Privacy policy
In short: we collect only what the app needs so your group can ask questions and vote. We don't sell data or show ads. Option photos are deleted from the server a day after the result. Data is stored on Google Firebase servers in Warsaw.
1. Who is responsible for your data
The data controller is Rafał Majecki, the creator of Choosy Goosy. For anything related to your personal data, write to support@choosygoosy.fun.
2. What we collect
Account
- Guest account: an anonymous account ID and a name like “Guest 4F2A”. You don't give us a name or email address.
- Google account: if you sign in with Google or link it later, Google gives us your name (display name), email address and profile photo. The email address is used only for signing in and is never shown to other people. Members of your groups see your name and photo.
What you create in the app
- Groups: group name, invite code, member list and who created it.
- Questions: the question, its options, voting time and author.
- Option photos, if you add them. Before uploading, the app shrinks the photo and re-encodes it without EXIF metadata, including location.
- Votes: which option you picked, stored with your account ID (so everyone can vote only once).
- Reactions to results (emoji).
Technical data
- Notification token (Firebase Cloud Messaging) — to notify you about new questions, reminders and results.
- Usage statistics (Firebase Analytics): events such as signing in, creating a question, voting or joining a group, with an installation ID, device model, OS version and approximate country. They don't contain the text of questions or options, or what you voted for.
- Crash reports (Firebase Crashlytics): when the app crashes — the app state at the moment of the error, device model and OS version.
On your phone
The app keeps local copies of option photos (so they survive deletion from the server) and settings such as your theme and last opened group. This data never leaves your phone and is removed when you uninstall the app.
The choosygoosy.fun website
The website uses no cookies and no analytics tools. Fonts are served from our own server. The hosting server (Firebase Hosting) keeps standard connection logs, including IP addresses, for security.
3. Why, and on what legal basis
- Running the app — account, groups, questions, votes, photos, reactions and notifications. Basis: providing the service you ask for (Art. 6(1)(b) GDPR). We send notifications only if you allow them in your system settings.
- Statistics and crash reports — to learn which features are used and to fix bugs. Basis: our legitimate interest (Art. 6(1)(f) GDPR). You can object — see section 7.
- Security — preventing abuse and server logs. Basis: legitimate interest (Art. 6(1)(f) GDPR).
4. Who sees your data
- Members of your groups see your name and profile photo, the questions you ask, options with photos, and your reactions.
- Votes: until the timer ends, nobody sees anyone's vote — not even whoever asked. After the result, the app shows only how many votes each option got. Your vote is, however, stored with your account ID, and once the result is out group members have technical access to it, even though the app doesn't display it.
- Google (Google Ireland Ltd. and Google LLC) provides our Firebase services — sign-in, database, photo storage, notifications, statistics, crash reports and website hosting — and processes data on our behalf as a processor.
We don't sell data or share it with advertisers.
5. Where it is stored
The database and photos are stored on Firebase servers in the europe-central2 region (Warsaw). Some Google services — sign-in, notifications, statistics and crash reports — may also process data outside the European Economic Area, including in the USA. Google protects such transfers under the European Commission's adequacy decision (EU-US Data Privacy Framework) and standard contractual clauses.
6. How long we keep it
- Option photos — deleted from the server automatically a day after the result. They remain only as copies on participants' phones.
- Account, groups, questions, votes and reactions — while you use the app, or until you ask us to delete your account.
- Notification token — until you sign out on that phone or the token expires.
- Statistics — up to 2 months at user level, aggregated after that.
- Crash reports — up to 90 days.
7. Your rights
You have the right to access, correct, delete, restrict and port your data, and to object to processing based on our legitimate interest (statistics, crash reports). To use these rights, write to support@choosygoosy.fun. We will reply within a month.
You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your country.
8. Deleting your account
You can delete your account yourself in the app: tap your avatar on the home screen and choose Delete account. We then delete, immediately and for good:
- your account and profile (name, photo, sign-in email address) and notification tokens;
- the questions you asked, together with their photos and the votes cast on them;
- your votes and reactions on other people's questions — finished votes keep only the anonymous count per option;
- groups where you were the only member. In other groups you're removed from the member list, and if the group was yours, the longest-standing member becomes its owner;
- data saved on that phone (photo copies, account settings).
If you no longer have access to the app, email support@choosygoosy.fun asking us to delete your account, and include your display name from the app (and, for a Google account, your email address). We will delete it the same way within 30 days. Statistics and crash reports that aren't tied to your account expire on their own after the periods in section 6.
You can leave a group and sign out in the app at any time. Note that after signing out of a guest account you can't get back into it.
9. Children
The app is meant for people aged 16 and over. If we learn that a younger person created an account without a parent's or guardian's consent, we will delete it.
10. Changes
If we change this policy, we'll publish the new version here with a new date. We'll also let you know in the app about significant changes.