Privacy Policy

Data controller

The data controller for the Daccle service is Duenta Oy, Business ID 3640532-5. Privacy inquiries: duentafinland@gmail.com.

Data we process

• Account identifier, email address, username, and sign-in information.
• Profile information, profile and gallery images, optional location, and follow and block information.
• Vehicle cards, images, videos, technical specifications, history, maintenance events, and startup sounds.
• Messages, comments, reactions, saved items, shares, Showcase content, and Moments.
• Reports, feedback, and community safety information.
• Notification settings, device push token, app settings, backup time, and technical information needed for security and troubleshooting.

How we obtain data

We primarily receive data from you when you create an account, complete your profile, publish content, or use Daccle features. The app also generates technical data about service use, synchronization, notifications, and security. Other users may generate data relating to you by messaging, following, reacting, or reporting.

Purposes and legal bases

We use data to provide your account and app features, publish content, enable communication, store data, and synchronize it. This processing is necessary to perform our service agreement with you.

We also process data to protect the community, prevent abuse, secure the service, troubleshoot errors, and improve operations. This is based on Duenta Oy’s legitimate interest in maintaining a safe and functional service. We rely on legal obligations or consent where applicable law requires it.

Service providers and disclosures

Supabase processes data on Daccle’s behalf to provide authentication, databases, backups, and user media. Expo, Apple, and Google may process information related to push notifications, app stores, devices, and sharing under their own terms and privacy policies.

We do not sell personal data. We may disclose data where required by law or to establish, exercise, or defend legal claims.

Transfers outside the EU and EEA

Service providers may process data outside the EU or EEA. Transfers rely on safeguards permitted by data protection law, such as a European Commission adequacy decision or standard contractual clauses, with supplementary safeguards where necessary.

Retention

Account data and user-published content are generally retained while the account remains active or until you delete it. Communications, reports, security data, and technical data are retained only as long as needed to provide the service, investigate abuse, handle legal claims, or meet legal obligations.

After account deletion, data is removed from active systems. Limited data may remain in backups for a short technical recovery period or for a period required by law, after which it is deleted through the normal retention cycle.

Your rights

• Access or download your data.
• Correct inaccurate or incomplete data.
• Request deletion or restriction where permitted by law.
• Object to processing based on legitimate interests.
• Receive data portability where the law applies.
• Withdraw consent at any time.
• Lodge a complaint with the Finnish Data Protection Ombudsman at tietosuoja.fi.

Automated decision-making

Daccle does not make automated decisions based on personal data that produce legal or similarly significant effects. Aura points and content ordering are app features.

Age limit and changes

Daccle is not intended for children under 13. Material changes to this policy will be announced in the app.