Privacy Policy

1. Introduction

This Privacy Policy describes how Conned ("we," "our," or "us"), operated by Conned App Services, collects, uses, and protects your information when you use our mobile application ("App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

This Privacy Policy complies with applicable privacy laws, including the European Union General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Information You Provide Directly

• Email Address: Required for account creation, authentication, and recovery
• Reports and Content: Information about suspected scammers, including descriptions, locations, and evidence you choose to share
• User Interactions: Votes, views, and other engagement with content

2.2 Automatically Generated Information

• Username: We automatically assign you a unique username to protect your anonymity
• Device Information: Device type, operating system, and app version
• Usage Data: How you interact with the App, including features used and time spent
• Error Logs: Technical information to help us improve the App (via Sentry)

2.3 Information We Do Not Collect

• We do not collect your real name or require personal identification
• We do not access your device contacts, photos (beyond those you explicitly share), or other personal files
• We do not track your location automatically

3. How We Use Your Information

3.1 Service Provision

• Creating and managing your account
• Displaying your reports to other users
• Enabling app functionality and user interactions
• Providing customer support

3.2 Communication

• Sending account-related notifications
• Push notifications about app activity (via OneSignal)
• Responding to your inquiries and support requests

3.3 App Improvement

• Analyzing usage patterns to improve the App
• Identifying and fixing technical issues
• Developing new features and functionality

3.4 Legal Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and preventing fraud
• Protecting the rights and safety of our users

4. Legal Basis for Processing (GDPR)

Where GDPR applies, our legal bases for processing your personal data are:

• Contractual Necessity: To provide the App services you've requested
• Legitimate Interest: To improve the App, ensure security, and provide customer support
• Consent: For optional communications and features (which you can withdraw at any time)
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

5.1 Public Information

• Your reports and content are visible to other App users as part of the App's social features
• Your assigned username is displayed with your content
• Vote counts and view statistics may be publicly visible

5.2 Third-Party Service Providers

We share information with trusted third-party services:

• Supabase: Backend infrastructure and database hosting
• Clarity: User behavior analytics and app improvement
• OneSignal: Push notification delivery

These providers are bound by confidentiality agreements and may only use your data to provide services to us.

5.3 Legal Disclosures

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or the public

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure third-party service providers with appropriate safeguards

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

• Account Data: Retained while your account is active
• Reports and Content: Retained for up to 3 years to maintain the App's effectiveness and allow for pattern recognition
• Usage Data: Retained for analytical purposes for up to 2 years
• Error Logs: Retained for up to 1 year for debugging purposes

You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights and Choices

8.1 General Rights

• Access: Request information about the data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a structured format

8.2 GDPR Rights (EU Residents)

If you are in the EU, you have additional rights:

• Restriction of Processing: Limit how we use your data
• Objection: Object to processing based on legitimate interests
• Consent Withdrawal: Withdraw consent where processing is based on consent
• Supervisory Authority: Lodge a complaint with your local data protection authority

8.3 Communication Preferences

• You can opt out of push notifications through your device settings
• You cannot opt out of essential service communications (account security, etc.)

9. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable privacy laws.

11. Cookies and Tracking

Currently, the App does not use cookies or similar tracking technologies for advertising purposes. We may use minimal analytics to understand app usage and improve our services.

12. Future Changes

12.1 Advertising

We do not currently display advertisements. If we introduce advertising in the future, we will update this Privacy Policy and notify users of any changes to our data practices.

12.2 New Features

Any new features that involve additional data collection or use will be communicated to users with appropriate consent mechanisms.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the App
• Sending an email notification
• Displaying a prominent notice in the App

Your continued use of the App after such updates constitutes acceptance of the revised Privacy Policy.

14. Contact Us

15. Data Protection Officer

For GDPR-related matters, our designated contact for data protection inquiries is available at connedapp@gmail.com.

Effective Date: This Privacy Policy is effective as of June 26, 2025.

Language: This Privacy Policy is written in English. In case of any discrepancy between versions in different languages, the English version shall prevail.