Woope ("we", "us", "our") is operated by Arnex Development Studio. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your data.

Woope is hosted in the European Union region via Supabase (a US-based company with EU data residency options). We are committed to complying with the General Data Protection Regulation (GDPR) and applicable Czech data protection law.

By using Woope, you agree to the collection and processing of your data as described in this Policy. If you do not agree, please do not use the Platform.

Data controller: Arnex Development Studio Contact: support@woope.eu

We collect the following categories of personal data:

Under GDPR, we process your personal data on the following legal bases:

We use your data to:

We share your data with the following third parties only as necessary to operate the Platform:

Supabase (supabase.com) - our database, authentication, and storage provider. Your data is stored on Supabase infrastructure. Supabase acts as a data processor under a Data Processing Agreement. Data may be stored in EU data centres.

We do not sell your personal data to any third party. We do not share your data with advertisers.

We may disclose your data if required by law, court order, or government authority, or if necessary to protect the safety of users or the integrity of the Platform.

We retain your personal data for as long as your account is active or as needed to provide you with the service.

Account deletion: When you delete your account via Settings, your profile is immediately anonymized (username, display name, avatar, bio, birthday, website, location, and private-messaging settings are cleared or set to private) and your account is permanently locked out of sign-in. Content you posted (posts, comments, projects, messages) is not automatically erased, because it may still be visible to other users who depend on it (for example, the other participant in a conversation, or other members of a community or project you created) - it remains attached to your now-anonymized profile rather than your identity.

Security and moderation records: Reports, moderation actions, and anti-abuse records associated with your account may be retained after deletion for fraud-prevention, security, and moderation-history purposes. We have not yet finalized a fixed maximum retention period for these records; this policy will be updated once that decision is made.

You may contact support@woope.eu with questions about what has been retained.

As a data subject under GDPR, you have the following rights:

Right of access (Art. 15): You can download a copy of your account data at any time via Settings → Privacy & Data → Download my data, or by contacting us.

Right to rectification (Art. 16): You can correct inaccurate or incomplete data via your profile settings or by contacting us.

Right to erasure (Art. 17): You can delete your account at any time via Settings → Privacy & Data → Delete my account. See the Data Retention section above for what is anonymized versus retained for security/moderation purposes.

Right to restriction of processing (Art. 18): In certain circumstances you may request that we limit how we use your data.

Right to data portability (Art. 20): Your data export (Settings → Privacy & Data → Download my data) is provided as a machine-readable JSON file.

Right to object (Art. 21): You may object to processing based on legitimate interests by contacting us.

Right to withdraw consent (Art. 7(3)): Where processing is based on consent (e.g. push notifications), you can withdraw consent at any time via Settings.

Right to lodge a complaint: You have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů - uoou.cz) or any EU supervisory authority.

To exercise any of these rights, contact us at support@woope.eu. We will respond within 30 days as required by GDPR.

Woope uses the following browser storage mechanisms:

Authentication cookies: Supabase sets secure, httpOnly cookies to manage your login session. These are strictly necessary for the Platform to function.

localStorage: We store your language preference (woope-language) in localStorage to persist your choice across sessions. No personal data is stored in localStorage.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies from third-party services.

You can clear cookies and localStorage at any time via your browser settings. This will log you out of Woope.

We implement appropriate technical and organisational measures to protect your data:

No system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 hours as required by GDPR.

Woope is not directed at children under 13.

During registration, users are required to provide their date of birth. Woope uses this information solely to verify that users meet the minimum age requirement.

If a registered account is found to belong to a user under 13 years old, the account will be automatically removed and access to the Platform will be revoked.

We do not knowingly maintain accounts belonging to children under 13. If you believe that a child under 13 has created an account, please contact support@woope.eu and we will investigate and take appropriate action.

Users between 13 and 18 may use the Platform with parental or guardian consent where required by applicable law.

Woope uses Supabase as its infrastructure provider. Supabase is a US-based company. We use Supabase's EU data region where available to keep data within the European Economic Area.

Where data is transferred outside the EEA, Supabase relies on Standard Contractual Clauses (SCCs) approved by the European Commission as a transfer mechanism. You can review Supabase's data processing and transfer documentation at supabase.com/privacy.

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. For material changes, we will notify users via the Platform or email where possible.

Continued use of Woope after changes are posted constitutes acceptance of the revised Policy.

For any questions, data requests, or complaints regarding your personal data:

Email: support@woope.eu Contact page: woope.eu/contact Response time: We aim to respond to all data requests within 30 days.