Privacy Policy

Cibus Maps

Who handles your information

Skript It Oy is the controller.
Kustaantie 9a 2, 01400 Vantaa, Finland
Contact: privacy@skriptit.fi

Information we use and why

• Browsing: scan coordinates, radius, language preferences, search text and restaurant identifiers, to return the places you request; connection addresses and a random installation identifier, to prevent misuse.
• Account: your email address, the sign-in codes we send to it, your sign-in sessions, your confirmation that you meet the minimum age and the Terms version you accepted, to create your account, record your acceptance of the Terms, sign you in and apply the minimum age; your email address and connection address, to limit sign-in requests and refuse disposable email addresses; your email address, to send you notices about reports and moderation decisions; for a suspended account, a coded record of its email address, to stop it signing up again.
• Age signals: where Apple or Google Play provides them, the app uses the age range and parental-approval status on your device to apply the minimum age and required store approval. Age ranges and birth dates are not sent to us. To honour revoked approval, we receive the Play installation identifier or Apple's signed app transaction, which includes app-acquisition, version, date and device-verification information. We keep a coded store identifier linked to your account, linkage and approval-change times, and your confirmation that you are 16 or older. We receive revocation events from Apple or through Google Play's owner console and use them to restrict new contributions.
• Answers: your answer about a restaurant, its visit month and when you saved it, to show you your answers and, if you choose, hide places you marked Not for me; your answers that you did not mark private, to calculate Most loved badges, where Not for me answers can stop a place getting one; answers and the age of the accounts that gave them, to handle badge reports and remove answers the Terms do not allow.
• Photos: the image, its category, restaurant and capture month, and your acknowledgement of the upload notice, to check the photo with an automated service, review it and publish it; the result of the automated check, to review the photo and to decide whether photos can be approved automatically; a fingerprint of a rejected photo, to reject copies of it; your daily upload count, to apply upload limits.
• Hidden contributors: a coded identifier made from your installation identifier, the hidden contributor's account identifier and the time you hid them, to hide their photos from you and let you undo that choice; a coded record of the network you connect from, to limit hides.
• Reports: the reported item, the reason, your explanation, your name and email address where you give them, a coded identifier made from your installation identifier and the reported item, never linked to an account, and the dates the report was received and decided, to handle the report, recognise repeat reports and send you notices about it; a coded record of the network you connect from, to limit reports.
• Moderation: reports about photos, contributors and badges, to decide on them; decisions about your photos, answers or account and the reasons for them, to apply them and tell you about them; when a photo is reported as child sexual abuse material or matched by PhotoDNA, the photo and a minimal record of its account, until we decide on it; when we report a photo to the police, the photo and a minimal record of its account, to support that report.
• Maps, updates and logs: map-region requests, app and platform information, update installation identifiers and connection addresses, to deliver maps and app updates; operational logs, to diagnose failures.
• Website: connection addresses and page requests, to deliver this website.
• Privacy requests: your request, contact details, necessary identity checks, our replies and the record of the outcome, to handle your request and defend legal claims about how it was handled.

You do not need an account or location permission to browse. Answers, photos and reports about a place's details need an account, which needs an email address.

Legal bases

• Contract (GDPR Article 6(1)(b)): your account, answers and photos.
• Legitimate interests (GDPR Article 6(1)(f)), for these uses and interests:
  • scans and searches: providing the restaurant discovery you request;
  • request limits and other misuse prevention: keeping the service available and free of abuse;
  • reports and moderation: keeping illegal content and content the Terms do not allow off the service;
  • the suspension record: keeping suspended users from signing up again;
  • maps: showing you where restaurants are;
  • app updates: keeping the app working and secure;
  • logs: finding and fixing failures;
  • the website: publishing information about the app;
  • anonymous daily totals: understanding how the app is used;
  • privacy-request correspondence and records after closure: defending legal claims about how requests were handled.
• Legal obligation (GDPR Article 6(1)(c)): the notices the Digital Services Act requires, reports to the police of suspected crimes that threaten anyone's life or safety, including child sexual abuse material, and handling your data-protection rights requests.

