Privacy Policy

01Who We Are

Zeitly is a time-exchange marketplace operated from St. Gallen, Switzerland. For the purposes of Swiss data protection law, Zeitly is the data controller responsible for your personal data.

Contact: legal@zeitly.app

02Data We Collect

We collect only the data necessary to operate the Service:

We do not collect sensitive personal data such as health information, political opinions, or financial account details.

03Legal Basis for Processing

Under the revFADP, we process your data on the following legal bases:

• Contract performance — to provide the Service you have signed up for
• Legitimate interests — to improve the Service, ensure security, and prevent abuse
• Consent — for optional features such as location access, which you can withdraw at any time
• Legal obligation — where required by Swiss law

04How We Use Your Data

We use your data solely to:

• Operate and improve the Zeitly platform
• Enable exchanges and credit transfers between users
• Display your profile and services to other users
• Send transactional communications (exchange updates, account notifications)
• Respond to support requests and feedback
• Detect and prevent fraud and abuse

Feedback & Support: When you submit feedback through the app, your name, email address, and message are sent to our internal Slack workspace for team review. This helps us respond to issues and improve the app. Feedback may also be stored in our database as a backup if delivery fails. You can contact us at legal@zeitly.app to request deletion of submitted feedback.

Reports & Safety: When you report a person or an offering, the report — including your account identifier, the reported account, and the detail you wrote — is sent to our internal Slack workspace and reviewed by a person. Reports are never acted on automatically. The person you report is not told who filed the report. Blocking someone is private to you: your block list is readable only by you, and the person you block is not notified.

We do not use your data for advertising. We do not sell your data to third parties.

05Third-Party Services

Zeitly uses the following third-party services to operate:

• Google Firebase (Firestore, Authentication, Storage, Cloud Functions, Messaging) — infrastructure and data storage. Data is processed in the Europe (Zurich) region. Google LLC is certified under the EU-U.S. Data Privacy Framework. See Firebase Privacy.
• Firebase Analytics & Crashlytics (Google) — anonymous usage statistics and automatic crash reports. A crash report contains your device model, OS version, and the sequence of events leading up to the crash; it is not linked to your account. Both are governed by the single "Help Improve Zeitly" switch in Settings — it is on by default, and turning it off stops usage analytics and crash reporting together.
• Google Sign-In — optional authentication method. See Google Privacy Policy.
• Apple Sign In — optional authentication method. Apple processes only the data required for sign-in. See Apple Privacy Policy.
• Slack — internal delivery of feedback and safety reports. When you submit feedback, your name and email are shared with our team via Slack for review and response. When you file a report, the report's contents are delivered the same way.

We do not share your data with any other third parties except as required by law.

06Data Retention

We retain your data for as long as your account is active. Specific retention periods:

• Account data — retained until you delete your account
• Messages — automatically deleted after 180 days of inactivity in a conversation. When you delete your account, your sent message content is replaced with "[Message deleted]"
• Exchanges — completed exchange records are anonymised when you delete your account (your name is replaced with "Deleted User"). Records may be retained for up to 7 years where required by Swiss accounting law
• Service listings — deleted when you delete your account or remove a listing
• Feedback — retained indefinitely for product improvement unless you request deletion
• Analytics — anonymised, aggregated analytics data may be retained indefinitely
• Crash reports — retained by Firebase Crashlytics under Google's retention schedule, and not linked to your account
• Reports — retained as a safety record after review, so that repeat behaviour can be recognised

When you delete your account, your profile and public content are removed from view immediately. Data is permanently deleted within 30 days.

07Your Rights

Under the revFADP, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at legal@zeitly.app. We will respond within 30 days. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

08Security

We take reasonable technical and organisational measures to protect your data, including encrypted data transmission (TLS), Firebase security rules that restrict access to your own data, and regular security reviews.

No system is completely secure. If you believe your account has been compromised, contact us immediately at legal@zeitly.app.

09Children

Zeitly is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete the account promptly.

10Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or by email at least 14 days before the changes take effect. The current version is always available at this URL.

11Contact & Data Controller

For any privacy-related questions or to exercise your rights: