Privacy Policy

1. Who we are

Clannz is the data controller for the personal data described here. For any privacy question, or to exercise the rights in section 7, email [email protected].

2. What we collect

Account information

Your email address, username, display name, date of birth, and password (stored only as a salted hash - we never store it in a form we can read). You may also provide a short bio, phone number, country code, profile picture, and interests.

Location

If you choose to use nearby discovery, your device coordinates are sent to our server to find communities near you. If you choose to save a profile, community, event, or message location, we store the place name and coordinates you selected. Location access is optional and only used while the app is open. We do not track your device's location in the background.

Content you create

Messages, posts, comments, events, RSVPs, polls, photos, files stored in vaults, achievements, and reactions. Content you share inside a private community is visible only to that community's members.

Technical and security data

Sign-in timestamps and IP addresses, failed sign-in counts, device identifiers used to deliver push notifications, and crash or error reports. We keep these to secure accounts, detect suspicious sign-ins, and fix faults.

Device features you choose to use

Clannz can access selected photos and videos, your camera, calendar, or contacts when you use a feature that needs them. Contacts stay on your device and are only used to prepare an invitation in your messaging app. Calendar data stays on your device. We upload only the media you choose to share or save in Clannz.

3. Why we use it

To provide the service you signed up for - creating an account, running your communities and events, delivering messages and notifications. To keep the platform safe, by investigating reports, enforcing our Code of Conduct, and detecting abuse. To meet legal obligations where they apply. Where we rely on your consent, such as optional location or marketing preferences, you can withdraw it at any time in the app.

4. Who we share it with

We do not sell your personal data, and we do not share it for advertising. We use a small number of service providers who process data on our behalf, under contract and only for the purposes below.

• Hetzner - server and database hosting, in Germany.
• Cloudflare - file storage and content delivery for images and attachments.
• Google (Firebase) - push notification delivery and crash reporting.
• Google Maps Platform - location search, place details, and map display.
• Google Workspace - sending transactional email such as confirmations and password resets.
• KLIPY - GIF and sticker search and delivery.
• Sentry - error monitoring.

We will disclose data to law enforcement only where we are legally required to, or where it is necessary to prevent serious harm.

5. Where your data is stored

Our servers and database are located in Germany. Some providers listed above may process data outside the UK and EEA; where that happens, transfers are covered by Standard Contractual Clauses or an equivalent safeguard.

6. How long we keep it

• Your account and content - for as long as your account is open.
• Deleted accounts - 30 days, then permanently erased. You can restore your account within that window by signing in.
• Notifications - 90 days.
• Audit records - 180 days.
• Moderation records - for as long as needed to investigate abuse, protect users, enforce restrictions, or meet legal obligations.
• Data export files - 7 days from the moment they are generated.

Backups are kept on a rolling schedule and are overwritten in the ordinary course. If you delete your account, any copy remaining in a backup is erased when that backup rotates out.

7. Your rights

You can access and export your data from within the app, which produces a downloadable file of your account and content. You can correct your profile at any time in settings. You can delete your account from settings, which starts the 30-day window described above.

You also have the right to object to or restrict certain processing, and to withdraw consent where we rely on it. Email [email protected] and we will respond within one month. If you are unhappy with our response you may complain to your local data protection authority; in the UK that is the Information Commissioner's Office.

8. Children

Clannz is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has created an account, email [email protected] and we will remove it.

9. Security

Traffic is encrypted in transit. Passwords are stored as salted hashes. Files in private communities are served only through an authenticated gateway that checks your access on every request. Access to production systems is restricted to key-based authentication.

10. Changes to this policy

If we make a material change we will update the date at the top of this page and notify you in the app before it takes effect.