Privacy Policy

1Who we are#

deesput is operated by VAILENTIN SRL, a company registered in Romania with EUID ROONRC.J2020002950239 (“deesput”, “we”, “us”, “our”). We are the data controller for the personal data described in this Policy, which means we decide why and how it is processed.

This Policy applies to the deesput mobile app, including its feeds, MicroVideos, chat, events, topics, business identities, ads and boosts, and to the pages we publish on deesput.com (together, the “Service”). It applies to everyone who uses the Service, including people who run business identities and advertisers.

This Policy should be read together with our Terms of Service, our End User License Agreement and our Community Guidelines. If you have any question about it, write to us at legal@deesput.com.

2What data we collect#

We collect personal data in three ways: you give it to us, it is created when you use the Service, or we receive it from partners who help us run the Service. We only collect what we need for the purposes described in section 3.

2.1Account data

• Your email address and password when you sign up with email. Your password is stored only in encrypted (hashed) form. We never see it in readable form.
• If you use Sign in with Apple: a unique identifier from Apple, your email address (or an Apple private relay address if you choose to hide your email), and your name, which Apple shares only the first time you sign in.
• Your confirmation that you are 16 years of age or older, and your acceptance of our legal documents.
• Codes we send you by email to confirm your address or reset your password.

2.2Profile data

• Your username, which is permanent and cannot be changed once chosen, and your display name.
• Your profile picture (required) and banner. A default banner is assigned automatically if you do not choose one.
• Your status, your mood emoji, and, for business identities, a short bio.
• Optional details: your date of birth, gender, country and city. Each of these is optional. For each one you can choose not to provide it, to provide it and keep it hidden from other users, or to provide it and show it on your profile.

2.3Content you create

• Posts (text, images, links, YouTube and social media links, reshares) and MicroVideos, including their titles, descriptions and the topics you attach to them.
• Comments, replies, likes, reactions and shares.
• Events you create, including their title, details, date, time, place and location, the people you invite, and the replies (RSVPs) you give.
• Topics you follow, topics you exclude from your feeds, and topics you own, including their name, categories and skin.
• Business identities you create, including their name, username, category, bio and any optional contact details you add (website, email, phone, location).
• Ad campaigns and boosts you create, including their content, targeting choices, duration and status.
• The city you choose for the weather on your Deɘsboard.

2.4Private messages

The content of your chats: text, reactions, shared posts, profiles, topics and events, and files you send (images, videos and documents). We also process information about the conversation itself, such as who takes part, when messages were sent, edited or deleted, whether they were read, and when the other person is typing. See section 10 for how messages are protected and how long chat files are kept.

2.5Your connections and safety tools

• Your friends, friend requests, followers and the accounts you follow.
• Accounts you block, and reports you make about content or accounts, including the address of any link you report as suspicious.
• Your presence status (Online, Busy, Away or Offline), which only your friends can see.

2.6Purchases

All payments are made through Apple. Apple processes your payment details, and we never receive your card or bank details. Through our payment partner RevenueCat we receive what we need to deliver what you bought: the product, a transaction identifier, the purchase and renewal dates, the subscription status, and the currency and country of your App Store account.

2.7Activity in the app

• Which posts and MicroVideos you have viewed, and for MicroVideos how much of the video you watched. We use this to count views, award experience points (XP), levels and badges, and avoid counting the same view twice.
• Which other profiles you have opened. We use this only to award badges, and no one can see who opened their profile.
• Your XP, level and badges.
• Which ads you were shown or tapped, so that we can count views and clicks correctly. Advertisers only receive totals.

2.8Device and technical data

• Your IP address and technical details of each request your device makes to our servers, such as the time, the address requested and the result. These are recorded in server logs.
• A push notification token for your device, if you allow notifications, together with the device platform.
• Records of the files you upload (size, type and time), which we use to enforce upload limits and keep our storage secure.
• Counters used to limit how often actions can be repeated (rate limits), which protect the Service from spam and abuse.

2.9Permissions you grant on your device

The app asks for permission before it uses the following, and you can change your choice at any time in your device settings. The app does not use your device’s location (GPS).

