DE EN

PRIVACY POLICY

ecoPulse Network OÜ · Effective from: 2026-04-27 · Last updated: 2026-05-13

Operator & Contact

Company name: ecoPulse Network OÜ

Legal form: Osaühing (OÜ)

Registered office: Estonia

Email: info@ecopulse.network

Data Processing:

Primary database: Stockholm, Sweden (EU)
Provider: Supabase

1. Introduction

This Privacy Policy applies to the ZNAX app and all related services.

ZNAX is operated by ecoPulse Network OÜ and respects your privacy. Unlike other dating apps, we do not share your data with advertising partners or data brokers.

2. What Data We Collect

2.1 At Registration

Email address or phone number
Date of birth (for age verification)
Password (stored encrypted)
For Apple Sign-In / Google Sign-In: email and identifier transmitted by the respective provider

Legal basis: Necessary for use (contract performance)

2.2 Your Profile

Display name
Profile photos and videos
Personal description, interests, tags
Body data, sexual orientation (voluntary)
Address text (e.g. "Berlin, Germany") — automatically derived from GPS, see 2.3
Booster filter settings (with active Booster)
Push notification token (provided by Apple/Google, for push notifications)

Legal basis: Voluntary information, contract performance (push token)

Note: Images are checked by the moderation system for impermissible content.

2.3 Location Data

If you consent to GPS permission, location data is collected automatically:

On app start (once)
On movement > 100m, at most every 60 seconds

Storage: The last position (latitude, longitude) is overwritten in your profile. No location history is kept.

Reverse Geocoding: From the GPS coordinates we automatically generate a readable address text via OpenStreetMap Nominatim (third party, EU/USA servers). lat/lng are transmitted; the response (e.g. "Berlin, Germany") is stored in your profile.

You can revoke location permission at any time in device settings. Without location, distance, map, and hotspot features are limited.

Security: Your location is sensitive. Share it only with users you trust.

Legal basis: Consent (device permission)

2.4 Map Visibility

In your profile settings you can enable the toggle "Show me on the map". Default: OFF.

OFF: You do not appear as a pin on the Mini-Map / Fullscreen Map.
ON: Other users can see your profile picture as a pin at your approximate GPS location.

Privacy fuzzing: The pin position is shifted server-side by approximately 150 meters in a random direction (deterministic, salted offset per profile). Other users therefore see only an approximation, never your exact position. Your real GPS coordinates are NOT shared with other users — they are used solely for server-side calculations (distance, radius search).

You can change the setting at any time; the display updates on next refresh.

Legal basis: Explicit consent (opt-in)

2.5 Presence Status (Online / Last Seen)

While the app is in the foreground we update a timestamp ("last_seen") every 20-30 seconds. Other users use this to see whether and when you were last online.

You count as "online" if last_seen is less than 5 minutes ago.

Legal basis: Contract performance (core function of a dating app)

2.6 Events

Event name, description, date, time
Event images
Event location

Depending on whether the event is public or private, other users see different amounts.

2.7 Albums

Photos you upload
Whom you grant access (friends, all, no one)
Access requests

2.8 Activity Data

Who has visited your profile (visit history)
Who has tapped you (interest)
Your favorites

Retention: 30 days, then automatically deleted

2.9 Booster and Virtual Location Data

When buying a Booster or Virtual Location, the respective filters and target coordinates are stored. This data is needed for the function until the end of the period and is deleted afterwards (statistics may be stored pseudonymously for longer).

2.10 Technical Data

Operating system and device type
Sign-in times and used features
Crash reports (Crashlytics, opt-out possible)

Legal basis: Necessary for functionality and security

2.11 Device Fingerprint

To prevent fake accounts and abuse we create an anonymized hash from:

Device properties
Email address

This hash is stored 1-2 years.

Legal basis: Legitimate interest (security)

2.12 Biometric Data

ZNAX optionally offers biometric authentication (Face ID, Touch ID, fingerprint) for app access.

IMPORTANT: Biometric data is processed exclusively by the end device (iOS / Android). It never leaves the device and is neither collected, stored, nor otherwise processed by ZNAX or ecoPulse Network OÜ.

