Privacy Policy of the Groufr Service

Effective from 25 September 2026.

1. Data Controller and Contact

The controller of personal data within the meaning of Article 4(7) of the GDPR is Celdy technology, s.r.o., having its registered office at Korunní 108, 10100 Prague 10, Czech Republic, Company ID (IČ): 06526641 (the “Controller” or the “Operator”).

For any question about your personal data or to exercise your rights, write to support@groufr.com. The Operator has not appointed a data protection officer, as it is not required to.

2. Personal Data We Process

Account data: email address, name or nickname, password (stored only as a one-way hash), profile picture, preferred language and time zone, and optionally an IBAN you enter so that others can pay you back.
Membership data: the Groups and events you belong to, your role and your responses (“I will attend”, “Maybe”, “I won’t attend”).
Content you share: messages, direct messages, photographs, files, links, polls and votes, reactions and reports.
Expense data: shared expenses, shares, settlements and payment records between Users.
Purchase data: the plans you buy, their price, period and invoices. Card details are entered directly with Stripe; the Operator never sees or stores them.
Device data (mobile apps): device name, operating system and app version, push notification token, the time and IP address of the last connection.
Public poll votes: when you vote through a public poll link without signing in, the name and email address you enter and your answers.
Technical data: IP addresses, server access logs and the application log of security-relevant events (sign-ins, failed sign-ins, sent emails, votes through public links).

3. Purposes and Legal Bases

Providing the Service — your account, Groups, events, chat, polls, files, expenses, notifications and emails you asked for: performance of a contract (Article 6(1)(b) GDPR).
Payments for plans and the related invoices: performance of a contract; keeping accounting and tax records: a legal obligation (Article 6(1)(c) GDPR).
Security and abuse prevention — logs, rate limits, reports of abusive content, the email sent to the owner of an address used for a public poll vote: the Operator’s legitimate interest in a safe and working Service (Article 6(1)(f) GDPR).
Service emails about your account, plan and its expiry: performance of a contract. You can switch off notification emails and digests in your profile or with the unsubscribe link in each of them.

The Operator does not use your data for advertising, does not sell it, does not create profiles and makes no decisions about you by automated means.

4. Who Can See Your Data

What you share in a Group is visible to its members; what you share in an event is visible to the event’s participants, including guests. Direct messages are visible to you and the person you write to. When the organiser of an event or poll turns on a public link, anyone with the link can see what the link shows. Your name and profile picture are visible to the people you share a Group, an event or a connection with. The Operator is not responsible for any further processing or disclosure of content by other Users.

When you post a link, the Operator’s server downloads that page to show a preview; the website sees the Operator’s server, not you.

5. Processors and Other Recipients

The Operator uses the following processors, bound by a data processing agreement under Article 28 GDPR:

Hetzner Online GmbH (Germany) — servers, database, file storage, backups and monitoring; all data are stored in Germany.
Scaleway SAS (France) — delivery of emails.
Google Ireland Limited (Ireland), Firebase Cloud Messaging — delivery of push notifications to Android devices.
Apple Distribution International Ltd. (Ireland), Apple Push Notification service — delivery of push notifications to iOS devices.

A push notification carries the device token and the text of the notification (for example who wrote in which Group). Google and Apple may process these data in the United States; the transfer is based on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework and on standard contractual clauses. You can switch push notifications off on your device at any time.

Stripe Payments Europe, Limited (Ireland) processes payments for plans. For fraud prevention and its own legal obligations Stripe acts as an independent controller under its own privacy policy (stripe.com/privacy).

The Operator discloses data to public authorities only where the law requires it.

6. Cookies

The Service uses only cookies that it needs to work. It uses no analytics, advertising or third-party tracking cookies, so it does not ask for consent to cookies.

Session cookie — keeps you signed in: up to 14 days; without “remember me” you are signed out after 20 minutes of inactivity.
locale — the language you chose: 1 year.
_nss — technical protection against cross-site request forgery: until you close the browser.
pv_voted_…, dtp_voted_… — remember that you already voted through a public poll link: 30 days. They contain a coded value, not your email address.

7. Data Retention

Your account and content are kept for as long as you use the Service. When you delete your account, it is deactivated at once and can be restored for 30 days; then your personal data are erased. Where you appear in shared expense records of other Users, your name and email address are anonymized instead, so that their settlement history stays correct.
Files you delete are removed permanently after 7 days.
Direct messages on the free plan: the Service keeps each sender’s last 100 messages in a conversation; older ones are deleted.
Groups whose plan has expired become read-only for 30 days, are blocked from day 30 to day 60 and are closed after 60 days.
Public poll votes are kept for as long as the poll exists, unless the owner of the email address removes the vote with the link we send.
Mobile device records are kept until you delete your account; signing out on a device stops notifications to it.
Application log: 12 months. Server access logs: 14 days. Backups: 30 days.
Payment and invoice records: 10 years, as required by Czech tax law, also after the account is deleted.

Accounts created through an invitation link. When you join an event or poll through a link shared by its host, we create a free account from the name and email address you enter, without a password, so that you can take part and sign in again using a link sent to your email. If such an account is never confirmed (no sign-in link used and no password set) and has taken part in no event for 90 days, it is deleted automatically after 30 days from creation. Where the account appears in shared expense records of other users, the personal data (name, email) are anonymized instead, so that the other participants' settlement history stays intact.

8. Your Rights

You have the right to access your personal data, to have them rectified or erased, to restrict their processing, to data portability, and to object to processing based on legitimate interest. Most of your data you can see and change directly in the Service; you can delete your account yourself in your profile or at groufr.com/delete-account. For everything else, including a copy of your data, write to support@groufr.com. The Operator will reply without undue delay, at the latest within one month.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

9. Data Security

The Operator implements appropriate technical and organizational measures to protect personal data: all connections are encrypted, passwords are stored only as hashes, access to Groups and events is checked on every request, and administrative access to the servers is restricted to the Operator.

10. Changes to This Policy

The Operator may update this Privacy Policy. The date at the top shows the current version; material changes will be announced in the Service or by email in advance.

11. Language Versions

The primary version of this Privacy Policy is the Czech version. Other language versions may be provided for convenience only.