Privacy Policy

Effective March 30, 2026

1. Data Controller

Bhan AS, Norway, is the data controller for personal data collected through the ZynkUp app and related services.

Contact: support@zynkup.no

2. Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, profile picture, date of birth, optionally gender if you choose to provide it, and profile information such as bio and interests
• Event data: Events you create, attend, or express interest in
• Messages: Chat messages sent through the app
• Friend connections: Connections with other users
• Location data: Only when you grant permission, for location-based features
• Calendar data: Only when you choose to import your calendar
• Technical data: Device information, app version, operating system, and basic usage data necessary for operation and troubleshooting

3. Purpose of Processing

We use your data to:

• Create and manage your user account
• Deliver the app's core features: calendar, events, messaging, and friend features
• Enforce age restrictions on events: event creators can mark events as age-restricted (e.g., 18+), and your date of birth is used to verify that you meet the access requirement
• Show personalised content tailored to your age group and send birthday notifications to friends
• Send push notifications you have approved
• Improve and develop the service

4. Legal Basis

Processing of your personal data is based on:

• Contract: To deliver the service you signed up for (GDPR Art. 6(1)(b))
• Consent: For location data and calendar import (GDPR Art. 6(1)(a)). You may withdraw your consent at any time in the app's settings or by contacting us. Withdrawal does not affect the lawfulness of processing that has already taken place.
• Legitimate interest: For service improvement (GDPR Art. 6(1)(f))

5. Third-Party Processors

We use the following third parties to deliver the service:

• Firebase / Google Cloud: Authentication, database, storage, cloud functions, and push notifications – see Google's Privacy Policy
• Geoapify: Address and location search (autocomplete) and nearby places – see Geoapify's Privacy Policy

These processors are bound by data processing agreements and process data in accordance with applicable privacy legislation.

6. Data Transfers Outside the EU/EEA

Firebase and Google Cloud may process data on servers outside the EU/EEA. Such transfers are made pursuant to EU Standard Contractual Clauses (SCCs) and Google's data processing agreement, ensuring an adequate level of protection for your personal data.

7. Data Security

We use Firebase and Google Cloud as our cloud provider. Google encrypts your personal data both in transit (TLS) and at rest (AES-256).

8. Age Requirement

ZynkUp is intended for users who are at least 16 years old. We do not knowingly collect personal data from users under 16. If we discover that we have collected such data, it will be deleted.

9. Data Retention

Your personal data is retained for as long as your account is active. When you delete your account, your personal data will be deleted or anonymized within 30 days, except for:

• Technical logs and error reports: up to 12 months for operational purposes
• Data we are legally required to retain longer (e.g. under accounting legislation)

10. Your Rights

Under the GDPR, you have the following rights:

• Access: You may request access to your personal data
• Rectification: You may request correction of inaccurate data
• Erasure: You may request deletion of your data
• Restriction of processing: You may request that processing of your data be restricted in certain cases
• Data portability: You may request your data in a structured, machine-readable format
• Objection: You may object to processing based on legitimate interest
• Withdraw consent: You may withdraw any consent you have given at any time
• Complaint: You may file a complaint with Datatilsynet via datatilsynet.no

To exercise your rights, contact us at support@zynkup.no. We will respond within 30 days.

11. Automated Decisions and Profiling

We do not make automated decisions that have legal effects or similarly significantly affect you (cf. GDPR Art. 22). The app may use information such as age and interests to personalise the content you see, for example age-relevant events, but no decisions are made solely on an automated basis without human involvement.

12. Sharing of Personal Data

We do not sell your personal data to third parties.

13. Changes

We may update this policy. Material changes will be communicated at least 7 days in advance through the app or via email.

14. Contact Us

Questions about privacy? Get in touch:

Bhan AS
support@zynkup.no