KupTo Privacy Policy

§1. Data Controller

The controller of personal data is ProGramo Dawid Górniak, with its registered office at ul. Kryształowa 28A, NIP: 7151831116 (hereinafter referred to as the “Controller”).

Contact regarding personal data protection: kontakt@kupto.pl

§2. Scope of collected data

• account data (name, email address, user identifier, profile image, password hash),
• data entered by the User (Lists, Products),
• technical data (IP address, device type, operating system),
• data related to the use of the Application,
• data related to displaying advertisements,
• data related to microphone usage (only as part of the Voice Feature).

§3. Purposes and legal basis of data processing

• providing services and ensuring proper operation of the Application (Art. 6(1)(b) GDPR),
• managing the User account (Art. 6(1)(b) GDPR),
• analyzing and improving the Application (Art. 6(1)(f) GDPR),
• displaying advertisements (Art. 6(1)(a) or (f) GDPR),
• handling inquiries and communication with the User (Art. 6(1)(f) GDPR).

§4. Voice Feature and microphone

The Application allows Users to add Products to Lists using speech recognition. Voice data is used solely to process the User’s command and is not stored by the Controller.

§5. Advertisements and third-party content

The Application displays advertisements provided by third-party vendors. Advertising providers may use their own technologies (e.g. advertising identifiers) in accordance with their own privacy policies.

§6. Data sharing

Personal data may be shared with entities cooperating with the Controller, such as hosting providers, analytics tools, or advertising networks, solely to the extent necessary for the operation of the Application.

§7. Data security

The Controller applies appropriate technical and organizational measures to protect personal data. Despite these measures, complete security of data transmission over the Internet cannot be guaranteed.

§8. User rights

• the right to access personal data,
• the right to rectify personal data,
• the right to erase personal data,
• the right to restrict processing,
• the right to data portability,
• the right to object to processing,
• the right to withdraw consent at any time.

The User also has the right to lodge a complaint with the competent data protection authority.

§9. Data retention period

Personal data is processed for the period necessary to achieve the purposes for which it was collected or until the User account is deleted.

§10. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. The current version of the document is available in the Application and on the website.