Privacy Policy

    Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it. Zeitly complies with the Swiss Federal Act on Data Protection (revFADP).
  

01Who We Are

Zeitly is a time-exchange marketplace operated from St. Gallen, Switzerland. For the purposes of Swiss data protection law, Zeitly is the data controller responsible for your personal data.

Contact: legal@zeitly.app

02Data We Collect

We collect only the data necessary to operate the Service:

Data	Why we collect it
Name & email	Account creation and authentication
Profile photo	Displayed on your profile and to other users
Location (city level)	Showing services near you. Collected only when you use location-based features; you can update or remove it at any time.
Service listings	Displayed publicly on the marketplace
Messages	Communication between users
Exchange records	Tracking credit transfers and history
Reviews	Building trust and reputation on the platform
Device & session data	App stability, analytics (via Firebase)
Feedback messages	Improving the Service

We do not collect sensitive personal data such as health information, political opinions, or financial account details.

03Legal Basis for Processing

Under the revFADP, we process your data on the following legal bases:

Contract performance — to provide the Service you have signed up for
Legitimate interests — to improve the Service, ensure security, and prevent abuse
Consent — for optional features such as location access, which you can withdraw at any time
Legal obligation — where required by Swiss law

04How We Use Your Data

We use your data solely to:

Operate and improve the Zeitly platform
Enable exchanges and credit transfers between users
Display your profile and services to other users
Send transactional communications (exchange updates, account notifications)
Respond to support requests and feedback
Detect and prevent fraud and abuse

Feedback & Support: When you submit feedback through the app, your name, email address, and message are sent to our internal Slack workspace for team review. This helps us respond to issues and improve the app. Feedback may also be stored in our database as a backup if delivery fails. You can contact us at legal@zeitly.app to request deletion of submitted feedback.

We do not use your data for advertising. We do not sell your data to third parties.

05Third-Party Services

Zeitly uses the following third-party services to operate:

Google Firebase (Firestore, Authentication, Storage, Cloud Functions, Analytics) — infrastructure and data storage. Data is processed in the Europe (Zurich) region. Google LLC is certified under the EU-U.S. Data Privacy Framework. See Firebase Privacy.
Google Sign-In — optional authentication method. See Google Privacy Policy.
Apple Sign In — optional authentication method. Apple processes only the data required for sign-in. See Apple Privacy Policy.
Slack — internal feedback delivery. When you submit feedback, your name and email are shared with our team via Slack for review and response.

We do not share your data with any other third parties except as required by law.

06Data Retention

We retain your data for as long as your account is active. Specific retention periods:

Account data — retained until you delete your account
Messages — automatically deleted after 180 days of inactivity in a conversation. When you delete your account, your sent message content is replaced with "[Message deleted]"
Exchanges — completed exchange records are anonymised when you delete your account (your name is replaced with "Deleted User"). Records may be retained for up to 7 years where required by Swiss accounting law
Service listings — deleted when you delete your account or remove a listing
Feedback — retained indefinitely for product improvement unless you request deletion
Analytics — anonymised, aggregated analytics data may be retained indefinitely

When you delete your account, your profile and public content are removed from view immediately. Data is permanently deleted within 30 days.

07Your Rights

Under the revFADP, you have the following rights regarding your personal data:

Access & Portability Export all your personal data in JSON format via Profile › Export My Data

Rectification Update your profile information at any time via Profile › Edit Profile

Erasure Delete your account and all associated data via Profile › Delete Account

Opt-out of Analytics Disable anonymous usage data collection via Profile › Help Improve Zeitly toggle

Objection Object to processing based on legitimate interests

Withdrawal Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at legal@zeitly.app. We will respond within 30 days. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

08Security

We take reasonable technical and organisational measures to protect your data, including encrypted data transmission (TLS), Firebase security rules that restrict access to your own data, and regular security reviews.

No system is completely secure. If you believe your account has been compromised, contact us immediately at legal@zeitly.app.

09Children

Zeitly is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete the account promptly.

10Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or by email at least 14 days before the changes take effect. The current version is always available at this URL.

11Contact & Data Controller

For any privacy-related questions or to exercise your rights:

Zeitly — Data Controller
St. Gallen, Switzerland
legal@zeitly.app