Who receives it

Approved photos are public.

Cloudflare provides hosting, databases, storage, photo processing, sign-in emails and moderation notices; Microsoft checks a fingerprint of each uploaded photo against known child sexual abuse material (PhotoDNA), without receiving the photo; OpenFreeMap provides maps; Expo provides app updates. Google Workspace stores necessary private records for handling privacy requests, incidents and operational actions.

We report suspected child sexual abuse material and other threats to life or safety to the Finnish police.

How we protect it

The app connects to our servers and providers only over encrypted connections (HTTPS). Session tokens are stored only as hashes. Access to stored personal data that is not public is limited to Skript It Oy and its service providers.

How long we keep it

• Scan and search requests: not kept after the answer, except in server logs.
• Request-limit counters: the one-minute limit window.
• Your account, its email address, your age confirmation, the Terms version you accepted and your acknowledgement of the photo upload notice: until you delete the account.
• Sign-in codes: deleted within 24 hours after they expire.
• Sign-in sessions: one year, or until you sign out or delete the account.
• Store-consent account links: until account deletion. Revocation event records: 90 days. A separate coded record of the latest revocation and later reapproval: 2 years after the latest revocation, including after account deletion.
• Coded records of sign-in code requests, used to limit them: 24 hours.
• Coded records of the network a report or a hide came from, used to limit them: 24 hours.
• A suspended account's coded email record: 2 years after the account is deleted.
• Answers: until you withdraw them or delete your account.
• Approved photos: until you withdraw them, we remove them or you delete your account. Photos awaiting review expire after 30 days. The details of a closed photo are cleared 30 days after it closes; a minimal record remains until account deletion. Photo files are normally deleted from storage within 24 hours after the photo closes. A photo we report to the police, and the minimal record of its account, are kept for 90 days after the report, longer only if the police ask in writing.
• A photo reported as child sexual abuse material or matched by PhotoDNA, and its account's identifier, email address and creation time: until we decide on it, at most 30 days, including after the photo is withdrawn or the account is deleted. If we report it to the police, the 90-day period applies.
• Automated check results and photo-linked fingerprints: until 30 days after the photo closes, or until account deletion. A log of check results and our review decisions, with a photo reference but without images or account identifiers, is kept until we decide whether to approve photos automatically, including after account deletion.
• Fingerprints of rejected photos, without photo or account identifiers: 1 year after the latest matching rejection, including after account deletion.
• Daily photo upload counts: 7 days.
• Hidden contributors: until you undo the hide or the hidden contributor's account is deleted. These choices belong to your installation, so deleting your account does not remove them.
• Reports: 6 months after the report is decided, or when the reported photo is removed. Reports of illegal content or child sexual abuse material: 6 months after the decision, including when the reported photo or its account has been deleted. Notices of illegal content, including the sender's name and email address and the receipt needed to answer them: 6 months after we send our decision, including when the reported photo has been removed; if you supplied no contact details, 6 months after the decision.
• Moderation decisions and their reasons: until the account they concern is deleted; for a suspension, 2 years after the account is deleted.
• Server logs: up to seven days. Database recovery copies: up to 30 days.
• Email delivery records: kept by Cloudflare under its data processing terms until they are no longer needed to provide the service, or until our agreement with Cloudflare ends, whichever is earlier. Cloudflare shows them to us for up to 30 days.
• Email addresses our email provider blocks after a failed delivery or a spam complaint: from 24 hours to no end date, depending on the cause.
• Requests about your personal data, including account deletion by email, and our replies: 3 years after the request is closed.

Your choices and rights

You can withdraw answers and photos and delete your account in the app, or by contacting us.

You can request access to your personal data and its correction, erasure, restriction or, where applicable, portability at privacy@skriptit.fi.

You can complain to the Finnish Data Protection Ombudsman or another supervisory authority, including where you live or work.

Your right to object

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. Email privacy@skriptit.fi.