📮 Privacy Policy

App Postomat | Last updated: May 2, 2026

Postomat is a mobile application that helps small business owners generate social media content using artificial intelligence. This Privacy Policy explains what data we collect, how we use it, and what rights you have.

1. Data Controller

The data controller is the developer of the Postomat application. For privacy inquiries, please use the email address provided in the Contact section.

2. What Data We Collect

2.1 Account Data (Google Sign-In)

• Email address
• Full name
• Profile picture
• Unique Google identifier (UID)

This data is provided by Google during sign-in and stored in Firebase Authentication.

2.2 Business Profile Data (optional)

• Business name
• Phone number
• Business email address
• Website
• Physical address
• Opening hours
• Social media handles (Instagram, Facebook, TikTok)

Business profile data is optional and stored in Firebase Firestore.

2.3 Generated Content

• Post topics entered by the user
• Selected generation parameters (content type, platform, industry)
• Generated post texts (history)

Important: Topics and parameters entered by the user are sent to the Groq API (Groq Inc., USA) for AI language model text generation. Groq processes this data on its servers in accordance with its own privacy policy.

2.4 Advertising Data (AdMob)

The app displays ads via Google AdMob. AdMob may collect device identifiers and other data to show personalized ads, in accordance with Google's Privacy Policy.

2.5 Analytics Data (Firebase Analytics)

We collect anonymous data about how the app is used (e.g. which features are used most often) to improve the product. This data does not allow identification of the user.

3. How We Use Data

• Providing user account functionality and data synchronization
• Generating personalized marketing content using AI
• Tracking the daily generation limit (Free plan)
• Displaying ads to Free plan users
• Usage analysis to improve the app

4. Legal Basis for Processing (GDPR)

• Performance of a contract — processing necessary to provide the service (Art. 6(1)(b) GDPR)
• Consent — for personalized ads (Art. 6(1)(a) GDPR)
• Legitimate interest — analytics to improve the app (Art. 6(1)(f) GDPR)

5. Sharing Data with Third Parties

• Google (Firebase, AdMob, Analytics) — cloud and advertising infrastructure
• Groq Inc. (USA) — AI query processing (post topics sent to language model)

We do not sell your personal data to any third parties.

6. Data Transfers Outside the EEA

Data may be processed outside the European Economic Area by Google (USA) and Groq Inc. (USA). Google uses standard contractual clauses approved by the European Commission. Groq processes data in accordance with applicable regulations.

7. Your Rights (GDPR)

• Access — you may request a copy of your data
• Rectification — you may correct inaccurate data in the app settings
• Erasure — you may delete your account and all data via app settings or by contacting us
• Portability — you may receive your data in a structured format
• Objection — you may object to processing based on legitimate interest
• Withdrawal of consent — for personalized ads at any time in the app settings

8. Data Retention

Account and business profile data is retained for as long as you use the app. After account deletion, data is removed within 30 days. Analytics logs are retained for a maximum of 14 months.

9. Security

Data is stored in Firebase (Google Cloud) with encryption in transit (HTTPS) and at rest. Access to data is restricted by Firestore security rules — each user can only access their own data.

10. Children

The app is not intended for persons under the age of 13. We do not knowingly collect data from children.

11. Changes to This Policy

We will notify you of significant changes to this privacy policy within the app or by email. The current version is always available at this address.