Privacy Policy

1. Data controller

The data controller is Lukáš Zuzaňák (ZuluStudio), zulustudio.eu, e-mail lukas@zuzanak.eu. For club member data, the operator generally acts as a processor and the controller is the respective club managing the data.

2. What data we process

• Account data — name, e-mail, phone, optionally nickname and profile photo.
• Club membership — club, role, join date.
• Vehicles — make, model, VIN, license plate and photos (if you add them).
• Events and attendance — your RSVP, comments and reactions.
• Messages — content of club messages and read status.
• Location — only when you actively use it (event venue map, sharing location during a group drive).
• Push token — device identifier used to send notifications.
• Technical data — cookies necessary for sign-in and language choice.

3. Purpose and legal basis

We process data to provide the service (club management, events, vehicles, communication) based on the performance of a contract and our legitimate interest in operating the app. Location and push notifications are processed based on your consent, which you grant in the app and can withdraw at any time in your device settings.

4. Cookies

The website uses only necessary cookies: authentication cookies (Supabase) and a language preference cookie (NEXT_LOCALE). We do not use advertising or third-party tracking cookies.

5. Data sharing and processors

We use the processors listed below to operate the service. Some of them may process data outside the EU (e.g. the USA) under standard contractual clauses and appropriate safeguards.

• Supabase — database, authentication and file storage.
• Vercel — hosting of the web part.
• Expo and Apple / Google — delivery of push notifications.
• Web3Forms — sending the contact form.

6. Retention

We keep data for the duration of your account and club membership. After account deletion or upon your request, we delete or anonymize the data unless a legal obligation requires us to keep it longer.

7. Your rights

You have the right to access, rectify, erase, restrict processing of, and port your data, and to object. You can withdraw consent (location, notifications) at any time. Send requests to lukas@zuzanak.eu. You also have the right to lodge a complaint with the Czech Data Protection Authority (uoou.gov.cz).

8. Deleting your account

You can request account deletion at clubyard.app/delete-account or directly in the mobile app profile. We verify the request against the e-mail and phone number on the account and send you a confirmation with the deletion date. The account and personal data are deleted 30 days after the request; until then the request can be cancelled using the link from the e-mail.

Events, messages and group drives you created in a club are kept for the club’s history, but they will be attributed to "Deleted account" and cannot be linked back to you.

9. Security

Data is isolated at the database level (row-level security) so that a member of one club cannot see another club’s data. All communication is encrypted over HTTPS.

10. Children

The service is not intended for persons under 16 without the consent of a legal guardian.

11. Changes to this policy

We may update this policy. We will notify you of material changes in the app or by e-mail. The current version is always available on this page.

12. Contact

For privacy questions, contact Lukáš Zuzaňák, e-mail lukas@zuzanak.eu.