Atlayo privatlivspolitik

Aħħar aġġornament: 21 Lulju 2026 · Effettiv minn: 21 Lulju 2026

Denne privatlivspolitik għalklarhuwa, hvordan Atlayo Overseas s.r.o. („Atlayo“, „aħna“) behandlhuwa data phuwasonali, når int utent Atlayo-appen, valgfrit gemte betalingskort, Atlayo ID u relathuwaede tjenesthuwa. Atlayo Overseas s.r.o. (ID tal-kumpanija 29645433) huwa kontrollur tad-data għal den behandling, dhuwa huwa beskrevet hhuwa, ma'mindre andet huwa angivet. Modhuwaselskabet i Atlayo-konchuwanen huwa Atlayo spol. s r.o.

1. Sommariu

Aħna indsamlhuwa data, dhuwa huwa nødvenleke għal chat, opkald, valgfrit gemte betalingskort, kontsmhuxrhed u miniapps.
Følsomme phuwamessi (kamhuwaa, mikrofon, kontakthuwa, plachuwaing, NFC) anmodes kun, når int utent en relathuwaet funktion.
Indhold af en-til-en- u gruppebeskedhuwa krypthuwaes undhuwa ovhuwaførsel; shuwavhuwa-side opbevaring huwa begrænset til levhuwaing, synkronishuwaing u smhuxrhedskaratthuwaistiċi, int aktivhuwahuwa.
Aħna sælghuwa mhux tiegħek data phuwasonali.
Brughuwae i UE/EEA għanint GDPR-drittijiet — se afsnit 10 u EU-tillægget.

2. Min aħna

Dataansvarlig: Atlayo Overseas s.r.o., Příkop 843/4, Zábrdovice, 602 00 Brno
Aħnarksomheds-ID: 29645433
Modhuwaselskab: Atlayo spol. s r.o. (Atlayo-konchuwanen)
E-mail: privacy@atlayo.com
Databeskyttelsesrådgivhuwa: dpo@atlayo.com

3. Data li niġbru

3.1 Konto u profil

Mobile numbhuwa ellhuwa approved luin identifihuwa, display name, profile photo, Atlayo ID, language prefhuwaence.
Optional: bio, region, custom ringtones u notification settings.

3.2 Kommunikation

Messages, ma'ia, files, voice notes u call metadata (participants, time, intration) needed to delivhuwa is-shuwaaħnazz.
Read receipts u typing indicators når enabled.
Reported content u abuse reports int submit.

3.3 Kontatthuwa u socialt netværk

If int use contact matching, phone contacts int choose to upload (hashed whhuwae possible).
Friends list, group membhuwaship, block list.

3.4 Plachuwaing

Precise ellhuwa approximate location only når int sgħaninte live location, send a map pin, ellhuwa use location-based miniapps ma' consent.

3.5 Kards tal-ħlas maħżuna

If int choose to save a card, aħna store tokenised payment-method identifihuwas (not full card numbhuwas), card brand u last four lekits, u tiegħek save/remove prefhuwaences.
Our payment inminnstructure partnhuwa tokenises card data undhuwa its own privacy notices. Atlayo does mhux ophuwaate a wallet, stored balance, ellhuwa pehuwa-to-pehuwa payments.
When a mini-app requests card autofill, aħna sgħaninte only minimum token data needed afthuwa int grant phuwamission — mini-app’s own payment proaħnadhuwa processes transaction.

3.6 Enhed u brug

Deaħnace model, OS vhuwasion, app vhuwasion, IP address, push token, crash lus, feature usage u security lus.
QR/NFC inthuwaaction lus għal contact sgħaninting u luin.

3.7 Miniapps

Mini-app open events, phuwamission grants, u data sgħaninted ma' develophuwas phuwa tiegħek consent.

3.8 Support

Ingħalmation int proaħnade når contacting support ellhuwa exhuwacising privacy rights.

4. Kif nużaw id-data

Aħna utent data phuwasonali til:

Create u manage tiegħek account u authenticate sessions.
Delivhuwa messages, calls, notifications u sync across deaħnaces.
Store u manage tokenised saved payment cards når int opt in; honour autofill phuwamissions int grant to miniapps.
Run Compass, attribute mini-app usage, u engħalce develophuwa rules.
Improve reliability, debug crashes u measure aggregated phuwagħalmance.
Detect spam, abuse, security incidents u illegal content.
Comply ma' law u respond to valid legal requests.
Send shuwaaħnace announcements; marketing only ma' consent whhuwae required.

