Privacy Policy · Casana

This Privacy Policy sets out how the Casana app collects, processes and protects personal data.

The casana.app website serves informational purposes. It sets no cookies, loads no analytics tools and contains no signup form. When you visit the website, our hosting provider records technical access data as described in section 4.

This policy complies with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

casana.app

Elia Ritzmann

Mühlegasse 29

8001 Zurich

Switzerland

Email: support@casana.app

There is no obligation to appoint a data protection officer and none has been appointed. Please direct all privacy matters to the address above.

• Account data: name, email address, profile picture, language setting

• Content within a place: address, images, stays, notes, checklists and member roles. This content is visible to all members of that place

• Usage data: screens accessed and actions taken, linked to your user ID

• Technical data: IP address, device and operating system information, app version

• Push notifications: device identifier used for delivery (FCM token)

• Subscriptions: purchase receipts and subscription status via RevenueCat, Apple and Google

• Feedback and feature requests: information you voluntarily submit through our feedback form and our suggestion platform

• Email communication: messages sent to support@casana.app

• Contractually or legally required emails: sign-in links and account, security and contractual notices

• User account: email address for link-based sign-in, name, profile picture (optional), language setting

• Place: name, image, address, arrival and departure information, emergency contacts, custom sections and checklists

• Stay: start and end date, participating members, notes, status

• Address of a place: entered manually or searched via Google address autocomplete. Your current location may optionally be used to populate the address field. Location is used solely for that entry and is not tracked on an ongoing basis

• Images: profile picture and place images you select from your photo library or capture with the camera

• Invitations: the email address or link used to invite a person to your place

• Feedback and feature requests: as described in section 10

• Support: the contents of your emails to us

• Server logs from our server and hosting services: IP address, timestamp, requested resource, user agent

• Device and app information: operating system and version, device model, app version, language, country

• In-app usage events via Google Analytics for Firebase, for example screens opened, places and stays created and sign-in steps. These events include your Firebase user ID as described in section 11

• Device attestation via Firebase App Check: the app requests a proof of authenticity from the operating system (Apple App Attest or Google Play Integrity) so that only unmodified Casana installations can access our servers. This transmits device and app information to Apple or Google

• Configuration retrieval via Firebase Remote Config: on launch the app retrieves its settings, transmitting app version, language and an app instance ID

We operate no crash reporting tool of our own. Crash reports are received solely in aggregated form from Apple and Google via App Store Connect and the Google Play Console, and only where you have consented to their transmission vis-à-vis Apple or Google.

Casana runs on Google Firebase and Google Cloud infrastructure. The services used in production are configured as follows:

Your data is therefore processed in the United States on a regular and permanent basis. The safeguards applicable to this are set out in section 15.

We use Firebase Cloud Messaging (FCM) for push notifications.

• A device token and the device type are stored

• On iOS, delivery additionally runs through Apple's push service (APNs); on Android, through Google Play services

Push notifications can be disabled at any time in the app or in the device's system settings.

Casana requests device permissions only where you use a feature that requires them. Processing differs by permission:

• Photo library and camera: only the images you select or capture yourself are processed. These images are uploaded to our servers and are visible to the members of the relevant place. The remainder of your photo library is not accessed

• Location (optional): requested solely at the time of address entry in order to populate the address field. No continuous location data is stored and no movement profiles are created

• Calendar (optional): where calendar sync is enabled, Casana writes your stays as events into a calendar you select on your device. Existing calendar entries are not read. The events remain on your device and are synchronised between your devices solely by your own calendar provider, for example iCloud or Google

• Notifications: see section 6

All permissions may be revoked at any time in the device's system settings.

Personal data is processed on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): account, sign-in, places, stays, invitations and subscriptions

• Consent (Art. 6(1)(a) GDPR): location requests, calendar access, push notifications, photo library access, and feedback and feature requests

• Legitimate interest (Art. 6(1)(f) GDPR): security and abuse prevention, app stability, and analysis and improvement of product usage

• Legal obligations (Art. 6(1)(c) GDPR), where applicable

Providing your email address and name is required in order to use Casana. Without this information no account can be maintained. All other information is optional.

The following providers act as processors on our behalf. They process data solely on our instructions and under a data processing agreement.

Apple and Google additionally act as independent controllers once you take out a subscription. Payment is handled entirely through the App Store or Google Play. We receive neither your payment method nor your billing address, but solely the information whether a subscription is active.

The FeatureVote suggestion platform is operated by Devinova Group AB, Gothenburg, Sweden. Devinova is an independent controller for the data collected on the platform, and its own privacy policy applies.

Google Privacy Policy

Apple Privacy Policy

RevenueCat Privacy Policy

Typeform Privacy Policy

FeatureVote Privacy Policy

Casana offers two ways to provide us with feedback on a voluntary basis. Both are operated by external providers and open in an embedded browser window inside the app.