• Photos and camera, to choose or take pictures and videos for your profile, posts, MicroVideos, ads and chats. If you record a video, the microphone is used to record its sound.
• Calendar, to add events to your device calendar when you ask it to.
• Notifications, to tell you about new messages, friend requests and event invitations.

2.10Data kept only on your device

Some data never leaves your phone. This includes your app settings (such as light or dark mode, units, widget layout, chat sounds and whether web links can be opened), a temporary cache of images and videos so that the app loads faster (up to 7 days), the time you have spent on the feeds (used for the wellbeing reminders), and the record that you accepted our legal documents. This data is removed when you delete the app.

3How we use your data#

We use personal data only for the following purposes:

1. To provide the Service: to create and run your account, show your profile, build your feeds from the topics you choose, deliver your messages, run events, topics and business identities, and deliver the things you buy.
2. To keep the Service safe: to prevent spam, fraud and abuse, enforce our Terms and Community Guidelines, review reports, protect other users, apply rate limits and upload limits, and secure our systems.
3. To show ads and boosts: to show sponsored posts to users on the Free plan, match ads to users as described in section 6, and give advertisers total view and click figures.
4. To communicate with you: to send codes, account emails, purchase confirmations and push notifications, and to answer your requests.
5. To run gamification: to calculate XP, levels and badges.
6. To improve the Service: to find and fix errors and understand how features perform, using our own server data. We do not use third-party analytics tools.
7. To comply with the law: to meet our legal, tax and accounting obligations, respond to valid requests from authorities, and establish, exercise or defend legal claims.

We do not sell your personal data, we do not share it with data brokers, and we do not use it to track you across other companies’ apps or websites.

4Legal bases#

Under the EU General Data Protection Regulation (GDPR), we must have a legal basis for each use of your personal data. We rely on the following:

Where we rely on your consent, you can withdraw it at any time in your device settings. Withdrawing consent does not affect processing that already took place. Where we rely on legitimate interests, we have weighed our interests against your rights, and you can object as described in section 12.

5What other people can see#

deesput is a social platform, so a lot of what you share is meant to be seen. Please think before you post.

• Public to other users: your username, display name, profile picture, banner, status, mood, level, badges, the topics you own, your posts and MicroVideos, your comments, and your follower and friend counts. Business identities and everything they publish are public.
• Optional details: your date of birth, gender, country and city are shown on your profile only if you choose to show them.
• Friends only: your presence status.
• Private: your messages (visible only to the people in the conversation), the topics you follow or exclude, who you have blocked, what you have reported, and which posts and profiles you have viewed.
• Outside the app: when a post, MicroVideo, profile, topic or event is shared with a link, deesput.com shows a public preview of it (for example its text, image, name and picture) to anyone who opens the link, and other apps may display that preview.

Other users can copy, screenshot or save what you share with them, including in chats. Deleting something from deesput does not delete copies other people have made.

6Ads and how they are matched#

Sponsored posts (ads) are created by business identities and shown only to users on the Free plan. Every ad carries a visible sponsored mark and shows which business identity is behind it. Boosted posts carry a visible boost mark.

6.1How an ad reaches you

An advertiser chooses who should see their ad by selecting topics, and optionally an age range, genders and a location. We match ads to users on our own servers. To do this we use:

• the topics you follow;
• your age (calculated from your date of birth), your gender, and your country or city, but only if you have added them to your profile. If you have not added them, they are simply not used.

Adding one of these details to your profile and hiding it from other users does not stop it being used for ad matching. If you do not want it used, remove it from your profile.

6.2What advertisers receive

Advertisers never receive your identity or personal data. They see only total figures for their campaign, such as how many times the ad was shown and how many times it was tapped.

6.3What we never do

• We do not use sensitive data (such as health, religion, political opinions or sexual orientation) to target ads.
• We do not use third-party advertising networks, and there is no advertising identifier or third-party tracking in the app.
• We do not sell your data to advertisers or anyone else.

7Who we share it with#

We share personal data only in the following cases.