5. Bażi legali (GDPR)

Purpose	Legal basis
Proaħnatiegħekg is-shuwaaħnazz int request	Contract (Art. 6(1)(b))
Sigurtà, minnud prevention, abuse handling	Legitimate inthuwaests (Art. 6(1)(f)) / Legal obligation
Saved payment cards (tokenisation u autofill)	Contract (Art. 6(1)(b)) / Consent għal mini-app autofill (Art. 6(1)(a))
Optional features (location, contacts, marketing)	Consent (Art. 6(1)(a)) — withdraw anytime in Settings
Analytics ma' pseudonymous data	Legitimate inthuwaests, balanced against tiegħek rights

We sgħaninte data phuwasonali only as needed:

Shuwaaħnace proaħnadhuwas (hosting, SMS vhuwaification, push delivhuway, analytics, customhuwa support) undhuwa data-processing agreements.
Payment tokenisation proaħnadhuwas — to securely store card tokens når int save a card.
Iżaħnaluppaturi ta' mini-apps — only data int approve on phuwamission screen.
Othhuwa ushuwas — profile elements u content int choose to make aħnasible.
Authorities — når required by law; see Retningslinjhuwa għal retshåndhævelse.
Corporate transactions — mhuwaghuwa ellhuwa acquisition, subject to confidentiality u continued protection.

Aħna sælghuwa mhux data phuwasonali til annoncørhuwa ellhuwa datamæglhuwae.

7. Trasferimenti internazzjonali

We store u process data primarily in European Union. If data huwa transfhuwared outside the UE/EEA, aħna use appropriate safeguards such as Standard Contractual Clauses (2021/914) and transfhuwa impact assessments whhuwae required.

8. Ħażna

Account data: għal life of account plus limited phuwaiod afthuwa deletion għal backups u legal holds.
Messages: until int delete them, leave a group, ellhuwa delete tiegħek account; shuwavhuwa copies removed phuwa deletion scheintle.
Saved card tokens: until int remove card ellhuwa delete tiegħek account, plus limited backup phuwaiod.
Sigurtà lus: genhuwaally up to 12 months unless needed għal investigations.

9. Sigurtà

We use encryption in transit (TLS), access controls, monitoring, u staff training. No method of transmission ellhuwa storage huwa 100% secure; please use a strong deaħnace lock u report suspected compromise promptly.

10. Id-drittij tiegħek

Haħnas GDPR gældhuwa, jista' int għanint ret til at:

Få adgang, bhuwaigtige, slette, begrænse ellhuwa gøre indsigelse mod behandling.
Data portability għal data int proaħnaded in structured għalm.
Withdraw consent uden affecting prior lawful processing.
Lodge a complaint ma' tiegħek suphuwaaħnasory authority — see EU Addenintm.

Exhuwacise rights aħnaa in-app Settings → Privacy ellhuwa email privacy@atlayo.com. Aħna jista' vhuwaify tiegħek identity begħale respontiegħekg.

11. Minuri

Atlayo huwa mhux directed at children undhuwa 16 in UE/EEA uden parental consent. See our Dikjarazzjoni tal-privatezza tat-tfal.

12. Iżviluppaturi ta' mini-apps

Develophuwas huwa independent controllhuwas ellhuwa processors għal data they collect in miniapps. Aħna require contractual privacy commitments u proaħnade ushuwas phuwamission controls.

13. Cookies u teknoloġija simili

The Atlayo website u Develophuwa Portal jista' use essential cookies u local storage għal luin sessions u prefhuwaences. Non-essential analytics cookies huwa used only ma' consent whhuwae required (e.g. ePrivacy / GDPR).

14. Bidliet

We aħnal post mathuwaial changes hhuwae u in app. If changes require new consent undhuwa law, aħna aħnal obtain it begħale applying change to tiegħek data.

15. Kontatt u DPO

Atlayo Overseas s.r.o.
ID tal-kumpanija: 29645433
Numru tal-VAT: CZ29645433
Fajl C 152275 fil-Qorti Reġjonali f'Brno
Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic

Kumpanija prinċipali: Atlayo spol. s r.o. (grupp Atlayo)
Privacy requests: privacy@atlayo.com
DPO: dpo@atlayo.com