Privacy Policy – JobiroEffective Date: 1. 8. 2026This Privacy Policy explains how Matěj Žalmánek, a natural person residing in Czechia ("we," "us," "our," or the "Operator"), operating the Jobiro application and the website https://www.jobiroapp.com (together, the "Services"), collects, uses, shares, and protects your personal data. For the purposes of the General Data Protection Regulation (GDPR), the Operator is the controller of your personal data.You can contact us about privacy at support@jobiroapp.com, by phone at +420 724 732 419, or by mail at Sokolská 300, Hrotovice, Vysočina 675 55, Czechia.The Services are hosted in Germany (European Union). This Privacy Policy forms part of, and should be read together with, our Terms of Use.
1. PERSONAL DATA WE COLLECTWe collect only the data needed to provide the Services. Depending on how you use them, this may include:- Account data: your email address (for adult accounts), display name, and password (stored only in hashed form). Child accounts are created without an email address and instead use a login name chosen by the managing parent or guardian.- Profile data: your profile picture, if you choose to upload one. Profile pictures are publicly visible.- Group and task data: the groups you belong to, activities, tasks and offers you create or take part in, task completion marks, ratings, and any information you place in a task, such as a description, a contact email or phone number, a location (for example, a municipality or district), and working hours.- Karma and conduct data: your Karma balances within groups and any internal penalty points, which reflect activity within the Services and have no monetary value.- Reports: complaints you submit about content, offers, users, or other matters.- Technical data: device push notification tokens (used to deliver notifications), and technical logs such as IP address and app or server event logs, used for security, diagnostics, and abuse prevention.- Age-verification data: where your device provides a platform age signal (Apple's Declared Age Range or Google Play's age signals), we record the source of the signal, whether it indicated that you are below the applicable age, and a coarse age range, together with the country used to determine the age threshold. We do not collect or store your date of birth.
2. CHILDREN AND CHILD MODEThe Services are intended for users who have reached the age of digital consent in their country of residence. A person below that age may use the Services only through a child account created and managed by a parent or legal guardian.For a child account we process only limited data: the login name and display name chosen by the parent or guardian, task completion marks, and data strictly necessary to operate the account within parent-approved private groups. Child accounts have no email address, cannot access the Global Group, and cannot make public contributions.Creating and activating a child account requires verifiable consent from a parent or legal guardian. We send a confirmation request to the parent or guardian and process a consent record (including a secure, time-limited token) to verify and document that consent. When our legal documents change in a way that requires renewed consent, only the parent or guardian may approve the update on the child's behalf.The parent or legal guardian may, at any time, review, correct, or delete the child's account and data, and may withdraw consent, by using the in-app child-account management or by contacting us at support@jobiroapp.com. If we learn that a child account was created without proper consent, we will delete it.
3. HOW AND WHY WE USE YOUR DATAWe use your personal data to: create and manage your account; provide the task-management features; display groups, tasks, offers, and ratings to the appropriate users; send you service-related and push notifications; handle reports and enforce our Terms of Use; verify eligibility and parental consent; secure the Services and prevent abuse; and comply with our legal obligations.Our legal bases under the GDPR are: the performance of our agreement with you (to provide the Services); your consent, and the consent of a parent or guardian for a child account (which you may withdraw at any time); our legitimate interests in operating, securing, and improving the Services and preventing abuse; and compliance with legal obligations. We do not use your data for automated decision-making that produces legal effects concerning you, and we do not use the Services to profile children for advertising.
4. SHARING AND PROCESSORSWe do not sell your personal data. We share it only as needed to run the Services, with service providers who act as our processors under contract, and where required by law.Our processors and third-party services include: our hosting provider (servers located in Germany); a push-notification provider and mobile push services (Apple Push Notification service and Google Firebase Cloud Messaging), including web push using the VAPID standard; an email delivery provider used to send account and consent emails; an operational communications tool used by us internally to receive service alerts; and a currency exchange-rate provider used to display Karma-related figures. Each processor receives only the data necessary for its function.Other users receive the data that the Services are designed to share with them, as described in the next section. We may also disclose data to authorities or third parties where necessary to comply with the law, respond to lawful requests, or protect the rights, safety, and security of users, the public, or the Operator.
