Privacy Policy

1. Who is responsible

Rando is an iPhone dating app. The controller of your personal data is Dávid Hasík, a natural person in Prague, Czech Republic, who runs Rando under the brand Hasik Labs ("we", "us").

Contact for privacy questions and for using your rights: hasiktechnologies@gmail.com. We don't have a data protection officer; write to this address and the controller answers personally.

Rando has no ads, no analytics or tracking tools, and no data brokers. We never sell your data and never use it to track you across other companies' apps or websites.

2. What we collect, why, and on what legal basis

Account

• Email address and an internal account ID, to create your account and send sign-in codes (Amazon Cognito). Basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• Date of birth, to make sure you are at least 18 and to show your age (not your birth date) on your profile. Basis: contract (Art. 6(1)(b)); keeping minors off Rando is also our legitimate interest and legal duty (Art. 6(1)(c) and (f)).

Profile

• Name, gender, bio, categories and up to 6 photos. These are shown to other Rando users. Basis: contract (Art. 6(1)(b)).
• The genders you want to meet. Together with your own gender, this can reveal your sexual orientation, which is a special category of data under Article 9 GDPR. We use it only to decide who you are shown to and who is shown to you. We never display it on your profile, but people you are shown to may be able to infer it. Basis: your explicit consent (Art. 9(2)(a) GDPR), which the app asks for separately before you choose your preferences. You can withdraw it at any time in the app (Settings › Privacy). Withdrawing deletes your preferences and hides your profile from discovery; it does not affect what we did before you withdrew.
• Please don't put anything in your bio or photos that you don't want other users to see, such as your religion, health or political views. If you do, you make it visible to other users yourself.

Location

• Approximate location. With your permission in iOS, the app sends your location to our server, which rounds it to an area of about 2 km before storing it. We use it only to find people near you and to show an approximate distance in 5 km steps (for example "within 5 km"). Your location is never shown to other users, only that approximate distance. Basis: contract (Art. 6(1)(b)); access to location on your phone only with your permission, which you can turn off at any time in iOS Settings.

Reach-outs, chats and safety

• Reach-out notes and chat messages, delivered to the person you write to and stored so both of you can read the conversation. Basis: contract (Art. 6(1)(b)).
• Reports and blocks. When you report someone, we store the report, the reason, your account ID and the reported profile, photos or messages, and a moderator reviews them. The reported person is never told who reported them. When you block someone, we store the block so the two of you are never shown to each other again. Basis: our legitimate interest in keeping Rando safe and our duties as a hosting service under the EU Digital Services Act (Art. 6(1)(c) and (f)).
• Moderation decisions (what was removed or restricted, why, and when), so we can tell the affected user and handle complaints. Basis: legal obligation under the Digital Services Act (Art. 6(1)(c)).

Subscription

• Rando Unlimited subscription status (product, start and expiry dates, renewal status, transaction IDs) that Apple confirms to us. Apple handles the payment; we never see your card or payment details. Basis: contract (Art. 6(1)(b)); keeping records of transactions for tax and accounting law (Art. 6(1)(c)).

Technical data

• Server logs (IP address, time of request, errors), to run, secure and fix the service. Basis: legitimate interest (Art. 6(1)(f)).

Where we rely on legitimate interests, you can object (see section 6).

3. Who can see your data

• Other Rando users see your name, age, gender, bio, categories, photos and an approximate distance. Only the person you're talking to sees your reach-out notes and messages.
• Amazon Web Services (AWS), our processor, hosts Rando in the EU (Frankfurt, Germany): database, photo storage, sign-in (Amazon Cognito) and sign-in emails. AWS acts only on our instructions under its data processing terms. Photos may be delivered through Amazon CloudFront, which caches files at locations worldwide; where data leaves the EEA it is protected by the EU Standard Contractual Clauses in AWS's data processing terms.
• Apple distributes the app and sells and bills Rando Unlimited. Apple processes your purchase as its own controller under Apple's privacy policy and tells us only the subscription status.
• Authorities, only when the law requires it. If we learn of a criminal offence that threatens someone's life or safety, we must inform the police (Art. 18 Digital Services Act).

4. How long we keep it

• While your account exists: everything above, until you change or delete it.
• When you delete your account: your profile, photos, messages, location, preferences and sign-in account are deleted immediately.
• Backups: deleted data can remain in encrypted backups for up to 35 days, after which it is overwritten. We don't restore deleted accounts from backups.
• Reports (including the reported content) and moderation decisions: 12 months after the report, even if an account is deleted, so we can protect users from repeat abusers and handle complaints and legal claims.
• Subscription records: as long as tax and accounting law requires (up to 10 years in the Czech Republic).
• Server logs: up to 30 days.

5. Security

• Encryption in transit (HTTPS/TLS) and at rest
• Sign-in through Amazon Cognito; your identity on the server always comes from a verified sign-in token
• Your exact location never leaves the server; it is rounded before it is stored
• Access to production data limited to the controller

6. Your rights

Under the GDPR you can ask us to:

• give you access to your data and a copy of it (Art. 15)
• correct it (Art. 16) — most of it you can edit in the app
• delete it (Art. 17) — you can delete your account in the app
• restrict its processing (Art. 18)
• give it to you in a portable, machine-readable format (Art. 20)
• stop processing based on legitimate interests (right to object, Art. 21)
• withdraw your consent at any time, as easily as you gave it (Art. 7(3)) — in the app under Settings › Privacy

Email hasiktechnologies@gmail.com from the address on your account. We answer within one month. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

You can also complain to a data protection authority, in particular in the EU country where you live or work. In the Czech Republic that is the Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

7. Delete your account

In the app, open Settings › Delete account and confirm. Your data is deleted immediately as described in section 4. If you can't open the app, email us from the address on your account and we'll delete it within 30 days.

Deleting your account does not cancel a Rando Unlimited subscription, because Apple bills it. Cancel it in iPhone Settings › [your name] › Subscriptions.

8. Adults only

Rando is only for people aged 18 or over. We check the date of birth you enter and don't create accounts for anyone under 18. If we learn that a user is under 18, we delete the account. If you believe a minor is using Rando, report the profile in the app or email us.

9. Changes

If we change this policy, we update the date above. For significant changes we tell you in the app before they take effect, and where a change needs your consent, we ask for it again.

10. Contact

Dávid Hasík – Hasik Labs, Prague, Czech Republic
hasiktechnologies@gmail.com