Last updated: 12 May 2025

1. Introduction

Connexa GmbH (\"we,\" \"us,\" or \"our\") is committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, and protect your personal information when you use our mobile applications (NoMask, Relink, Blink, and other apps) and associated services. We comply with applicable data protection laws including the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and platform-specific requirements for Apple App Store and Google Play Store.

2. Information We Collect

2.1 Information You Provide

• Account Information: Kontoinformationen: E-Mail-Adresse, Benutzername und Profilinformationen, die Sie teilen möchten
• Content: Inhalte: Fotos, Videos und Textnachrichten, die Sie über die App hochladen oder teilen
• Pairing Data: Kopplungsdaten: Informationen über Ihre NFC/Bluetooth-Verbindungen mit anderen Nutzern
• Communications: Kommunikation: Nachrichten, Kommentare und andere Kommunikation, die Sie über die App senden

2.2 Information Collected Automatically

• Device Information: Geräteinformationen: Gerätetyp, Betriebssystemversion, eindeutige Geräte-IDs und Mobilfunknetzinformationen
• App Usage Data: App-Nutzungsdaten: Wie Sie mit unserer App interagieren, genutzte Funktionen und Leistungsdaten
• Location Data: Standortdaten: Ungefährer Standort (Stadt/Region-Ebene) zur Serviceoptimierung (mit Ihrer Zustimmung)
• Technical Logs: Technische Protokolle: IP-Adresse, Browsertyp, Absturzberichte und Systemprotokolle für Debugging und Sicherheit

2.3 Information from Third Parties

• App Store Analytics: Grundlegende Download- und Nutzungsstatistiken von Apple App Store und Google Play Store
• Firebase Services: Analytics- und Absturzberichtsdaten (wo möglich anonymisiert)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our mobile applications and services
• User Authentication: To verify your identity and secure your account
• Communication: To enable messaging and content sharing between paired users
• Technical Support: To troubleshoot issues and provide customer support
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage and Processing

4.1 Firebase Services

We use Google Firebase services for data storage and processing:

• Firebase Storage: For storing photos and videos you upload
• Cloud Firestore: For storing text data, user profiles, and app data
• Firebase Authentication: For secure user authentication
• Firebase Analytics: For app performance monitoring (anonymized data only)

All Firebase services are hosted in the eu-west (Belgium) region to ensure GDPR compliance. We have a Data Processing Agreement (DPA) with Google that ensures your data is processed in accordance with applicable data protection laws.

4.2 Data Security

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict role-based access controls and two-factor authentication
• Regular Audits: Security assessments and penetration testing
• Backup Security: Encrypted backups with secure access protocols

5. App Tracking Transparency (iOS)

Our app complies with Apple's App Tracking Transparency (ATT) framework:

• No Cross-App Tracking: We do not track your activity across other apps or websites
• No Third-Party Tracking: We do not share your data with third-party advertisers or analytics providers
• Transparent Data Use: We clearly explain what data we collect and how we use it
• User Control: You can control your privacy settings within the app

6. Children's Privacy

Our app is designed for users aged 16 and older. We do not knowingly collect personal information from children under 16.

6.1 COPPA Compliance

• Age Verification: We implement reasonable measures to verify user age
• Parental Consent: If we discover we have collected data from a child under 16, we will delete it immediately
• No Targeting: We do not target children with advertising or content
• Educational Content: We provide resources for parents about online safety

6.2 Family-Friendly Features

• Content Filtering: Automated and manual content moderation
• Reporting System: Easy reporting of inappropriate content or behavior
• Parental Controls: Information and tools for parents to monitor app usage

7. Data Sharing and Third Parties

7.1 Service Providers

We may share your information with trusted service providers who assist us in operating our app:

• Google Firebase: For data storage and authentication (as described above)
• Hosting Providers: For app infrastructure and security
• Support Services: For customer service and technical support

All service providers are bound by strict data protection agreements and may only use your data as directed by us.

7.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

7.3 No Commercial Sharing

We do not sell, rent, or trade your personal information to third parties for commercial purposes.

8. Your Rights and Choices

8.1 Access and Control

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing

8.2 App Settings

• Privacy Controls: Manage your privacy settings within the app
• Location Services: Control location data collection
• Notifications: Manage push notification preferences
• Account Deletion: Delete your account and all associated data

8.3 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect and how we use it.

9. Data Retention

We retain your personal information only as long as necessary to provide our services:

• Active Accounts: Data is retained while your account is active
• Account Deletion: Data is deleted within 30 days of account deletion
• Legal Requirements: Some data may be retained longer if required by law
• Backup Deletion: Backups are automatically deleted after 90 days

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• EU Adequacy: We use EU-based servers for data storage
• Standard Contractual Clauses: Where applicable, we use approved transfer mechanisms
• Swiss Adequacy: Switzerland has been recognized as providing adequate data protection

11. Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: End-to-end encryption for sensitive communications
• Access Controls: Multi-factor authentication and role-based access
• Regular Updates: Security patches and vulnerability assessments
• Incident Response: Procedures for handling security incidents
• Employee Training: Regular privacy and security training for staff

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes:

• App Updates: Through app store updates and in-app notifications
• Email Notification: For significant changes affecting your privacy
• Website Updates: Updated policy will be posted on our website
• Effective Date: Changes will be effective 30 days after notification

13. Platform-Specific Information

13.1 Apple App Store

• Privacy Labels: Our app includes accurate privacy nutrition labels
• ATT Framework: Full compliance with App Tracking Transparency
• Family Sharing: Compatible with Apple's Family Sharing features
• App Store Review: Compliant with all App Store Review Guidelines

13.2 Google Play Store

• Family Policy: Compliant with Google Play Families Policy
• Data Safety: Accurate Data Safety section in Play Console
• Target Audience: Properly labeled for appropriate age groups
• Content Rating: Appropriate content rating for all audiences

14. Contact Information

If you have questions about this Privacy Policy or your personal data, please contact us:

• Connexa GmbH
• Wilerstrasse 82
• CH-8370 Sirnach, Switzerland
• Email: [email protected]
• Data Protection Officer: [email protected]

14.1 Supervisory Authorities

You have the right to lodge a complaint with your local data protection authority:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• EU: Your local EU data protection authority
• California: California Privacy Protection Agency (CPPA)

15. Additional Resources

• Child Protection Policy
• Terms of Service
• Cookie Policy
• Data Request Form