5. VISIBILITY OF YOUR DATA TO OTHER USERSSome information is visible to other users by design. Your profile picture is public. Within a private group, your display name, the tasks and offers you create or take part in, task completion marks, and ratings are visible to the other members of that group. In the Global Group, content is visible to all eligible users. Any contact details or location you place in a task are shared with the members of the relevant group, and, in the Global Group, with the public. Please share only information you are comfortable making available on that basis.
6. INTERNATIONAL DATA TRANSFERSThe Services are hosted in Germany (European Union), and your data is primarily processed within the European Economic Area (EEA). Some of our processors (for example, mobile push-notification providers) may process limited data outside the EEA. Where that happens, we rely on appropriate safeguards recognized under the GDPR, such as the European Commission's adequacy decisions or Standard Contractual Clauses. If you access the Services from outside the EEA, you understand that your data will be transferred to and processed in Germany.
7. DATA RETENTIONWe keep your personal data only for as long as necessary to provide the Services and for the purposes described in this Policy, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we permanently delete your account and associated personal data, except for information we are required or permitted by law to retain and for records necessary in relation to obligations toward other users. A child account and its data are deleted if parental consent is not provided within the applicable time window, or when the parent or guardian deletes the account.
8. YOUR RIGHTSSubject to applicable law, you have the right to access your personal data; to rectify inaccurate data; to erase your data; to restrict or object to certain processing; to data portability; and, where processing is based on consent, to withdraw that consent at any time without affecting processing carried out before withdrawal. For a child account, these rights are exercised by the parent or legal guardian.You can exercise many of these rights directly in the app, including editing your profile and permanently deleting your account, or by contacting us at support@jobiroapp.com. We will respond within the time limits required by law.If you believe we have processed your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Czechia, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ, www.uoou.cz). You may also contact the supervisory authority in your country of residence.
9. SECURITYWe take appropriate technical and organizational measures to protect your personal data, including hashing of passwords, access controls, and transport encryption. Uploaded profile pictures must be in a raster image format; SVG files are not accepted, to reduce security risks associated with active content. No method of transmission or storage is completely secure, so while we work to protect your data, we cannot guarantee absolute security.
10. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)If you are a California resident, you have the right, under the California Consumer Privacy Act as amended by the California Privacy Rights Act, to: know what personal information we collect and how we use and disclose it; access and delete your personal information; and correct inaccurate personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising; accordingly, there is no need to opt out of such sale or sharing. We will not discriminate against you for exercising your privacy rights.You may exercise these rights by contacting us at support@jobiroapp.com. We will verify your request as required by law before responding. You may use an authorized agent to submit a request on your behalf.
11. CHILDREN'S PRIVACY (UNITED STATES)We do not knowingly collect personal information from children in a manner inconsistent with applicable law, including the U.S. Children's Online Privacy Protection Act (COPPA). Accounts for minors are created and managed by a parent or legal guardian, whose verifiable consent is required. If you believe a child has provided us personal information without the required consent, please contact us at support@jobiroapp.com and we will take appropriate steps to delete it.
12. CHANGES TO THIS POLICYWe may update this Privacy Policy from time to time. Each version carries a version identifier, and we will notify you of material changes. Where renewed consent is required, we will ask for it before continued use; for a child account, that consent must be given by the parent or legal guardian. The date at the top of this Policy shows when it last changed.
13. CONTACT USFor any question about this Privacy Policy or about how we handle your personal data, contact: Matěj Žalmánek, Sokolská 300, Hrotovice, Vysočina 675 55, Czechia, email support@jobiroapp.com, phone +420 724 732 419.
