UrogalloPrivacy policy
Version of 22 October 2026
Who is responsible
Data controller: [Pending: name or company name], with tax ID [Pending] and address at [Pending].
Privacy contact: [Pending: contact email].
What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Apple or Google identifier, or your email | Create your account and sign you in | Performance of the contract |
| Display name, photo, bio and colour | Show your profile to the people nearby | Performance of the contract |
| Date of birth | Check that you are an adult. It is never shown to anyone | Legal obligation and legitimate interest |
| Approximate area (a cell of about 150 m), never your exact position | Show you the people, places and groups around you | Performance of the contract |
| Precise device location | Work out your area and check that you are at a place when you check in or activate it. It is not stored | Consent, given when you allow location |
| Background location, only on Android and only if you allow it | Check you out of a place when you leave, even if you do not open the app. It is not stored | Consent |
| Place check-ins and check-outs | Know who is inside and give the business aggregated statistics | Performance of the contract |
| Messages, photos, videos, voice notes and reactions | Provide the chat | Performance of the contract |
| Notification token | Tell you about hellos and messages | Consent, given when you allow notifications |
| Blocks and reports | Safety and moderation | Legitimate interest in keeping the service safe |
| Business account details (name, company name, tax ID, address, phone) | Verify the business | Performance of the contract |
We do not sell your data, we do not use it for advertising and we do not make automated decisions that affect you.
Who can see your data
People in your area or your place see your display name, photo, bio and how long you have been there. Only the other person sees your private messages. Messages in groups, areas and places are seen by whoever is in that chat.
We use these providers, who process data on our behalf: Apple (sign-in and notifications), Google (sign-in and notifications), Resend (sending email codes) and [Pending: hosting provider]. Some may process data outside the European Economic Area; in that case they do so with GDPR safeguards, such as standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep it
- Your area: 20 minutes from the last time the app checks in.
- Place check-ins and check-outs: 90 days. After that only anonymous counts remain.
- Area and place messages: a few hours. Groups: until they end.
- Unanswered hellos: 24 hours.
- Email codes: 10 minutes. Expired sessions: 30 days.
- Everything else, for as long as you have an account. When you delete it we remove your profile, photo, messages, files, places and business account, and revoke Apple's access if you signed in with Apple.
Your rights
You can access, correct and delete your data, object to or restrict its processing and ask for its portability. In the app you can edit your profile, download all your data and delete your account under You › Settings › My account. For any other request, write to the contact above.
You can withdraw location or notification permission in your phone settings at any time.
If you think we are not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Minimum age
Urogallo is only for people over 18.
Changes
If we change this policy, we will ask you to accept it again in the app.