Privacy Policy

Last updated: 25 October 2026

Who is responsible for your data

The controller is Top App, Rynek Główny 28, 31-010 Kraków, Poland, VAT ID PL6762666433 (“we”). For anything about your personal data write to hello@topapp.pl — we reply within one month.

The short version

• A first name is enough to vote and see the plan. An Apple or Google account is only needed for chat, photos and payments.
• Everything you add to an event (messages, photos, expenses, votes) is visible only to its members. Nothing is public.
• In secret mode the person being celebrated cannot see the event, the chat, the album or its notifications.
• No ads. We use no advertising identifiers, do not track you across apps and do not sell data.
• Full-size photos and videos are deleted 30 days after the event unless someone in the group bought the Keepsake.
• Delete your account in the app: Crew → menu → Account and settings → Delete account.

What we process

Account

On first launch we create an account with no e-mail or password: a random identifier and the first name you type (only your group sees it). If you sign in with Apple or Google — required for chat, uploading photos and purchases — we store the Apple or Google account identifier and the e-mail address if one is shared with us (Apple may give a relay address). We also store when you accepted the content rules.

Events

• event details: type, name, the celebrated person’s first name, city, dates, secret mode, the member list and roles;
• polls and your votes;
• expenses and settlements: amounts, who paid, for whom, who paid whom back, and an optional payout note (e.g. a phone number or bank account) if you enter one — only people in your events see it;
• the day plan and tasks assigned to people;
• chat messages and reactions;
• photos and videos (up to 30 s) in the album — the original and a smaller preview;
• content reports and blocked people.

On iPhone, before a photo is added to the album, iOS checks it for nudity with Sensitive Content Analysis. This happens on the phone only — the photo is not sent anywhere for it.

Purchases

You buy Freedo Pro and the Keepsake through the App Store or Google Play. We never see your card details. We store the transaction identifier, the product and the event it unlocks. RevenueCat verifies purchases.

Technical data

• Platform (iOS / Android), language and country from the device region settings.
• Push notification tokens — up to 5 per account, if you allow notifications.
• Dates the account was created and last active.
• IP address — in server logs, kept for up to 14 days, for security and troubleshooting.
• Crash reports and basic usage statistics — Firebase Crashlytics and Firebase Analytics (device model, OS and app version, stack trace, screens opened). Not used for ads or cross-app tracking.
• Invite links — Branch handles the link that opens the right event even after the app is installed. To match the click with the install it processes technical device data (such as IP address, model and OS version).

Who can see your data

Your name, votes, expenses, messages, photos and videos are visible only to members of the event you added them to. The organiser can remove a person from the event, who then loses access. There are no public profiles and no people search.

Why and on what legal basis

• Account, events, polls, money, plan, chat, album, sign-in, purchases — performance of the contract to provide the service (Art. 6(1)(b) GDPR).
• Push notifications — your consent given in the system prompt (Art. 6(1)(a) GDPR); withdraw it in your phone settings.
• Report moderation, security, logs, crash reports, statistics — our legitimate interest in a safe, working service (Art. 6(1)(f) GDPR).
• Purchase records — accounting and tax obligations (Art. 6(1)(c) GDPR).

Who we share data with

• Amazon Web Services — the server, database and album files are in Frankfurt, inside the European Union.
• Google (Firebase) (USA) — push notifications, crash reports and usage statistics.
• RevenueCat (USA) — verifying App Store and Google Play purchases.
• Branch (USA) — event invite links.
• Slack (USA) — alerts to our team about reported content and server errors (report text, identifiers).

Transfers to the USA rely on standard contractual clauses or the EU-US Data Privacy Framework. Apple and Google run their sign-in under their own privacy policies. We do not sell data or share it with advertisers or data brokers.

How long we keep data

• Account data — for as long as you have an account.
• Event data — for as long as the event exists. The organiser can delete it at any time together with all photos and messages.
• Original photos and videos — 30 days after the event ends unless someone in the group bought the Keepsake. Smaller previews stay while the event exists.
• Server logs — up to 14 days. Backups — up to 30 days.
• Purchase records — as long as tax law requires.

How to erase your data

In the app: Crew → menu → Account and settings → Delete account, or write to hello@topapp.pl. What goes and what stays in other people’s balances: Delete your account.

Your rights

You can access, correct and erase your data, restrict or object to processing based on legitimate interest, receive it in a portable format and withdraw consent. Write to hello@topapp.pl. You can also complain to your data protection authority — in Poland the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.

Age

Freedo is for adults (18+). We do not knowingly collect data from minors. If you believe a minor’s data reached us, write to us and we will delete it.

Changes

We will announce significant changes in the app before they take effect. The date of the last update is shown at the top of this page.

See also: Freedo Terms of Use.