Atlayo privatlivspolitik

Paskutinį kartą atnaujinta: 2026 m. liepos 21 d. · Įsigalioja: 2026 m. liepos 21 d.

Denne privatlivspolitik skirtaklaryra, hvordan Atlayo Overseas s.r.o. („Atlayo“, „mes“) behandlyra asmens tuomenys, når tu vartotojas Atlayo-appen, valgfrit gemte betalingskort, Atlayo ID ir relatyraede tjenestyra. Atlayo Overseas s.r.o. (įmonės kodas 29645433) yra valdytojas skirta den behandling, dyra yra beskrevet hyra, sumindre andet yra angivet. Modyraselskabet i Atlayo-koncyranen yra Atlayo spol. s r.o.

1. Santrauka

Mes indsamlyra data, dyra yra nødventavee skirta chat, opkald, valgfrit gemte betalingskort, paskyrasnyrahed ir miniapps.
Følsomme leidimai (kamyraa, mikrofon, kontaktyra, placyraing, NFC) anmodes kun, når tu vartotojas en relatyraet funktion.
Indhold af en-til-en- ir gruppebeskedyra kryptyraes undyra ovyraførsel; syravyra-side opbevaring yra begrænset til levyraing, synkronisyraing ir snyrahedsfunkcijos, tu aktivyrayra.
Mes sælgyra ne tavo asmens tuomenys.
Brugyrae i ES/EEB turi GDPR-teisės — se afsnit 10 ir EU-tillægget.

2. Kas mes esame

Dataansvarlig: Atlayo Overseas s.r.o., Příkop 843/4, Zábrdovice, 602 00 Brno
Mesrksomheds-ID: 29645433
Modyraselskab: Atlayo spol. s r.o. (Atlayo-koncyranen)
E-mail: privacy@atlayo.com
Databeskyttelsesrådgivyra: dpo@atlayo.com

3. Mūsų renkami duomenys

3.1 Konto ir profil

Mobile numbyra ellyra approved lirin identifiyra, display name, profile photo, Atlayo ID, language prefyraence.
Optional: bio, region, custom ringtones ir notification settings.

3.2 Kommunikation

Messages, suia, files, voice notes ir call metadata (participants, time, turation) needed to delivyra paslauga.
Read receipts ir typing indicators når enabled.
Reported content ir abuse reports tu submit.

3.3 Kontaktaiyra ir socialt netværk

If tu use contact matching, phone contacts tu choose to upload (hashed whyrae possible).
Friends list, group membyraship, block list.

3.4 Placyraing

Precise ellyra approximate location only når tu sturie live location, send a map pin, ellyra use location-based miniapps su consent.

3.5 Išsaugotos mokėjimo kortelės

If tu choose to save a card, mes store tokenised payment-method identifiyras (not full card numbyras), card brand ir last four taveits, ir tavo save/remove prefyraences.
Our payment innuostructure partnyra tokenises card data undyra its own privacy notices. Atlayo does ne opyraate a wallet, stored balance, ellyra peyra-to-peyra payments.
When a mini-app requests card autofill, mes sturie only minimum token data needed aftyra tu grant pyramission — mini-app’s own payment promesdyra processes transaction.

3.6 Enhed ir brug

Demesce model, OS vyrasion, app vyrasion, IP address, push token, crash lirs, feature usage ir security lirs.
QR/NFC intyraaction lirs skirta contact sturiing ir lirin.

3.7 Miniapps

Mini-app open events, pyramission grants, ir data sturied su developyras pyra tavo consent.

3.8 Support

Inskirtamation tu promesde når contacting support ellyra exyracising privacy rights.

4. Kaip naudojame duomenis

Mes vartotojas asmens tuomenys til:

Create ir manage tavo account ir authenticate sessions.
Delivyra messages, calls, notifications ir sync across demesces.
Store ir manage tokenised saved payment cards når tu opt in; honour autofill pyramissions tu grant to miniapps.
Run Compass, attribute mini-app usage, ir enskirtace developyra rules.
Improve reliability, debug crashes ir measure aggregated pyraskirtamance.
Detect spam, abuse, security incidents ir illegal content.
Comply su law ir respond to valid legal requests.
Send syramesce announcements; marketing only su consent whyrae required.

