needU Privacy Policy

This Application collects certain Personal Data from its Users

Back to Home

Data Controller

needU
Padua, Italy
VAT No.: 05680860284

Controller email address: [email protected]

Types of Data Collected

Among the Personal Data collected by this Application, either independently or through third parties, there are: tracking tools, usage data, first name, last name, email, payment information, various kinds of Data, geographic position, unique universal identifier (UUID), crash data, device information, calendar permission, contacts permission, camera permission, phone permission, microphone permission, photo library permission, city, ZIP/postal code, state, province, nation, county, latitude, longitude, metropolitan area, geographic region, IP address, app information, device logs, operating systems, browser information, language, number of sessions, session duration, mouse movements, keypress events, touch events, video view data, browsing history, unique device advertising identifiers, User ID, password, social media account data, number of Users, and chat content voluntarily sent by the User such as text messages, voice messages, images and ephemeral photos.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanatory texts displayed before Data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Application.

Important note: unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. Where this Application specifically states that some Data are optional, Users are free not to communicate those Data without consequences to the availability or operation of the Service.

Any use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Application.

Methods and Place of Processing the Collected Data

Methods of processing

The Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.

Processing is carried out using IT and telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Controller, in some cases Data may be accessible to certain persons in charge, involved with the operation of this Application, or external parties such as third-party technical service providers, hosting providers, IT companies, communication agencies, legal advisers or system administrators, where such access is necessary.

Chat content voluntarily sent by Users, including voice messages and ephemeral photos, is processed to allow delivery, display to recipients, service security, abuse prevention, handling of reports and, where necessary, the protection of the rights of the Controller or third parties. Such content is not intended for public profile visibility and is ordinarily shared only with conversation participants, except where access is required for technical, legal, support, moderation or security reasons.

Place

Data are processed at the Controller's operating offices and in any other place where the parties involved in processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own.

Retention period

Unless otherwise specified in this document, Personal Data are processed and stored for as long as required by the purpose for which they were collected and may be retained for longer due to legal obligations or based on the Users' consent.

Voice messages may be stored as part of the chat history for the time necessary to provide the Service, manage the account, prevent abuse, answer lawful requests or defend the rights of the Controller.

Ephemeral photos are designed to be viewed once by the recipient through the normal in-app flow. This does not mean immediate or absolute deletion from all technical systems. Related files, metadata and temporary technical copies may be retained for the limited time strictly necessary for delivery, security, abuse prevention, dispute handling, backups and legal compliance, and may then be deleted or anonymized according to normal technical and organizational cycles.

Purposes of Processing

User Data are collected to allow the Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its own rights and interests or those of Users or third parties, detect malicious or fraudulent activity, and for the following purposes:

Details About the Processing of Personal Data

Contacting the User

Contact form

By filling in the contact form with their Data, the User authorizes this Application to use such details to reply to requests for information or any other type of request indicated by the form's header.

Personal Data processed: Usage Data, email.

Social features

Invite and suggest friends

This Application may use Personal Data provided by the User to allow Users to invite their friends and suggest connections inside the Service, for example through the address book where access has been authorized.

Personal Data processed: various kinds of Data.

Public profiles and optional psychometric data

This service manages publicly visible profile information and optional data derived from personality or psychology-based quizzes. The public profile may include name, age, location, profile image, additional images and relationship-related preferences. Optional character or lifestyle information may also be displayed where the User chooses to provide it. The Controller may access such information for moderation, security and service improvement purposes.

Contact management and messaging

Amazon Simple Email Service (SES)

Amazon SES is a service provided by Amazon.com Inc. used to manage email addresses and send email communications.

Personal Data processed: email.

Place of processing: United States, Luxembourg.

In-app messaging, voice messages and ephemeral photos

This Application allows Users to communicate through private chats, including text messages, voice messages and ephemeral photos voluntarily sent by the User. Such content is processed to provide messaging functionality, deliver messages to recipients, maintain service security, prevent abuse, handle reports and improve the technical reliability of the Service.

Ephemeral photos are intended for a single in-app view by the recipient. The Controller adopts reasonable technical and organizational measures to limit unauthorized access and misuse, but cannot absolutely guarantee that third parties will never capture, record or reproduce such content by external tools or device features outside the Controller's control.

Some content, particularly images sent in chat, may be subject to automated or manual checks for security, moderation, prevention of unlawful content or content contrary to the Terms, and community protection.