We only store on our side:

A boolean flag in local app settings ("biometric_auth_enabled")

Legal basis: Consent (user activation), no processing of sensitive data by us.

2.13 Affiliate Data

If you have affiliate status, we additionally collect:

Your personal referral code and link
List of users referred by you
Commission statements (amounts, dates, status)
Bank details for payouts (IBAN, account holder, optionally BIC)
Payout history

Legal basis: Contract performance (affiliate agreement)

3. What We Use Your Data For

Provide app features (registration, profile, matching, maps, hotspots)
Location matching and user suggestions
Security and abuse prevention (fake accounts, image moderation)
Support and help
Technical optimization
Compliance with laws (age verification, taxes)
Affiliate commission accounting and payouts
Push notifications (messages, event reminders, likes)

4. Sharing With Others

Who can see your data?

Other users:

Your profile is visible to others (unless you hide it)
Events are public or private depending on settings
Albums: You control who has access
Map: Visible only if you have enabled "Show me on the map"

Service Providers (working for us):

Service	Location	Purpose	Which Data
Supabase	Sweden (EU)	Data storage, auth, storage, realtime	All app data
RevenueCat	USA	In-app purchases & subscription management	Purchase transactions, subscription status, app user ID
Apple App Store / StoreKit	Apple Inc., USA	Payment processing iOS	Apple account, payment data (processed by Apple, not by us)
Google Play Billing	Google LLC, USA	Payment processing Android	Google account, payment data (processed by Google, not by us)
Apple Sign-In	Apple Inc., USA	Authentication	Email, Apple user identifier
Google Sign-In	Google LLC, USA	Authentication	Email, Google identifier
Firebase Cloud Messaging	Google LLC, USA	Push notifications	User ID, event IDs, notification type, FCM token
Firebase Crashlytics	Google LLC, USA	Crash reports (opt-out possible)	Anonymous crash logs, device model, OS version, app version. No advertising IDs.
Firebase Analytics	Google LLC, USA	Usage statistics (opt-out possible)	Anonymous usage data (page views, sessions, device type). No advertising IDs, no personalized advertising.
OpenStreetMap Tile Server	OSM Foundation, UK	Map tiles (Mini-Map, Fullscreen Map)	IP address, requested map tiles
OpenStreetMap Nominatim	OSM Foundation, UK / EU	Geocoding (GPS↔address text)	Lat/Lng or city search term, IP address
Wikipedia / Wikimedia Commons	Wikimedia Foundation, USA	City images in Hotspot sheet	City search term (e.g. "Berlin"), IP address

All providers have data processing agreements with us where required.

Opt-out: You can disable usage statistics (Analytics) and crash reports (Crashlytics) at any time in app settings under "Security & Privacy".

NOT shared with:

Advertising partners
Data brokers
Marketing companies
Behavioral data buyers

NO advertising IDs (IDFA, Advertising ID) are set for tracking.

Your location and profile data remain private unless you yourself release them (Map toggle, public events).

5. Your Rights

You can exercise the following rights:

Access: You can request what data we store about you.

Rectification: You can correct incorrect data.

Deletion: You can request that we delete your data (with exceptions for tax data).

Withdrawal: You can withdraw your consent at any time (e.g. turn off location data, disable map visibility).

Data portability: You can download your data in machine-readable form (JSON).

How to use these rights:

Email: info@ecopulse.network

We respond within 30 days.