7.1Service providers

We use trusted companies to run parts of the Service. They process data only on our instructions and under contracts that require them to protect it:

Apple is the seller of all in-app purchases and processes your payment under its own privacy policy. When you use Sign in with Apple, Apple’s privacy policy also applies.

7.2Push notifications

A push notification contains the name of the person or event and the kind of notification (for example, a new message). It never contains the text of your messages or the names of files you send.

7.3Link previews and content from other websites

When you type or paste a link in a post, a comment or a chat, including a private chat, the app sends that link to Microlink (and, for some platforms, to noembed, TikTok or Discord) to build a preview of it. Only the link is sent, not the rest of your message.

When a post links to YouTube or another website, the app loads the preview image directly from that website, and it may load the website’s logo through Google’s favicon service. Those companies can see your IP address when this happens, and their own privacy policies apply.

7.4Links you open

In this Policy, these words mean:

• Title means the short name you give your content when you create it. It is the Title field of a post or a MicroVideo, the Event Title field of an event, and the Campaign Name field of an ad.
• Description means the longer text you write under the title of a post or a MicroVideo, to say what it is about.
• Caption means the text of an ad, written in its Caption field. For an ad, the caption does the job that the description does for a post or a MicroVideo.
• Comments and chat messages are neither titles nor descriptions.

Links can be opened from chats, from comments, from the descriptions of posts and MicroVideos, from the captions of ads and from the website of a business identity. Links in events cannot be opened. Before a link opens, the app shows you the address of the website it leads to and asks you to confirm. If you choose to open it, it opens in your device’s own web browser, outside deesput.

deesput does not record which links you open. The website you visit can see your IP address and the other information your browser shares with it, and its own privacy policy applies. You can turn links off at any time in Settings → Content Setup → Web Links. Links then show as plain text and cannot be opened.

7.5Name and place checks

To protect brands and to check that places exist, the app looks up some of the names and places you type in Wikidata, a public database: topic names, business identity names and usernames, the country and city on your profile, and the locations you target with ads and boosts. Only the typed text is sent.

7.6Other users

We share what you choose to share, with the people you choose, as described in section 5.

7.7Authorities and legal requests

We may disclose personal data, including the content of messages, if we are required to by law, by a court order or by a valid request from a public authority, or if we believe in good faith that it is necessary to prevent serious harm to a person, to investigate fraud or security issues, or to protect the rights, property and safety of deesput, our users or the public.

7.8Business changes

If VAILENTIN SRL, or the deesput business, is involved in a merger, acquisition, restructuring or sale of assets, personal data may be transferred as part of that transaction. We will make sure it remains protected under this Policy and will tell you before it becomes subject to a different policy.

8International transfers#

Our database and servers are in the European Union: Supabase in Ireland and Railway in the Netherlands. Some of our providers are based in, or may access data from, countries outside the European Economic Area (EEA), mainly the United States.

When personal data leaves the EEA, we make sure it stays protected by using one of the safeguards allowed by the GDPR: the EU–US Data Privacy Framework where the provider is certified under it, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism. You can ask us for more information about these safeguards by writing to legal@deesput.com.

9How long we keep it#

We keep personal data only for as long as we need it for the purposes in this Policy, or as long as the law requires.

10Private messages#

Your messages are stored on our servers in encrypted form (AES-256-GCM). This covers the text of your messages, the links to files you send, and the posts, profiles and events you share in chat.

Our encryption is not end-to-end encryption. This means that deesput can technically decrypt messages. We only do so when we are required to by law, to respond to a valid request from an authority, to investigate a serious report or a threat to someone’s safety, or to protect our rights. Access is strictly limited.

Files sent in chat are temporary. Images, videos and documents you send are kept on our servers for 6 hours on the Free plan, 12 hours on Essential, 18 hours on Plus and 24 hours on Premium, based on the sender’s plan. After that they are permanently deleted from our servers. A copy the recipient has already opened may stay on their device for up to 7 days. Forwarded files are uploaded again and follow the plan of the person who forwarded them.

Deleting a conversation removes it from your list only. The other person still has their copy.

If you report a link you received in a chat, your report includes the address of that link and identifies the message it came from, so that we can review it.

