This policy explains what personal data Gifyo collects, why we hold it, where it lives, and the rights you have over it. The data controller is Gabriel Uhlíř, a sole trader (OSVČ) registered in the Czech Republic (IČO 06410804), Holečkova 838/18, Praha 5, 150 00. For any privacy question, or to exercise a right, write to legal@gifyo.app.
What we collect
- Account details — your email address, a nickname, and your password (stored only as a salted hash, never in the clear).
- Your clips — the looping videos you record, which are recordings of your face, together with any captions, comments, and likes you add.
- Your mature-content setting — whether you have turned on mature content, and your verified adult status. Because this says something about your private life, we treat it as special-category data and protect it accordingly.
- Moderation state — reports involving your account, strikes, and any ban, kept so we can run the service safely and fairly.
- Basic technical data — the minimum needed to deliver the app and keep it secure.
Why we hold it, and our lawful basis
- To run your account and show your clips — performance of our contract with you (Article 6(1)(b) GDPR).
- To keep the service safe — scanning uploads, handling reports, and moderation — our legitimate interest, and our legal obligations, in keeping illegal content off the platform (Article 6(1)(f) and 6(1)(c)).
- To show you mature content — your explicit, separate consent (Article 9(2)(a)). You can withdraw it at any time in Settings, which turns mature content back off.
Age assurance
Gifyo is 18+. To use mature content you must have verified adult status. We check this using age signals from Apple and Google that confirm an adult age bracket without telling us who you are. We do not collect identity documents and we do not run facial age estimation on account holders.
Automated analysis
Every clip is analysed automatically before it is published: it is matched against databases of known child sexual abuse material, and its frames are classified for nudity, sexual content, violence, and the apparent age of the people shown. This runs on the original capture, before any filter. These systems support human decisions and, apart from automatically correcting a missing mature label, do not replace them.
Who we share it with
- Our hosting providers, who store the data on our behalf under contract (see below).
- Child-protection organisations, whose hash databases we match against — we send them data only where the law requires a report.
- Apple and Google, for the age signal described above.
- Authorities, where we are legally required to report or respond.
We do not sell your personal data, and we do not use it for advertising.
Where your data lives
Account and moderation data is held in a database hosted in the European Union — Hetzner, in Helsinki, Finland. Your clips are stored as files with Cloudflare R2, in its Eastern Europe (EEUR) region. Both locations are within the European Union, so your data is not transferred outside the European Economic Area.
How long we keep it
- Account data and clips — for as long as your account exists. When you delete your account, they are removed.
- Comments and likes on other people's posts — kept but anonymised when you leave, so we do not rewrite other people's conversations.
- Evidence preserved under the illegal-content path — kept where the law requires it and for the legal claims of a person depicted, even after an account is deleted.
- A one-way hash of a banned account's email — kept so a banned account cannot simply re-register.
Deleting your account
You can delete your account at any time from inside the app, under Settings. Deletion removes your clips — including the stored files — your email, nickname, password, and your mature-content and adult-verification settings. The narrow exceptions are the preserved evidence and the ban hash described above.
Your rights
Under the GDPR you have the right to access your data, correct it, have it erased, receive a copy in a portable form, object to processing, and withdraw consent. To use any of these, write to legal@gifyo.app. For erasure, the fastest route is the in-app account deletion above. You also have the right to complain to your data-protection authority; in the Czech Republic this is the Office for Personal Data Protection (ÚOOÚ).
Children
Gifyo is not for anyone under 18. If we learn that an account belongs to a minor, we close it.
Changes
We may update this policy. If a change is significant we will give notice in the app or on this site. The date at the top shows when it was last changed.