Complaint:

If we cannot help you, you can complain to the data protection authority:

Estonian Data Protection Inspectorate (AKI)

Website: https://www.aki.ee/en
Email: info@aki.ee
Phone: +372 625 6001

6. Retention

Data type	How long
Active account	As long as you use it
Deleted account	30 days (for recovery)
Visit history	30 days
Device fingerprint	1-2 years
Payment data	7 years (legally required)
Affiliate statements	7 years (legally required)
Log data	90 days
Crash reports	6 months
Booster filters	until end of Booster period
Push token	until app uninstall or expiry by Apple/Google

7. Security

Encrypted data transmission (HTTPS/TLS)
Secure authentication (password hashing)
Access control (only necessary personnel have access)
Automatic backups
Bank details stored encrypted
Biometric authentication processes biometric data only locally on the device

8. Cookies and Local Storage

Mobile Apps (Android/iOS)

We store locally:

Login session (encrypted)
Your settings (language, theme, biometric_auth_enabled, refresh_sound, startup_sound, draggable_top_bar position)
Event filters
Cache of profile and city images (CachedNetworkImage)

You can clear this: Device settings → App → Clear storage

Web Interface (if available)

Session cookie (necessary for login)
Local settings
No tracking cookies without your consent

9. Age Verification

ZNAX is for users aged 18+ only.

At registration we ask for your age
Accounts of minors are deleted
We reserve the right to age verification (e.g. ID check)

10. Important Safety Tips

When meeting:

Meet in public places
Share meeting point and time with a trusted person
Enable live location sharing with that person
Stay in contact during the meeting

Warning signs:

Too quick questions on sensitive topics
Pressure to share private photos
Demands to meet quickly
"Too perfect" profile

Location data:

Share location access only with users you trust
Note: precise locations can reveal your exact whereabouts
Enable "Show on map" only if you are aware of the consequences

11. Privacy in the EU

Your data is primarily stored in Stockholm, Sweden (EU) (Supabase).

Some service providers (Apple, Google, Wikipedia, RevenueCat) are located outside the EU. Transfers occur on the basis of Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, where applicable.

Privacy basis:

Full protection under European law (GDPR)
Swedish and Estonian laws apply

12. Payment Processing & Subscriptions

12.1. Purchases and subscriptions are handled via the respective app store platform (Apple App Store, Google Play).

12.2. Payment data (credit card, IBAN, etc.) is NOT transmitted to ZNAX. Apple or Google process this.

12.3. RevenueCat manages subscription status and only transmits to us whether a subscription is active and whether a purchase occurred.

12.4. Auto-renewable Subscriptions: You can cancel these at any time via the settings of the Apple App Store or Google Play Store. Deleting the app account does NOT automatically cancel the subscription.

13. Affiliate-specific Privacy Notes

13.1 Which affiliate data is stored?

Affiliate status and commission rate
Referral code and link
List of referred users (anonymized: only user ID and registration date)
Commission statements (purchase amounts, commission amounts, status)
Bank details (IBAN, account holder, BIC)
Payout history (amounts, dates, references)

13.2 Who sees which affiliate data?

You see: Your statistics, commissions, payouts, referred users (anonymized)
ZNAX admins see: All affiliate data for accounting and fraud prevention
Referred users see: That they registered via a referral link
Other users see: Nothing about your affiliate status

13.3 Bank Details

Your bank details are used only for payouts
They are stored encrypted
You can change or delete them at any time
On deletion, outstanding payouts cannot be processed

13.4 Retention of Affiliate Data

Commission statements: 7 years (legal retention obligation)
Bank details: Until deletion by you or account deletion
Affiliate statistics: As long as you are an affiliate

14. Map Feature and Hotspots

14.1. With map visibility enabled ("Show me on the map" = ON), your profile is shown as an avatar pin at the approximate GPS position to other users.

14.2. Hotspots show anonymized cluster data (number of users online per city). Individual profiles are not disclosed by name in the hotspot cluster.

14.3. City images in the Hotspot are sourced via the Wikipedia API (Wikimedia Foundation, USA). The images are subject to free licenses (CC BY-SA, CC BY, or Public Domain). Sources and authors are visible in the respective Wikipedia article of the city.

14.4. When map tiles and city images are loaded, the user's IP address is transmitted to OpenStreetMap or Wikimedia.

15. Changes to This Policy

ZNAX may update this Privacy Policy at any time. For material changes we will notify you:

In the app
Via email
At least 30 days in advance

16. Contact

Privacy questions?

Email: info@ecopulse.network

We respond within 30 days.

Last updated: 2026-05-13

Effective from: 2026-04-27