• Feedback form (Typeform): accessible from your profile, from the inbox and from the prompt about your experience. The information you enter in the form is processed

• Suggestion platform (FeatureVote): feature requests can be submitted, commented on and voted for. Contributions and votes are visible to other users of the platform. The provider may require a separate account for participation

As the content is loaded from these providers' servers, they receive your IP address and technical information about your device, and may set their own cookies in the embedded browser window. No automatic transfer of your Casana account data takes place. We receive solely the information you submit yourself.

Use of both services is voluntary. The legal basis is your consent (Art. 6(1)(a) GDPR), given by opening and submitting the relevant form.

According to the providers, processing may also take place outside the EU and Switzerland. The safeguards described in section 15 and the providers' own privacy policies apply.

We collect usage data in order to develop Casana further. For this purpose we use Google Analytics for Firebase.

The events recorded include your Firebase user ID and are therefore pseudonymous, not anonymous. Attribution to your account is possible for us. We use this data solely for product development, not for advertising purposes, and do not share it for advertising purposes.

In addition, accounts, places, stays and subscription events are exported to BigQuery on an ongoing basis in order to produce usage analyses. This creates a continuously updated copy of that data in the USA.

Google Analytics for Firebase cannot be disabled separately in this version of the app. To exercise your right to object, contact us at support@casana.app. In that case we will delete your analytics data and cease further collection for your account.

We currently use your email address solely for:

• Sign-in links providing access to your account

• Service and legal notices, namely account-related information, material service information and changes to our legal documents

• Replies to your support requests

These communications form part of the contractual relationship and cannot be unsubscribed from while an account exists.

We do not currently send marketing or newsletter emails. Any introduction of such emails will take place solely on the basis of your explicit consent and following a prior amendment to this Privacy Policy.

You may delete your account at any time directly in the app. This deletes your account, your profile picture, your notifications, your memberships and your data held at RevenueCat.

Two limitations apply:

• Places and stays you have shared with others remain available to the other members, as this content is also their data

• Copies in our analytics systems and contributions on the suggestion platform are not deleted immediately, but within the periods stated above

For immediate and complete deletion in those systems as well, contact us at support@casana.app.

We do not sell personal data and do not share it for advertising purposes.

Data is shared solely:

• with the service providers listed in section 9

• with the other members of a place, to the extent you share content in that place

• with the operators of the services listed in section 10, to the extent you use them

• where a legal or official obligation exists

As set out in section 5, your data is processed in the United States. Under neither Swiss nor EU law do the USA provide a generally equivalent level of data protection. In particular, US authorities may under certain conditions access data held by US providers, and legal remedies are limited for individuals in Switzerland and the EU.

We rely on the following safeguards for these transfers:

• The European Commission's Standard Contractual Clauses, supplemented by the adjustments recognised by the Swiss FDPIC. They form part of the data processing agreements with our providers

• Certification of the US providers used under the EU-U.S. Data Privacy Framework and its Swiss extension, where available. The current status can be inspected in the official list

• Technical and organisational measures, namely encryption in transit and at rest, restrictive access rules and data minimisation

List of certified companies (dataprivacyframework.gov)

Use of Casana without these transfers is not technically possible.

You are entitled to the following rights:

• Access to the data processed about you

• Rectification of inaccurate data

• Erasure

• Restriction of processing

• Data portability

• Objection to processing based on legitimate interest

• Withdrawal of consent with effect for the future

To exercise these rights, contact us at support@casana.app. We will respond to your request within 30 days.

You are further entitled to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC); in the EU it is the data protection authority of your country of residence.

Federal Data Protection and Information Commissioner (FDPIC)

Casana is intended for adults. We do not knowingly collect data from children under 16 without the consent of a parent or guardian.

Should an account have been created without such consent, contact us at support@casana.app. We will delete the account and the associated data.

No automated decision-making or profiling takes place that produces legal effects concerning you or similarly significantly affects you.

• Encrypted transmission over HTTPS and TLS

• Encryption of stored data by Google Cloud

• Restrictive Firebase security rules: every request verifies whether you are a member of the place concerned and which role you hold there

• Changes to places and stays are made through hardened server functions rather than directly from the app

• Passwordless sign-in via a one-time link sent to your email address

• Firebase App Check, so that only unmodified Casana installations can access our servers

No system can guarantee absolute security. In the event of a data security breach likely to result in a high risk to you, we will inform you and the competent supervisory authority in accordance with statutory requirements.

This Privacy Policy may be amended where necessary.

Where an amendment materially affects the processing of personal data or introduces a new purpose requiring notice or consent, we will inform you appropriately before the amendment takes effect.

The current version is available at all times at casana.app.