Ketchup · iOS app
Ketchup Privacy Policy
How the Ketchup app handles your personal data. In short: we collect only what the app needs, we sell nothing and you can delete your account at any time.
1. Who processes your data
The controller of personal data processed in the Ketchup app (the “app”) is:
Eliathos s.r.o.
Korunní 2569/108, 101 00 Prague 10, Vinohrady, Czech Republic
Company ID: 23402491, VAT ID: CZ23402491
Email: studio@eliathos.cz
This policy explains what data the app collects, why, who we share it with and what rights you have under the EU General Data Protection Regulation (GDPR).
2. Data we collect
| Category | Data | Purpose |
|---|---|---|
| Account | Name or nickname, email address, sign-in identifier (e.g. Sign in with Apple or Google) | Creating and managing your account, signing in |
| Profile | Profile photo, optionally your city | Showing your profile to friends |
| Content you create | Venue visits, ratings, texts, tags, spending, photos of food and venues, comments, reactions, saved places | Core app features: your journal and sharing with friends |
| Friends | Friends list, sent and received requests, blocked users | Sharing content with friends, protection from unwanted contact |
| Location | Device location while using the app, only if you allow it | Showing your position on the map and suggesting nearby venues |
| Photos and camera | Only the images you choose or take | Attaching photos to a visit or your profile |
| Technical data | Device model, OS and app version, language, crash diagnostics | Keeping the app working and secure, fixing bugs |
| Support communication | Contents of emails you send us | Handling your request |
We do not process or request special categories of personal data (such as health data). Please do not include them in texts or photos.
3. Location, photos and permissions
- Location: the app only asks for location access “while using the app”. We do not track your location in the background and do not store a history of your movements. You can use the app fully without location access and simply search for venues manually.
- Photos and camera: the app only accesses images you select or take. It does not browse your photo library.
- You can change permissions at any time in iOS Settings → Ketchup.
4. Who can see your content
For every visit you choose who can see it:
- Friends: only users with whom you have a mutually confirmed friendship can see the visit.
- Only me: the visit stays in your private journal. Nobody else can see the author, text, photos or date of a private visit.
Saved places are always private. Basic venue details (name, address, type) may be part of a shared venue catalogue, but they are not linked to you.
5. Legal basis
- Performance of a contract (Art. 6(1)(b) GDPR): operating your account and the app’s features under the terms of use.
- Legitimate interest (Art. 6(1)(f) GDPR): securing the service, preventing abuse, moderating content and fixing bugs.
- Consent (Art. 6(1)(a) GDPR): access to location, photos and camera. You can withdraw consent at any time in your device settings.
- Legal obligation (Art. 6(1)(c) GDPR): where required by law.
6. Who we share data with
We do not sell your data. The app contains no advertising and does not track you across other companies’ apps and websites.
We only share data with carefully selected processors that help us run the app, to the extent necessary and under a data processing agreement:
- cloud infrastructure providers (hosting, database and photo storage),
- map data providers (e.g. Apple Maps),
- sign-in providers (Apple, Google): only if you choose that sign-in method,
- an email service provider for support communication.
We may also disclose data to public authorities where required by law.
7. Transfers outside the EU
We primarily process data within the European Union. If a processor is located outside the European Economic Area, we only transfer data with appropriate safeguards, based on a European Commission adequacy decision (e.g. the EU-U.S. Data Privacy Framework) or standard contractual clauses.
8. How long we keep data
- Account data and your content for as long as your account exists.
- After you delete your account, we remove your data within 30 days; backups are purged within 90 days.
- Diagnostic logs for up to 90 days.
- Support communication for as long as needed to resolve it, at most 3 years.
9. Deleting your account
You can delete your account at any time directly in the app under Profile → Settings → Delete account. Deleting your account removes your profile, visits, photos, comments, reactions and friends list.
If you cannot access the app, email us from the address linked to your account at studio@eliathos.cz and we will delete it for you.
10. Your rights
You have the right to:
- access your data and obtain a copy,
- rectify inaccurate data,
- erasure (“right to be forgotten”),
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time.
To exercise your rights, email studio@eliathos.cz. We will respond without undue delay, at the latest within one month. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7) or the supervisory authority in your country.
11. Children
The app is not intended for children under 15. If we learn that we have collected data from a child under 15 without parental consent, we will delete it promptly.
12. Security
Communication between the app and our servers is encrypted (TLS). Only authorised people who need the data to run the service can access it. We apply technical and organisational measures appropriate to the risks involved.
13. Changes to this policy
We may update this policy, for example when we add new features. We will notify you of material changes in the app. The current version is always available on this page.
14. Contact
For any privacy question, email us at studio@eliathos.cz.