Privacy Policy
Last updated: 08/06/2026
1. Who We Are
Filip Dobrocký, IČO: 23720271 (“we”, “us”, “our”) is the controller of the personal data collected through this application (“the App”).
- Registered address: Nové sady 988/2, 602 00 Brno – Staré Brno, Czech Republic
- Contact: filip.dobrocky@gmail.com
If you have questions about this policy or your data, contact us at filip.dobrocky@gmail.com.
2. Scope
This policy applies to all users of the App worldwide. Where regional law grants you additional rights — in particular the EU/EEA (GDPR), the United Kingdom (UK GDPR), California (CCPA/CPRA), Brazil (LGPD), and Canada (PIPEDA) — those rights are described in Section 10.
3. What Data We Collect and Why
3.1 Username
| What | An arbitrary username you choose. No email address is required. |
|---|---|
| Why | To identify your session and associate your contributions with your chosen identity within the App. |
| Legal basis (GDPR) | Art. 6(1)(b) — performance of the service you requested. |
| Retention | For as long as your account is active, or until you request deletion. |
No email address, phone number, or other contact information is collected unless you contact us voluntarily (e.g. for support).
3.2 Audio Recordings
| What | Sound recordings you make inside the App, only when you actively trigger a recording. The App does not record audio passively, automatically, or in the background. |
|---|---|
| Why | To enable you to contribute field recordings as part of the App’s participatory sound-walk experience. |
| Legal basis (GDPR) | Art. 6(1)(a) — your explicit consent, given at the point of upload (see Section 5). |
| Retention | As described in the third-party terms you accept at upload (see Section 5). |
Important: If you record in a location where other people are present, your recording may capture the voices or sounds of third parties. You are solely responsible for complying with local laws governing the recording of others in public or private spaces (e.g. one-party vs. all-party consent jurisdictions). Do not record conversations without the knowledge of participants where this is required by law.
3.3 Location Data Embedded in Recordings
| What | GPS coordinates at the time and place of your recording, attached to the audio file as metadata. |
|---|---|
| Why | To place your recording in the correct geographic context on the sound-walk map. |
| Legal basis (GDPR) | Art. 6(1)(a) — included within the upload consent described in Section 5. |
| What we do NOT collect | Your ongoing or real-time GPS position during a walk is processed entirely on your device and is never transmitted to our servers or any third party. |
4. Data We Do Not Collect
- Your real name, email address, or phone number (unless you provide them voluntarily for support)
- Your real-time or historical GPS trail outside of recordings
- Any data from device permissions other than microphone (for recording) and location (attached to recordings at upload)
5. Uploading Recordings — Publication in the App and Artistic Reuse
This is the most important section of this policy. Please read it carefully.
Before you can make any recordings, the App asks for your explicit upfront consent to the following terms. You must actively agree before the recording feature is unlocked; if you do not agree, the recording feature is not available.
By consenting, you acknowledge and agree that:
- Every recording you make will be automatically transmitted to and stored by the controller (Filip Dobrocký) on secure cloud infrastructure.
- Each upload includes the audio and the GPS coordinates of the recording location as embedded metadata.
- Your uploaded recordings become publicly audible to all other users of the App, who can hear them at the location where you recorded them, labelled with the username you chose. Do not upload anything you are not willing to make public.
- Your recordings may be used by the controller for artistic purposes, including but not limited to: sound-art installations, music composition, and derived works.
Withdrawal of consent: You may withdraw your consent at any time by contacting filip.dobrocky@gmail.com. Withdrawal disables the recording feature for your account going forward. Because recordings may already have been incorporated into artistic works, deletion may not always be technically feasible; we will inform you of any such limitation when you make a deletion request. Withdrawal does not affect the lawfulness of uploads made before the withdrawal.
6. Data Security
We apply technical and organisational measures proportionate to the sensitivity of the data:
- All data is transmitted over encrypted connections (TLS 1.2+).
- Audio recordings are stored in Cloudflare R2 object storage (EU region). Metadata associated with recordings is stored in Supabase (EU region). Both providers offer Data Processing Agreements in compliance with GDPR Art. 28.
- Access to stored data is restricted to authorised personnel.
No method of transmission or storage is 100% secure. If we become aware of a breach that is likely to affect your rights, we will notify you and the relevant supervisory authority as required by law.
7. Children and Minors
The App is not specifically directed at children but is not restricted to adults. If you are under the age of 16 (or the applicable minimum age in your jurisdiction), you should use the App only with the knowledge and consent of a parent or guardian, who accepts this privacy policy on your behalf. We do not knowingly collect personal data from minors without such parental consent. If you believe a minor’s data has been submitted without appropriate consent, contact filip.dobrocky@gmail.com and we will delete it promptly.
8. Your Rights (General)
Regardless of where you are located, you may contact us to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data (subject to the limitations described in Section 5 for uploaded recordings).
- Withdraw consent for any processing based on consent.
We will respond within 30 days. Contact filip.dobrocky@gmail.com with the subject line “Privacy Request”.
9. Additional Rights by Region
9.1 EU / EEA — GDPR
Under Regulation (EU) 2016/679 you have the following rights, exercisable free of charge:
| Right | Description |
|---|---|
| Access (Art. 15) | Obtain a copy of your data and information about how we process it. |
| Rectification (Art. 16) | Correct incomplete or inaccurate data. |
| Erasure (Art. 17) | Request deletion where the data is no longer necessary, consent is withdrawn, or processing was unlawful. |
| Restriction (Art. 18) | Limit processing to storage only while a dispute is resolved. |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format. |
| Object (Art. 21) | Object to processing based on legitimate interests. |
| Withdraw consent (Art. 7(3)) | Withdraw any consent at any time without affecting prior lawful processing. |
You also have the right to lodge a complaint with your national data protection supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu.
9.2 United Kingdom — UK GDPR
The same rights as Section 9.1 apply. The supervisory authority is the Information Commissioner’s Office (ICO): https://ico.org.uk.
9.3 California, USA — CCPA / CPRA
California residents have the right to:
- Know what personal information we collect, use, disclose, or sell.
- Delete personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising.
- Non-discrimination for exercising any of these rights.
To submit a CCPA request, contact filip.dobrocky@gmail.com with subject line “CCPA Request”.
9.4 Brazil — LGPD
Under Lei Geral de Proteção de Dados (Law 13.709/2018), Brazilian residents have the right to access, correct, delete, and port their data, and to be informed of the legal basis for processing. Contact filip.dobrocky@gmail.com.
9.5 Canada — PIPEDA
Under the Personal Information Protection and Electronic Documents Act, Canadian residents may request access to and correction of their personal information. Contact filip.dobrocky@gmail.com.
10. Changes to This Policy
We may update this policy to reflect changes in our practices or applicable law. We will notify you of material changes by displaying a notice in the App before they take effect. The “Last updated” date at the top of this document reflects the most recent revision. Continued use of the App after the effective date constitutes acceptance of the revised policy.
11. Contact and Complaints
Filip Dobrocký, IČO: 23720271 Nové sady 988/2, 602 00 Brno – Staré Brno, Czech Republic filip.dobrocky@gmail.com
For EU/EEA residents: if you are unsatisfied with our response, you have the right to lodge a complaint with your national supervisory authority (see Section 8.1).