This policy explains what personal data Gifyo collects, why we hold it, where it lives, and the rights you have over it. The data controller is Gabriel Uhlíř, a sole trader (OSVČ) registered in the Czech Republic (IČO 06410804), Holečkova 838/18, Praha 5, 150 00. For any privacy question, or to exercise a right, write to legal@gifyo.app.
What we collect
- Account details — your email address, a nickname, and your password (stored only as a salted hash, never in the clear).
- Your clips — looping videos you upload to Gifyo. They may contain your face or the faces of other people, together with any captions, comments, and likes you add.
- Clip-scan results — content-safety labels, a confidence score indicating whether a face appears in each analysed frame, and the resulting Faces or Places category. We do not create facial geometry, landmarks, embeddings, biometric templates, or an identity from a face.
- Your mature-content setting — whether you have turned on mature content, and that you have confirmed you are 18 or older. Because this says something about your private life, we treat it as special-category data and protect it accordingly.
- Moderation state — reports involving your account, strikes, and any ban, kept so we can run the service safely and fairly.
- Basic technical data — the minimum needed to deliver the app and keep it secure.
Why we hold it, and our lawful basis
- To run your account and show your clips — performance of our contract with you (Article 6(1)(b) GDPR).
- To keep the service safe — scanning uploads, handling reports, and moderation — our legitimate interest, and our legal obligations, in keeping illegal content off the platform (Article 6(1)(f) and 6(1)(c)).
- To analyse whether a face appears in a clip — your consent, collected before your first clip is uploaded (Article 6(1)(a)). This is used only for content safety and to organise clips into Faces or Places.
- To show you mature content — your explicit, separate consent (Article 9(2)(a)). You can withdraw it at any time in Settings, which turns mature content back off.
Age (18+)
Gifyo is 18+. To use mature content you must confirm you are 18 or older. We do not collect a date of birth or identity documents, and we do not estimate age from faces.
Clip scanning and face data
When a clip is uploaded to Gifyo, our servers automatically analyse it for prohibited content and to determine whether a face is present. This analysis does not identify any person. It applies to every clip uploaded through the app, whether the clip remains private or is shared with other users. Before the first upload, the app shows a summary and asks for your consent. If you do not consent, no clip is uploaded.
- What the scan does — temporary frames are extracted from the original recording and checked for prohibited nudity and sexual content. The scan also measures whether a face appears in each frame. Media may be compared with trusted hash databases of known child sexual abuse material to prevent illegal material from being distributed.
- What we retain — the clip's content-safety labels, per-frame face-presence confidence scores, and its Faces or Places category. The extracted scan frames are deleted as soon as that scan finishes.
- What we do not do — we do not identify people, recognise the same person across clips, authenticate users from their face, estimate age, infer emotions, build face profiles, train facial-recognition models, or use face data for advertising or marketing.
- Who can see the result — detailed scan readings are limited to authorised Gifyo moderators. Other users may see the clip only where you publish or use it in a shared part of Gifyo. They do not receive its scan readings.
Who we share it with
- Hetzner and Cloudflare, our contracted infrastructure and storage providers. They process data only to provide Gifyo's hosting and storage. Our face-presence software runs within our own server environment; no external facial-analysis provider receives clips or scan readings.
- Child-protection organisations, where a trusted hash service is used to compare temporary frames with hashes of known child sexual abuse material, or where the law requires a report. This is a content-safety check, not facial analysis, and the service does not receive stored face-presence scores.
- Apple and Google, for the age signal described above.
- Authorities, where we are legally required to report or respond.
We do not sell your personal data, and we do not use it for advertising.
Where your data lives
Account and moderation data is held in a database hosted in the European Union — Hetzner, in Helsinki, Finland. Stored scan readings remain in the same moderator-only database. Temporary scan frames are processed on our Hetzner-hosted worker and deleted when the scan finishes, except for any frame submitted to the trusted hash-matching service described above.
Your clip files are stored with Cloudflare R2. The bucket is configured with Cloudflare's Eastern Europe (EEUR) location hint. Cloudflare documents that a location hint is a best-effort placement rather than an EU jurisdictional restriction, and Cloudflare may process personal data internationally. For restricted transfers, Cloudflare's Data Processing Addendum incorporates the EU Standard Contractual Clauses and its EU-U.S. Data Privacy Framework commitments.
How long we keep it
- Posts, Concepts, avatars, reactions, and their scan results — until you delete the item, replace it where applicable, or delete your account. Deleting the record removes its stored media and associated scan readings.
- Private export records and their scan results — until you delete your account. These records are created when a newly recorded clip is saved to Photos without being published.
- Temporary scan frames — only for the duration of one scan; they are deleted immediately afterwards.
- Comments and likes on other people's posts — kept but anonymised when you leave, so we do not rewrite other people's conversations.
- Evidence of known illegal material — preserved only where the law requires us to retain it, including after an account-deletion request. It is isolated from ordinary Gifyo content.
- A one-way hash of a banned account's email — kept so a banned account cannot simply re-register.
Deleting your account
You can delete your account at any time from inside the app, under Settings. Deletion removes your clips — including the stored files — your email, nickname, password, clip-scan results, and your mature-content and adult-verification settings. You can also delete individual posts and Concepts, remove or replace an avatar, and delete a reaction with its comment; those actions delete the associated media and scan results. Private export records are deleted with the account. The narrow exceptions are legally required preserved evidence and the ban hash described above.
Your rights
Under the GDPR you have the right to access your data, correct it, have it erased, receive a copy in a portable form, object to processing, and withdraw consent. To use any of these, write to legal@gifyo.app. For erasure, the fastest route is the in-app account deletion above. You also have the right to complain to your data-protection authority; in the Czech Republic this is the Office for Personal Data Protection (ÚOOÚ).
Children
Gifyo is not for anyone under 18. If we learn that an account belongs to a minor, we close it.
Changes
We may update this policy. If a change is significant we will give notice in the app or on this site. The date at the top shows when it was last changed.