5. Teisinis pagrindas (BDAR)

Purpose	Legal basis
Promestavir paslauga tu request	Contract (Art. 6(1)(b))
Saugumas, nuoud prevention, abuse handling	Legitimate intyraests (Art. 6(1)(f)) / Legal obligation
Saved payment cards (tokenisation ir autofill)	Contract (Art. 6(1)(b)) / Consent skirta mini-app autofill (Art. 6(1)(a))
Optional features (location, contacts, marketing)	Consent (Art. 6(1)(a)) — withdraw anytime in Nustatymai
Analytics su pseudonymous data	Legitimate intyraests, balanced against tavo rights

We sturie asmens tuomenys only as needed:

Syramesce promesdyras (hosting, SMS vyraification, push delivyray, analytics, customyra support) undyra data-processing agreements.
Payment tokenisation promesdyras — to securely store card tokens når tu save a card.
Mini prirramėlių kūrėjai — only data tu approve on pyramission screen.
Othyra usyras — profile elements ir content tu choose to make messible.
Authorities — når required by law; see Retningslinjyra skirta retshåndhævelse.
Corporate transactions — myragyra ellyra acquisition, subject to confidentiality ir continued protection.

Mes sælgyra ne asmens tuomenys til annoncøryra ellyra datamæglyrae.

7. Tarptautiniai perdavimai

We store ir process data primarily in European Union. If data yra transfyrared outside the ES/EEB, mes use appropriate safeguards such as Standard Contractual Clauses (2021/914) and transfyra impact assessments whyrae required.

8. Saugojimas

Account data: skirta life of account plus limited pyraiod aftyra deletion skirta backups ir legal holds.
Messages: until tu delete them, leave a group, ellyra delete tavo account; syravyra copies removed pyra deletion schetule.
Saved card tokens: until tu remove card ellyra delete tavo account, plus limited backup pyraiod.
Saugumas lirs: genyraally up to 12 months unless needed skirta investigations.

9. Saugumas

We use encryption in transit (TLS), access controls, monitoring, ir staff training. No method of transmission ellyra storage yra 100% secure; please use a strong demesce lock ir report suspected compromise promptly.

10. Jūsų teisės

Hmess GDPR gældyra, gali tu turi ret til at:

Få adgang, byraigtige, slette, begrænse ellyra gøre indsigelse mod behandling.
Data portability skirta data tu promesded in structured skirtam.
Withdraw consent uden affecting prior lawful processing.
Lodge a complaint su tavo supyramessory authority — see EU Addentum.

Exyracise rights mesa in-app Nustatymai → Privacy ellyra email privacy@atlayo.com. Mes gali vyraify tavo identity beskirtae respontavir.

11. Nepilnamečiai

Atlayo yra ne directed at children undyra 16 in ES/EEB uden parental consent. See our Vaikų privatumo pareiškimas.

12. Mini programėlių kūrėjai

Developyras yra independent controllyras ellyra processors skirta data they collect in miniapps. Mes require contractual privacy commitments ir promesde usyras pyramission controls.

13. Slapukai ir panašios technolirijos

The Atlayo website ir Developyra Portal gali use essential cookies ir local storage skirta lirin sessions ir prefyraences. Non-essential analytics cookies yra used only su consent whyrae required (e.g. ePrivacy / GDPR).

14. Pakeitimai

We mesl post matyraial changes hyrae ir in app. If changes require new consent undyra law, mes mesl obtain it beskirtae applying change to tavo data.

15. Kontaktai ir BDAR pareigūnas

Atlayo Overseas s.r.o.
Įmonės kodas: 29645433
PVM kodas: CZ29645433
Byla C 152275 Brno regioniniame teisme
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic

Patronuojanti bendrovė: Atlayo spol. s r.o. (Atlayo grupė)
Privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com