mondomusic Privacy Policy

1. Product Ownership

1.1 mondomusic is developed by and owned by giggleapps s.r.o., a company registered in the Czech Republic.

1.2 mondomusic is provided to end users through the Apple App Store and Google Play.

2. Data

2.1 mondomusic enables end users to store information about their musical interests and skills, such as the instruments they play, the qualifications they possess, their base location, the musical genres in which they are interested, the groups they belong to, and the events they will attend, as well as other data, including examples of their playing and other media files they may post. Users may also offer endorsements of other end users, which other end users may accept or reject.

2.2 mondomusic enables login through Facebook. In such circumstances, mondomusic takes the user’s name, profile picture and email address from Facebook and stores them in the mondomusic database. A user may prevent other users from seeing his or her profile, but otherwise, the user’s name and profile picture (subject to mondomusic approval) will be visible to other users. The user’s email address, which identifies the user in the mondomusic database, is never visible to another user.

2.3 All provided data, except for an end user’s base location and email address, are visible to other end users unless explicitly marked as private (for example, user events marked as private are visible only to end users attending the same event). Users may mark events as private when creating or editing an event, or directly in the user’s Diary. Location may be marked as not to be disclosed in Edit Profile.

2.4 mondomusic does not allow an end user’s base location to be shared unless explicitly (through chat) or implicitly if an event or group location is derived from an end user’s base location.

2.5 The proximity of another user is never given as closer than 100 metres.

2.6 Data uploaded by the mondomusic administration, including email addresses, websites, telephone numbers, and physical locations, is obtained only from publicly available sources.

2.7 Data are stored in a MongoDB database and in document folders (images) which may be distributed across several global locations protected by and under the control of Amazon Web Services, and it complies with the EU’s General Data Protection Regulation (GDPR). mondomusic is a data processor under the definitions of GDPR, except for when the data is uploaded by mondomusic administration from publicly available sources, such as venue schedules, in which case, but only in respect of such data, mondomusic is a data controller. mondomusic takes all reasonable precautions to ensure the security of data stored in mondomusic. mondomusic does not sell personal data and does not share personal data with other mondomusic users or with any third party except trusted service providers (processors) as described in §5. mondomusic accepts its obligation under GDPR to report any breaches of data security to the appropriate agency.

3. Consent

3.1 In all cases end users are data controllers and accept full responsibility for the data they store in the mondomusic database.

3.2 mondomusic administration reserves the right to remove offensive data at its discretion. For appeals, the users may contact mondomusic at info@mondomusic.app with details of their account and reasoning.

4. Content and Community Standards Enforcement

4.1 Users are strictly prohibited from uploading, sharing, or promoting content that includes, but is not limited to:

• Sexual content, including child sexual abuse, exploitation, or any form of endangerment.
• Violent or aggressive content, including depictions of physical harm, threats, or incitement of violence.
• Harassment and bullying, including targeted abuse, hate speech, or any behaviour intended to intimidate or demean others.
• Illegal activities, including drug promotion, fraud, and any other content that violates applicable laws.
• Misinformation, including knowingly spreading false or misleading information that may cause harm.

4.2 We encourage all users to remain vigilant and report any content or behaviour that violates our community standards.

4.3 Users can report suspicious or harmful content directly through the mondomusic app by tapping the ‘Report’ option on each post or each user profile. Alternatively, concerns can be reported via email at info@mondomusic.app. All reports are handled with strict confidentiality to protect the privacy and safety of our users.

4.4 Our moderation team will promptly review the reported content or behaviour.
If a violation is confirmed, actions may include:

• Content removal to maintain a safe and respectful environment.
• Account suspension or termination for users who violate our policies.
• Reporting to the relevant legal authorities, CZ.Nic Association, the National Center for Missing & Exploited Children (NCMEC), Internet Watch Foundation and others required.

5. Provision of Data to Third Parties (Processors)

5.1 We do not sell personal data. We share personal data only with carefully selected service providers (data processors) who help us provide, secure and improve the app. These providers may process limited device, usage and diagnostic data solely on our instructions and not for their own marketing.

5.2 Who we use and why

• AppsFlyer – install attribution & campaign measurement. Helps us understand which marketing channels lead to installs/engagement so we can improve the app.
  Data types (typical): device identifiers (e.g., IDFA/GAID where permitted), IP address, install timestamp/referrer, app version/OS, coarse location derived from IP, in-app event metadata (e.g., “app open”).
• Google Firebase (incl. Analytics, Crashlytics) – analytics & diagnostics. Helps us understand feature usage and app stability, and fix crashes.
  Data types (typical): app-instance ID, device/OS info, interaction events, performance metrics, crash logs/stack traces.
• Google Analytics (if enabled in app) – aggregated usage analytics to improve features and user experience.
  Data types (typical): event counts, session metrics, device/OS.
• Hosting & storage: Amazon Web Services and MongoDB – secure hosting and data storage for profiles, events, media and operational logs.

5.3 Security
All data exchanged with our services and processors is encrypted in transit via TLS/HTTPS. We also use encryption at rest on our cloud infrastructure (AWS-managed/MongoDB encryption). Access to data is restricted to authorised personnel under confidentiality obligations.

5.4 International transfers
Some processors may process data in countries outside your own. Where this occurs, we use appropriate data transfer safeguards (such as EU/UK Standard Contractual Clauses and DPAs) to protect your information.

5.5 Your choices

• Marketing analytics/attribution: On iOS, you can deny tracking in the App Tracking Transparency prompt (if shown) and you can reset your advertising identifier. On Android, you can opt out of Ads Personalisation and reset your advertising ID in device settings.
• You can delete your account at any time (see §6). Deleting your account removes your data from our active systems and, after a short period, from backups.

5.6 Lawful disclosures
We may disclose data if required by law or to protect the rights, property or safety of users and the public, and in the context of a merger, acquisition or reorganisation, subject to applicable legal protections.

6. Data Deletion

6.1 A mondomusic user may delete their account at any time. When you do so, all personal data is permanently deleted from our active systems, including events, group memberships, chats, endorsements, instruments, teachers, qualifications, and your core account details. Data are also removed from system backups within 30 days and cannot be restored.

6.2 You do not need to contact us to delete your account. The app provides a Delete Profile button on the Edit Profile page (accessible from the hamburger menu). Once confirmed, a message in the app will verify that your account has been deleted. Users may contact us at info@mondomusic.app for additional details. Deleting your account will stop all in-app communications immediately. If you previously subscribed to marketing emails (managed via Mailchimp), you will need to use the unsubscribe link in those emails to stop receiving them. These marketing preferences are managed separately from your mondomusic account. This process complies with applicable data protection laws, including your GDPR / UK Data Protection rights.

7. Data Breaches

7.1 Any breach of mondomusic data security will be reported to the appropriate authority and to end users as required by local legislation.

8. Complaints

8.1 An end user may report any unacceptable behaviour by another end user to the mondomusic administration using a Report button placed on the other end user’s profile page. Otherwise, mondomusic can be contacted at info@mondomusic.app.

9. Updates to this Privacy Policy

9.1 We may update this policy from time to time. If we make material changes, we will notify you in the app or by other means.

Should you wish to report a complaint or if you feel that giggleapps s.r.o. has not satisfactorily addressed your concern, you may contact the Office for Personal Data Protection in the Czech Republic.

Email: posta@uoou.gov.cz

Address: The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
https://uoou.gov.cz/en