1 Data Controller
2 Personal Data We Collect
We collect the following types of personal data:
| Data type | What it includes |
|---|---|
| Account information | Name, email address, and password provided upon registration |
| Photos and media | Media files you upload or share, if you grant permission |
| Location data | Precise location, only if you grant permission through your device |
| Calendar data | Calendar entries and related information, accessed only with your permission |
| Push notification tokens | Identifiers needed to send push notifications via iOS or Android |
| Device identifiers | Device ID, operating system, app version, and related technical information |
| Usage and analytics data | Information about your interactions and app activity, collected via Mixpanel (in-app only) |
3 Legal Basis for Processing
We process your personal data on the following bases:
- Consent — for optional features involving location, camera access, calendar integration, and notifications.
- Contract performance — for core account setup, personalised user experiences, and Service operations necessary to fulfil our contract with you.
- Legitimate interests — for analytics and security monitoring, provided those interests are not overridden by your fundamental rights and freedoms.
4 How We Use Your Data
- To operate and maintain your account and provide the Youtine Service
- To personalise your app experience
- To send you relevant notifications, when you opt in
- To allow sharing of photos, location data, and calendars within your groups
- To analyse usage patterns and improve our products (using Mixpanel, in-app only)
- To secure our Service from misuse or unauthorised access
5 Data Processors
We use carefully selected third-party service providers that handle your data only under our instructions and as necessary to provide the Service:
| Service | Purpose | Data location / safeguard |
|---|---|---|
| AWS | Cloud infrastructure; file and data storage | May involve US or EU processing; protected by Standard Contractual Clauses (SCCs) |
| Mixpanel | In-app analytics (how the app is used) | May involve US processing; protected by SCCs |
| Apple / Google | Native push notifications | Follows iOS/Android platform privacy standards |
6 International Data Transfers
Some of your data may be processed outside the European Economic Area (EEA), such as by AWS or Mixpanel. In these cases, we rely on Standard Contractual Clauses as approved by the European Commission, ensuring equivalent protection of your personal data.
7 Data Retention
- Account data — retained for as long as your account is active. Personal data is permanently deleted from primary systems within 30 days of account deletion.
- Location and calendar data — retained only as long as necessary to provide the relevant feature; deleted upon request or feature deactivation.
- Analytics data — retained according to Mixpanel's standard retention policy; can be erased upon request or opt-out.
8 Your Rights Under GDPR
You have the following rights in relation to your personal data:
- Right to access your personal data
- Right to rectify inaccuracies
- Right to erasure ("right to be forgotten")
- Right to restrict or object to processing
- Right to data portability (receive your data in a structured format)
- Right to withdraw consent at any time for features that rely on consent
To exercise any of these rights, email your request to privacy@youtine.com.
9 Right to Complain
If you are not satisfied with our response, you have the right to submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For more information, visit autoriteitpersoonsgegevens.nl.