Privacy Policy
This policy describes personal data processing in CI STO for iOS and Android, a service for adults to discover activities and meet other adults.
1. Controller and contact
Francesco Fazzina, operator of CI STO, is the data controller. For support, privacy requests and your rights, contact francescofazzinasr@gmail.com with “CI STO” in the subject. Never send your password or sign-in codes.
2. Data and purposes
- Account: email, authentication credentials handled by the authentication service, and account identifier, for registration, access and security.
- Profile: name, username, city, interests, biography and an optional photo. Profile information may be visible to other authenticated users. Your birth date checks eligibility for the adults-only service and is stored separately, without being published on your profile.
- Activities and social features: events, meeting places, categories, indicative costs, participation, invitations, groups, preferences and user content, to provide activities and relevant suggestions. Visibility depends on the feature and its settings.
- Chats and content: messages in spaces you participate in, photos, reviews and optional stories. Recipients and other authorized users can access content according to the space.
- Location: if you grant permission, foreground location searches for nearby activities and stories. Personal coordinates are not published on your profile or included by the app in advertising requests. Publishing a Home Moment or voluntarily activating MAGNET stores an approximate geographical area, category and availability expiry to find compatible adults. Your precise personal location is not shown to others. A published event’s meeting location is visible according to event visibility. You can revoke device location permission.
- Safety: reports, blocks, consent records and technical information protect accounts and content, handle abuse and support requests.
- Notifications: in-app notices and, when enabled, installation identifiers, Firebase push tokens and notification preferences connect your device to your account.
- Subscriptions: Plus and Business product identifiers, receipts or purchase tokens, transaction identifiers and verified subscription status from Apple App Store on iOS or Google Play on Android activate the correct plan and prevent reuse of purchases. CI STO does not receive your payment card details.
3. Legal bases and choices
Processing needed to create and manage an account, organize activities and provide requested features is based on performing the requested service. Abuse and fraud prevention is based on the legitimate interests of the operator and users, with restricted access. Legal obligations apply to required compliance and privacy requests. Where advertising consent is required, it is requested separately from acceptance of the terms. Location and notification permissions are optional and revocable. MAGNET availability sharing is voluntary and can be stopped in the app.
4. Advertising
Android Free can show a Google AdMob banner; verified Plus does not show it. Google and partners selected in the consent form may process IP addresses, device and advertising identifiers, ad interactions and diagnostics to deliver and measure ads, prevent fraud and, when authorized, personalize ads. Google UMP lets you accept, refuse or manage options where required. Ad requests follow the consent status returned by Google. Available banner privacy controls and Android settings let you manage preferences and advertising identifiers.
The current iOS app does not integrate AdMob or Firebase Analytics. CI STO does not use Firebase Analytics to analyze app usage. See Google’s Privacy Policy and Google’s partner services information. The consent form lists advertising partners and purposes.
5. Recipients, hosting and transfers
Service data is hosted through the CI STO Supabase project in Frankfurt, Germany. Firebase/Google and Apple APNs provide push delivery. AdMob provides Android advertising; Apple and Google manage purchases in their respective stores. Brevo provides transactional account email, and the Apple purchase-verification gateway is hosted on DigitalOcean. Other users see data made available through the service’s features and permissions. Providers may process technical or advertising data outside the European Economic Area under their agreements and applicable GDPR transfer safeguards. Contact the controller for information on safeguards. CI STO does not sell chat content or personal coordinates to advertisers.
Venue searches use Google Places and may send search text and a requested area to the service. Opening external navigation sends the destination to your chosen map service. Map previews may use OpenStreetMap; loading map tiles sends the device’s IP address and requested map areas to the map service, without profile, chat or credentials. See the OpenStreetMap Foundation Privacy Policy.
6. Retention and deletion
Account, profile, activities, chat and participation are kept to provide the service while the account remains active, subject to deletion and feature-specific rules. Home Moments stop being visible after 8 hours; other stories follow the expiry shown in the app. MAGNET availability expires at the time selected and can be revoked. Physical cleanup of expired photos may occur after visibility ends. Account deletion removes associated operational database records and requires removal of photos through storage.
Technical copies, provider logs and data needed for legal obligations or protection against abuse follow the time strictly necessary for those purposes and provider procedures; they are not available as a profile in the app. Ask the controller for details about a specific request. Apple and Google have their own payment retention rules. Deleting a CI STO account does not automatically cancel an Apple or Google Play subscription.
7. Your rights
You may request access, correction, deletion, restriction and portability where applicable, object to processing based on legitimate interests, and withdraw consent without affecting prior lawful processing. Write from the email associated with your account. Requests are handled within GDPR time limits. You can complain to the Italian Data Protection Authority or another competent supervisory authority.
8. Adults-only service and updates
CI STO is for people aged 18 or older. If you believe a child has created an account, contact support without distributing sensitive or illegal material. This policy is updated when features or processing change; the date above identifies this version.