Privacy Policy

1. Who is responsible

The controller of your personal data is:

We are not required to appoint a data protection officer. Your messages to privacy@reachiko.com go directly to the people responsible for data protection.

2. What we process and why

We get this data from you, from the sign-in service you choose (your name, email address and an ID), and from other users (for example when someone comments on your moment or reports content). We don’t use your data for advertising. We don’t look for sensitive information about you, such as your health or beliefs. If you choose to share it in a public moment, it is visible like the rest of the moment.

3. What other people can see

• Public: your name, city and country, your moments with their title, description, #tags and sound, your comments, and like counts. Everyone on Reachiko can see them, including guests. People can pass your moments on and share links to them.
• Private: your email address, hobbies, languages, reach, what you watch, and your messages.

4. How your feed is put together

We use your hobbies, languages, country, the people you follow and what you have already watched to put moments in a fair order. Section 5.3 of our Terms of Service explains how. This is a form of profiling, but it does not lead to decisions with legal or similarly significant effects on you. You can change your hobbies, languages and who you follow at any time.

5. Who receives your data

• Other users see what you post publicly (section 3).
• Our service providers process data only on our instructions, under data processing agreements:
  • Cloudflare, Inc. (USA): hosting, content delivery, database, storage of videos and photos, security, and forwarding of emails to our addresses. Where Cloudflare offers it, we keep data in the EU.
  • An email delivery provider, which sends sign-in codes and important emails about your account.
• Sign-in services. If you choose to join with Google (Google Ireland Limited), Apple (Apple Distribution International Ltd.) or Facebook (Meta Platforms Ireland Limited), that service confirms your identity to us. It is a separate controller, and its own privacy policy applies to what it does. We don’t tell it what you do on Reachiko.
• Authorities, where the law requires it (for example a court order), or to report child sexual abuse material or a threat to someone’s life or safety.
• A new owner, if Reachiko or our company is merged or sold. They must respect this policy, and we tell you in advance.

We never sell your personal data or share it for advertising.

6. Transfers outside the EU

Some service providers, such as Cloudflare, are based in the USA or may process data there. For these transfers we rely on the EU–U.S. Data Privacy Framework (where the provider is certified under it) and the European Commission’s Standard Contractual Clauses. You can ask us for more information at privacy@reachiko.com.

7. How long we keep data

We keep data only as long as we need it for the purposes above (see the table in section 2). When you delete your account, we delete or anonymise your data within 30 days. The exceptions are data we must keep by law, or for a report, dispute or legal claim that is still open. Backups are overwritten within 30 days.

8. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access your data and get a copy of it;
• correct inaccurate data;
• erase your data: delete content, or your whole account, in the app;
• restrict how we process your data;
• data portability: get your data, including your moments, in a machine-readable format;
• object to processing based on our legitimate interests, including the profiling used for your feed;
• withdraw consent at any time, where we ask for it;
• not be subject to decisions based solely on automated processing that significantly affect you. We don’t make such decisions.

To use your rights, use the settings in the app or write to privacy@reachiko.com. We answer within one month. For complex requests, we can extend this by two more months, and we tell you if we do. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a supervisory authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk. You can also complain to the authority in the EU country where you live or work.

9. Cookies and storage on your device

We use only what is strictly necessary to run Reachiko. That is why we don’t ask for consent and don’t show a cookie banner:

• your language choice and your guest reach, stored in your browser;
• a sign-in cookie that keeps you signed in;
• security cookies set by Cloudflare to protect Reachiko against bots and attacks.

We use no analytics cookies, advertising cookies or third-party trackers. If we ever measure how Reachiko is used, we will do it without cookies and without following you across other websites, or ask for your consent first.

10. Children

Reachiko is for people aged 16 and over. We don’t knowingly collect personal data from children under 16. If we learn that a child under 16 has created an account, we delete it. Parents can contact us at privacy@reachiko.com.

11. Security

All connections to Reachiko are encrypted (HTTPS). Only people who need data for their work can access it, and we collect as little as possible. Photos and videos are re-encoded on your device before they are uploaded, which removes hidden information such as the place where they were taken. No system is perfectly secure. If a data breach is likely to put your rights and freedoms at high risk, we tell you without undue delay.

12. Changes to this policy

We update this policy when the way we process data changes. If a change is significant, we tell you in the app or by email before it applies. The date at the top shows when this policy last changed.