Effective Date: 2025/04/27

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how Picfony ("we", "us", or "our") collects, uses, discloses, and safeguards your personal information when you use our websites, applications, and related services (the "Service").

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Cyprus data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Picfony
Email: support@picfony.com
Registered in: Cyprus

2. Information We Collect

• Phone number (required for registration): Used for authentication, account creation, and security purposes.
• Email address (optional): Used for communication, account recovery, and notifications.
• Profile information: Such as event participation history, uploaded content, and settings.
• Technical information: Including IP address, device information, browser type, operating system, and access times.
• Usage information: Interaction with the Service, pages viewed, and actions taken.

3. How We Use Your Information

• To create and manage your account;
• To authenticate your access to the Service;
• To provide and operate the Service, including event creation and photo uploads;
• To communicate with you regarding your account, updates, or security alerts;
• To respond to your inquiries and support requests;
• To comply with legal obligations and regulatory requirements;
• To protect the security and integrity of the Service;
• To improve our Service based on usage analytics.

4. Legal Bases for Processing

We process your personal data on the following legal bases:

• Performance of a contract: When processing is necessary to provide the Service.
• Consent: When you provide explicit consent (e.g., linking your email).
• Legitimate interests: For improving and securing the Service.
• Compliance with legal obligations: As required by applicable law.

5. Data Sharing and Disclosure

We may share your personal data with:

• Service providers who perform services on our behalf (e.g., hosting, authentication, analytics);
• Law enforcement or regulatory authorities where required by law;
• Other users if you make events public (username and event details only; no phone or email is shared).

We do not sell or rent your personal data to third parties.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When your account is deleted or becomes inactive, we securely delete or anonymize your personal data within a reasonable period.

8. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right to Access: Obtain a copy of your personal data.
• Right to Rectification: Correct inaccuracies in your personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restrict Processing: Request limited use of your personal data.
• Right to Data Portability: Request transfer of your personal data to another provider.
• Right to Object: Object to certain types of processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: Contact the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or your local authority.

To exercise any of these rights, please contact us at support@picfony.com.

9. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, accidental loss, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under the age of 13, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of material changes by posting the updated Privacy Policy on our website. Your continued use of the Service after an update constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us at:

Picfony
Email: support@picfony.com