PRIVACY POLICY – EMBERSUS

Last updated: 12.04.2026

1. Data Controller

The data controllers are:

• Mateusz Makles

• Karol Łukawski

• operating under the name: LookForLess (hereinafter: “Controller”, “We”, “Us”)

Contact regarding privacy matters:
📧 lookforless.dev@gmail.com

The Controllers jointly determine the purposes and means of processing personal data of users of the EmbersUs application.

2. What data we collect

2.1 Data provided by the user

Depending on how the application is used:

• username (nickname)

• email address (Google/Apple Sign-In)

• profile picture (optional)

• gender and date of birth (optional)

• content created within the app (notes, memories, events)

• moods, intentions, and statuses (optional)

• lists, activities, and relational data within the app

2.2 Automatically collected data

• Firebase Authentication user ID (UID)

• FCM device token (push notifications)

• login session information

• app usage analytics (Firebase Analytics)

• purchase data (Google Play Billing)

• advertising identifier (GAID/IDFA – only when ads are enabled)

2.3 Guest mode

In guest mode:

• data is stored locally or temporarily in Firebase

• no association with an email account

• data may be lost after logout or app reinstallation

2.4 Data we do NOT collect

• GPS location

• contacts from address book

• SMS or phone call data

• browsing history

3. Purpose and legal basis for processing

We process data for the following purposes:

• providing app services
  (Art. 6(1)(b) GDPR – performance of a contract)

• authentication and login (Google / Apple / Guest)

• user data synchronization (Firestore)

• push notifications (FCM)
  (Art. 6(1)(a) GDPR – consent)

• advertising and monetization (AdMob)
  (Art. 6(1)(a) GDPR – user consent)

• analytics and statistics (Firebase Analytics)
  (Art. 6(1)(a) or (f) GDPR)

• security and fraud prevention
  (Art. 6(1)(f) GDPR – legitimate interest)

• payment processing and purchase verification (Google Play Billing + Cloud Functions)

4. Advertising (Google AdMob)

The application uses Google AdMob services.

Ads may be:

• personalized (based on advertising identifier)

• non-personalized (if the user does not consent)

Users can:

• disable ad personalization in device settings

• withdraw consent for advertising within the app (if available)

AdMob may process:

• advertising identifier (GAID / IDFA)

• ad interaction and impression data

5. Data sharing

Data may be shared only with:

5.1 Service providers

• Google LLC (Firebase, Firestore, Cloud Functions, FCM, Analytics, AdMob)

Google acts as a data processor under GDPR-compliant agreements, including Standard Contractual Clauses (SCCs).

5.2 Other users of the application

Within app functionality, certain data may be shared with other users (e.g. partner/pair):

• nickname

• profile picture

• statuses and relational data

5.3 Legal obligations

Data may be disclosed to public authorities if required by applicable law.

5.4 Data selling

We do not sell personal data

6. Data transfers outside the EEA

Data may be processed outside the European Economic Area (EEA), in particular in the United States, by Google LLC.

Transfers are based on:

• Standard Contractual Clauses (SCCs)

• Google Cloud and Firebase compliance mechanisms

7. Data retention

• account data: until account deletion + up to 90 days

• Firestore data: according to account lifecycle

• backups: up to 7 days

• session and activity data: up to 30 days of inactivity

• analytics data: according to Google Analytics settings

After account deletion, data may be fully deleted or anonymized.

8. User rights (GDPR)

Users have the right to:

• access their data

• rectify data

• erase data (“right to be forgotten”)

• restrict processing

• data portability

• object to processing

• withdraw consent (e.g. ads, push notifications)

• lodge a complaint with a supervisory authority (PUODO or equivalent EU authority)

📧 Contact: lookforless.dev@gmail.com

9. Data security

We use:

• TLS/HTTPS encryption

• Firebase Security Rules

• Firebase App Check

• OAuth authentication (Google / Apple)

• Cloud Functions for server-side validation

• no storage of user passwords

10. Children

The application is intended for users aged 16 and above.

We do not knowingly collect data from users under this age.

If such data has been collected:
📧 lookforless.dev@gmail.com – it will be deleted immediately

11. Logs and technical data

The application may collect:

• error logs (Crashlytics or Firebase)

• device information

• temporary IP address

This data is used solely for app stability and maintenance.

12. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time.

Users will be informed:

• within the application

• or via email (if applicable)

Continued use of the app constitutes acceptance of the updated policy.

13. Contact

For any privacy-related matters:

📧 lookforless.dev@gmail.com

🏷️ Data Controllers: Mateusz Makles, Karol Łukawski (LookForLess)