Personal Data processed: message contents, delivery metadata, chat identifiers, data relating to the use of microphone, camera or gallery when activated by the User to send content.

Payment management

This Application uses third-party services for in-app purchase processing. The Application does not directly collect complete card details, but may receive confirmation data from the relevant store operator.

Apple App Store payments

The Application uses Apple's in-app purchase system on iOS devices.

Personal Data processed: billing information, payment information.

Place of processing: United States.

Google Play payments

The Application uses Google's in-app purchase system on Android devices.

Personal Data processed: billing information, payment information.

Place of processing: United States.

Hosting and backend infrastructure

OVHcloud

OVHcloud provides hosting and backend infrastructure services.

Personal Data processed: Usage Data.

Place of processing: Italy.

Contabo

Contabo provides hosting and backend infrastructure services.

Personal Data processed: Usage Data and other categories of Data as specified by the provider.

Place of processing: Germany.

Location-based interactions

Geolocation

This Application may collect, use and share the User's geographic location to provide location-based services. Most browsers and devices offer tools to disable such tracking. Where the User has expressly authorized it, this Application may receive actual location information.

Personal Data processed: geographic position.

Infrastructure monitoring

Sentry

Sentry is used to monitor usage and performance issues.

Place of processing: United States.

Firebase Performance Monitoring

Firebase Performance Monitoring is used to monitor performance.

Place of processing: United States.

Crashlytics

Crashlytics is used to monitor crashes and technical issues.

Personal Data processed: crash data, UUID, device information.

Place of processing: United States.

Traffic optimization and distribution

Cloudflare

Cloudflare filters traffic between this Application and the User's browser or device and may collect statistical data relating to such traffic.

Personal Data processed: tracking tools and other categories of Data as specified by the provider.

Place of processing: United States.

Spam and bot protection

Cloudflare Bot Management

This service is used to protect the Application against malicious bot traffic and abuse.

Personal Data processed: usage and technical interaction data, device information, app launches, session data, IP address and related metadata.

Place of processing: United States.

Advertising

AdMob

AdMob is an advertising service provided by Google.

Personal Data processed: Usage Data, advertising identifiers, tracking tools.

Place of processing: United States, Ireland.

Registration and authentication

Sign in with Apple

Sign in with Apple is an authentication service provided by Apple.

Personal Data processed: email, User ID.

Place of processing: United States.

Firebase Authentication

Firebase Authentication is an authentication service provided by Google.

Personal Data processed: social login data, email, password.

Place of processing: United States.

Google OAuth

Google OAuth is an authentication service provided by Google.

Personal Data processed: Usage Data, tracking tools and other categories of Data as specified by the provider.

Place of processing: United States.

Permissions

Depending on the User's specific device, this Application may request certain permissions allowing it to access device Data as described below.

Legal Basis

The Controller may process Personal Data relating to Users if one of the following applies: Users have given consent for one or more specific purposes; provision of Data is necessary for the performance of an agreement with the User; processing is necessary for compliance with a legal obligation; processing is related to a task carried out in the public interest or in the exercise of official authority; or processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

User Rights

Users may exercise certain rights regarding their Data processed by the Controller.

Requests to exercise User rights may be directed to the Controller through the contact details provided in this document. Requests are free of charge and will be answered within the time required by applicable law.

Additional Information About Data Processing

Legal action

The User's Personal Data may be used by the Controller in court or in the stages leading to possible legal action arising from improper use of this Application or related Services.

The User declares to be aware that the Controller may be required to reveal personal data upon request of public authorities.

Additional information

Upon request, this Application may provide the User with additional contextual information concerning particular Services or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application and may contain Personal Data such as IP addresses.

Changes to this privacy policy

The Controller reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and, possibly, within this Application and/or by sending a notice to Users via any available contact information. Users should frequently check this page and refer to the date of the latest modification listed at the bottom.

Definitions and Legal References

Personal Data

Any information that directly, indirectly or in connection with other information allows the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this Application or third-party services integrated into it, including IP addresses, browser and operating system details, time of request, method utilized to submit the request, response size, server response status and navigation details.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Processor

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller.

Controller

The natural or legal person which determines the purposes and means of the processing of Personal Data.

This Application

The means by which the Personal Data of the User are collected and processed.

Service

The service provided by this Application as described in the relevant terms and on this site or application.

Last updated: May 25, 2026