Privacy policy

• Controller: Adimen Intelligence Technologies S.L.
• Tax ID: B88787171
• Address: C/ San Bartolomé 12, 3, 20870 Elgoibar (Gipuzkoa), España
• Privacy contact: reportes@herrikonekt.com

You can use most of the app without an account. We only process the data each feature needs:

• Account: name, email and password (stored encrypted), or the basic data Apple or Google provide if you sign in with them. If you choose to hide your email with Apple, we only receive the relay address.
• Profile and preferences: photo, nickname, town, language and notification settings.
• Content you publish: forum posts and photos, comments, place suggestions, ratings and candles on obituaries. This content is visible to other users.
• Private chat: the messages, photos, files and voice notes you send to other users.
• Businesses: if you register or manage a business, its listing data (name, address, contact details, opening hours, photos, menu or catalogue, offers) and who manages it.
• Approximate location: only if you allow it. The device uses it to work out your town and show you what is nearby. We do not store your coordinates, at most the resulting town.
• Notifications: your device identifier to send you push notifications, if you turn them on.
• Purchases: if you buy an ad, a featured listing or the digital menu, the payment is processed by Apple (App Store) or Google (Google Play). We receive the purchase receipt (product, date, status and transaction and subscription identifiers) to activate it. We never receive your card details. Purchases made before in-app purchases were processed by Stripe.
• App usage: anonymous or pseudonymised usage events (screens viewed, features used, errors), device type and app version. You can turn this off in the app settings.
• Technical data: IP address and server logs needed to run the service securely.

The app only asks for each permission when you are about to use the feature that needs it, and you can revoke it at any time in your phone settings:

• Approximate location: to detect your town.
• Camera and photos: to upload images you choose (profile, forum, chat, business).
• Microphone: to record voice notes in the chat.
• Calendar (write only): to add the events you choose to your calendar. We do not read your calendar.
• Notifications: to send you alerts.

• Providing the service (account, forum, chat, business management, purchases): performance of the contract you accept by using the app.
• Location and push notifications: your consent, given when you grant the permission and withdrawable at any time.
• Moderating content, preventing abuse and keeping the service secure: our legitimate interest in a safe service for residents.
• Measuring app usage to improve it: our legitimate interest. You can object by turning off analytics in the app settings.
• Website analytics cookies: your consent, given in the cookie notice.
• Keeping purchase records: compliance with legal, tax and accounting obligations.

We do not make automated decisions with legal effects on you and we do not sell your data.

Data is hosted by providers acting as data processors, under contract and only to provide their service to us:

• Hosting and file storage: Vercel.
• Database: MongoDB Atlas, with data hosted in Europe.
• Sign-in and purchases: Apple and Google.
• Push notifications: Expo (which in turn uses Apple and Google services).
• App usage analytics: PostHog, with data hosted in the European Union.
• Email delivery: Google Workspace.
• Address autocomplete when registering a business: Google Maps Platform.
• Automatic reading of menus, opening hours and offers uploaded by businesses: Google's Gemini 2.5 Flash model, which we access through the Vercel AI SDK. It only receives the business document, not other users' data.
• Payments for earlier purchases: Stripe.

We only give the town councils we work with aggregated, anonymous statistics about how the app is used in their municipality, such as how many residents use it or which sections they visit. We never give them data about specific people, and we leave out figures so small that someone could be identified.

Some of these providers may process data outside the European Economic Area, mainly in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

• Account and profile data: while the account is active.
• Public content (forum, comments, places): while the account is active or until you delete it. When you delete your account, threads, replies, comments and places stay published but are no longer linked to you (they show as "Deleted user"), and we remove your forum classified ads and their photos.
• Private chat: after the account is closed, the conversation is closed (nobody can write and your identity is no longer shown), although the other person can still read their messages. It is kept for 5 years only to handle possible claims or legal requests, and then deleted.
• Purchase records: the period required by tax and commercial law (up to 6 years). After you delete your account they are no longer linked to your profile. For earlier purchases paid with Stripe, Stripe keeps your name and email as part of the payment record.
• Usage analytics: the retention period configured in PostHog, and never longer than needed for the analysis.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to reportes@herrikonekt.com from your account email. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

You can delete your account in the app, under Profile → Edit profile → Delete account. We will ask you to confirm your identity (password, or signing in again with Google or Apple) and the deletion is immediate, except for data we must keep (section 7). If you signed in with Apple, we also revoke Herrikonekt's access to your Apple ID.

If you cannot access the app, write to reportes@herrikonekt.com from your account email with the subject "Delete my account" and we will delete it within 30 days at the latest.

Deleting your account does not cancel subscriptions bought through Apple or Google: cancel them first in your device's subscription settings. If you own a business listing, the business is not deleted: it is left without an owner and someone else can claim it. Anything you have already paid for (featured listing or digital menu) stays active until the end of the paid period.

Herrikonekt is not intended for children under 14. If you are under 14, do not create an account. If we find out that you have one, we will delete it.

Communications between the app and our servers are encrypted. Your session is kept in the device's secure storage and passwords are stored encrypted. Even so, no system is infallible: if we detect a breach affecting your data, we will notify you when the law requires it.

The herrikonekt.com website only uses analytics cookies (Google Analytics: _ga and _ga_*, lasting up to 2 years) to measure visits in aggregate. They are not turned on until you accept them in the cookie notice, and you can withdraw your consent at any time from "Cookie settings" in the website footer. We also store your choice in your browser storage so we do not ask again. Google Analytics may process your IP address.

The obituaries section shows the death notices that funeral homes in each town publish on their websites, or that funeral homes or the town council send us directly. This is third-party data: it is not provided by the app user. We collect it automatically, with the help of an artificial intelligence model that extracts the data from the notice, and show it as the source publishes it, with a link to the source.

• What we show: the name, age and date of death of the deceased; the date, time and place of the services (wake, funeral, burial or cremation); the obituary text, which may include the names of relatives; and the photo if the funeral home publishes one.
• The photo is loaded directly from the funeral home's website: we do not copy it to our servers.
• Legal basis: the GDPR does not protect the data of deceased persons (recital 27), but we apply the provisions of article 3 of the Spanish LOPDGDD for their relatives and heirs. For the relatives' data that appears in an obituary, we rely on our legitimate interest in letting residents know about funerals, using information the family has already made public through the funeral home.

If you are a relative or heir of the deceased, or you appear in an obituary, you can ask us to correct or remove it by writing to reportes@herrikonekt.com with the subject "Obituary". We will do so as soon as possible.

If we change this policy, we will update the date above and, if the change is significant, we will let you know in the app.