Privacy Policy
In short
- We collect only what the app needs: your account (name, e-mail, password) and the letters you write.
- Letters are visible to you and to the Ježíšeks you accepted. We never sell or share them with anyone else.
- No ads, no tracking, no third-party analytics.
- You can have your account and all data deleted at any time.
1. Controller
NEMOSERVIS Praha s.r.o., Company ID 26122375, Czech Republic. Contact: jezisek@nemoservis.cz.
2. Data we process
| Data | Purpose |
|---|---|
| Name, e-mail, password (stored only as a bcrypt hash), role | Account and sign-in |
| Letters: text, wishes, reasons, links, sizes (e.g. height, shoe size) | Core function – delivering the letter to the Ježíšeks |
| Images you choose for wishes or the jigsaw | Shown in the letter. The app only accesses photos you pick, never your whole library. |
| Invitations and connections | So each Ježíšek sees only their family members' letters |
| Read status and gift reservations | Coordination between Ježíšeks; never sent to the letter author |
| Server logs (IP address, time of request) | Security and troubleshooting, kept at most 30 days |
We do not collect location, contacts, advertising identifiers or health data. We use no advertising or analytics SDKs and do not track you across apps or websites.
3. Stays on your device
Your sign-in token is stored in the iOS Keychain. Face ID / Touch ID is handled entirely by iOS – biometric data never reaches us. Sound and music settings stay on the phone.
4. Link previews
When you add a link to a wish, the app fetches the page title and image directly from your phone to show a preview. That website sees ordinary request data such as your IP address.
5. Legal basis
Performance of a contract (Art. 6(1)(b) GDPR) for providing the app; legitimate interest in security (Art. 6(1)(f) GDPR) for server logs.
6. Children
Children under 15 may use the app only with a parent's or guardian's consent – typically the parent creates the child's account as a Ježíšek. We ask children for no more than a name or nickname and an e-mail for sign-in. A parent can request access to or deletion of a child's data at any time.
7. Who sees the data
The Ježíšeks you accepted (your sent letters, name and e-mail); our hosting provider as a data processor, on servers in the European Union; and authorities only where required by law. We do not sell data or transfer it outside the EU.
8. Retention
As long as you have an account. Deleted drafts and removed images are erased immediately. After an account deletion request we delete everything within 30 days; backups are overwritten within a further 30 days.
9. Account deletion
E-mail jezisek@nemoservis.cz from your registered address and ask for deletion. We will confirm once it's done. Signing out in the app only removes the account from the phone; it does not delete it.
10. Your rights
You have the right to access, rectify, erase, restrict, port and object to processing of your data. Contact us at jezisek@nemoservis.cz. You may also lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).
11. Security
All traffic is encrypted (HTTPS), passwords are stored only as bcrypt hashes, and the server checks access to every letter and image on each request.
12. This website
jezisek.nemoservis.cz uses no cookies or analytics and loads nothing from third parties. It runs on Cloudflare, which briefly processes technical data (e.g. IP address) to deliver and protect the site.
