Privacy policy

Controller

The controller is FUTUREAPPS AI PROSTA SPÓŁKA AKCYJNA, ul. JANA I JĘDRZEJA ŚNIADECKICH 20D/7, 35-006 RZESZÓW, KRS 0001183162, NIP 5170461317, REGON 542213638. Privacy contact: [email protected].

Information we process

• browser settings such as language, theme, saved events and filters;
• analytics consent and random technical analytics identifiers, only after consent;
• voluntary suggestion content: title, city, date, description, optional source URL and information needed for moderation;
• service requests needed to answer a request, such as the page address and query parameters.

The “My location” control uses browser geolocation. Coordinates are used in the browser to sort cities and are not sent to our server by this feature.

Analytics by consent

Analytics stays off until you enable the “Analytics” category. After consent, the script creates random visitor and session cookies. The server keeps daily identifier hashes for deduplication and removes them on the next collection or report after the day changes. It does not write raw identifiers or IP addresses to analytics tables; it stores daily aggregates of page views, visits, unique visitors and selected clicks in a local SQLite database. You can withdraw consent in cookie settings; the analytics identifiers are then removed from your browser. Aggregates are kept for up to 400 days; older data is removed when recording a visit or reading a report.

Suggestions and automated moderation

A suggestion is stored in a local SQLite database and put in a review queue. An AI tool may help compare sources and find duplicates, with the result subject to review. Do not include personal data. There is no fixed automatic deletion period; suggestions are kept as long as handling and service security require.

Mobile app

The dzisiaj.co app for Android and iOS needs no account. On first launch Firebase Authentication (Google) gives the installation a random, anonymous identifier. With that identifier our server stores your chosen city, language, notification settings, saved events and reminders, the device token for push notifications (Firebase Cloud Messaging) and the history of notifications sent to you, including whether they were read or opened. This is needed to deliver the reminders and summaries you asked for (Article 6(1)(b) GDPR).

Your phone’s location is used only on the device, to compute distances and the “Nearby” view; it is not sent to our server. The map in the “Nearby” tab is displayed by the Google Maps SDK: to load map tiles the phone connects to Google, which receives your IP address, the visible map area (and so your approximate position) and technical device data, processed under the Google Privacy Policy. We do not enable location in the SDK itself — the app draws the “you” dot. You can turn push notifications off in the app or system settings. “Delete my data” in the app settings removes the identifier, settings, saved events, tokens and notification history from our server. Firebase is provided by Google, which may process data outside the EEA under standard contractual clauses.

Crash reports and statistics in the app

Crash reports (Firebase Crashlytics). When the app crashes or hits a serious error it sends a report: the error and stack trace, app version, phone model, OS version, device state at the time (e.g. free memory, screen orientation) and a random Crashlytics installation identifier. Reports do not contain your saved events, location or sign-in identifier. We use them to find and fix bugs (legitimate interest, Article 6(1)(f) GDPR). Reports are kept for 90 days. You can turn them off at any time in the app settings (“Crash reports”).

Usage statistics (Firebase Analytics) run only with your consent, which we ask for on first launch; without it nothing is collected. With consent the app sends which screens and events are opened, saved and tapped (e.g. event identifier, city, category, type of notification opened), together with a random installation identifier, app version, phone model, OS version and language. Google derives an approximate country and city from your IP address, which it does not store. We do not collect the advertising ID, send your location, search text or sign-in identifier, or link the data with Google Signals or advertising. Event-level data is kept for 2 months; aggregated reports may be kept longer. The legal basis is consent (Article 6(1)(a) GDPR); withdraw it with the “Usage statistics” switch in settings, without affecting how the app works. “Delete my data” resets the statistics identifier and deletes unsent crash reports.

Both services are provided by Google Ireland Limited acting as a processor; data may be transferred to the USA under standard contractual clauses and the EU-US Data Privacy Framework.

External sources

Our server requests weather from Open-Meteo without forwarding your IP address or coordinates. Our server sends event venue addresses (never user data) to OpenStreetMap’s Nominatim service to find their coordinates; map data © OpenStreetMap contributors. Your browser requests images from organisers or other event sources, disclosing your IP address and standard technical information to those image providers. OpenAI may receive suggestion text and source URLs for verification. Contact the controller for information about safeguards for any transfers outside the EEA. We do not use advertising trackers or profile users for marketing.

The application or its proxy may also record IP addresses and request metadata in access or security logs. Their retention and access rules are set by the deployment operator and are separate from the aggregate analytics database.

Legal bases, retention and rights

Necessary service operation is processed when needed to deliver the page; maintaining a reliable calendar and security use the operator’s legitimate interest (Article 6(1)(f) GDPR). Website analytics and in-app statistics are based only on consent (Article 6(1)(a) GDPR), which you can withdraw. Crash reports in the app rely on legitimate interest (Article 6(1)(f) GDPR); you can turn them off in the app settings. Legal obligations, including handling rights requests, apply where relevant (Article 6(1)(c) GDPR). Suggestions are handled on the basis of the operator’s legitimate interest in reviewing and maintaining the calendar.

You may request access, rectification, erasure, restriction, data portability and, where applicable, object to processing. Email [email protected]. You may also complain to the Polish President of the Personal Data Protection Office. We do not make solely automated decisions that produce legal effects.