11Deleting your account#

You can delete your account at any time in the app: Settings → Account → Delete Account. To prevent mistakes, you will be asked to confirm by typing DELETE.

11.1What is deleted

Deletion is immediate and permanent. We delete your profile, your posts, MicroVideos and comments, the messages you sent, your files on our servers, your connections, and your business identities. Topics you own are closed, and they show as no longer available on posts. We send a final confirmation to your email address.

Content that has been reported is the one exception. It disappears from the app immediately, but we keep a hidden copy for 12 months, and longer while a legal case or a request from an authority about it is open, so that deleting an account cannot be used to destroy evidence.

11.2What remains

• Your username, and the usernames of your business identities, stay reserved so that no one else can take them. They are no longer linked to you.
• Reported content (see above), reports you made or that were made about you, block lists other users keep, and records of rule violations, for safety and legal reasons.
• Purchase and transaction records, as required by accounting and tax law.
• Counters, such as view counts, that refer only to an internal account number no longer connected to any name, email or profile.
• Copies other people saved, and data in our backups until they are overwritten.

11.3Your subscription

Deleting your account does not cancel an Apple subscription. Only you can cancel it, in your Apple account settings. Please cancel it before you delete your account, otherwise Apple may keep charging you.

12Your rights#

Under the GDPR you have the following rights over your personal data:

• Access: to know whether we process your data and receive a copy of it.
• Correction: to have inaccurate data corrected. You can edit most of your profile yourself in the app.
• Deletion: to have your data deleted. You can delete your account yourself in the app.
• Restriction: to ask us to limit how we use your data in certain cases.
• Portability: to receive the data you gave us in a structured, machine-readable format.
• Objection: to object to processing based on our legitimate interests, including ad matching.
• Withdrawing consent: at any time, in your device settings, without affecting earlier processing.

To use any of these rights, write to legal@deesput.com from the email address linked to your account. We may ask you to confirm your identity before we act. We will answer within one month. In complex cases we may extend this by two more months, and we will tell you why. This is free of charge, unless requests are clearly unfounded or excessive.

You also have the right to complain to a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro. You can also complain to the authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first.

13Age requirement#

deesput is only for people who are 16 years of age or older. You must confirm this when you sign up. We do not knowingly collect data from anyone under 16.

If we learn that an account belongs to someone under 16, we will delete it. If you believe a child under 16 is using deesput, please tell us at legal@deesput.com.

14How we protect your data#

We use technical and organizational measures to protect your data, including:

• encrypted connections (HTTPS) between the app and our servers;
• encryption of messages and chat file links on our servers;
• strict access rules in our database, so that each account can only reach its own data;
• private storage for chat files, reachable only through short-lived links;
• limits on uploads and on how often actions can be repeated, to stop abuse;
• encrypted (hashed) passwords, and a check that refuses passwords known to have leaked;
• access to personal data limited to the people who need it for their work.

No system is completely secure. If a personal data breach happens that is likely to put your rights at risk, we will notify the data protection authority within 72 hours where the law requires it, and we will tell you directly if the risk to you is high.

15Automated decisions and AI#

Your feeds are built from the topics you choose and exclude. There is no algorithm designed to keep you scrolling and no ranking based on what goes viral.

Some decisions are automatic because they protect the Service, such as rate limits, upload limits and blocking an action that breaks a limit. These decisions do not have legal effects on you, and you can always contact us about them.

deesput does not currently use artificial intelligence to analyze your content or your private details. If we introduce it, for example to help with moderation, we will update this Policy and inform you before it applies.

16Cookies and tracking#

The app does not use cookies. It contains no third-party advertising, analytics or tracking tools, and it does not use an advertising identifier. We do not track you across apps or websites owned by other companies.

Our legal pages on deesput.com do not set cookies.

17Changes to this Policy#

We may update this Policy when the Service or the law changes. The date at the top of this page shows when it was last updated. If we make important changes, we will tell you in the app or by email before they take effect. If you keep using deesput after the changes take effect, the updated Policy will apply.

18Contact us#

For any question about this Policy or your personal data, or to use your rights, contact us: