to the processing of your data;
• withdraw consent at any time (for example, by turning off location or notifications in the phone settings, or by deleting your account);
• protect your data against unlawful processing and claim compensation for damage;
• complain to the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or go to court.

To use these rights, write to support@qmaply.com from the email or phone linked to your account. We reply within 30 calendar days.

8. Deleting your account

You can delete your account in the App (Profile → Settings → Delete account) or by email without signing in. See Delete Account and Data.

9. Children

The Service is not intended for people under 16. We do not knowingly process their data. If you think a child has given us their data, write to support@qmaply.com and we will delete it.

10. Security

We encrypt data in transit (TLS), store passwords only as hashes, limit access to data to the people who need it for their work, and review our safeguards regularly. If a data breach may affect your rights, we will tell you without undue delay.

11. Summary for the App Store and Google Play

All data is encrypted in transit. You can ask us to delete your data.

12. Changes to this Policy

We may update this Policy. We will announce material changes in the App and by email at least 14 days before they take effect. If changes affect processing based on consent, we will ask for your consent again.

13. Contacts

IT Zeyz, [ЄДРПОУ / РНОКПП], [Юридична адреса, Київ, Україна]. Email: support@qmaply.com.