1. Data Controller

QUANT MAEDICA LIFE SRL
CUI: 29929538
EUID: ROONRC.J2012000720121
Registered address: Str. Nicolae Steinhardt nr. 8, Corp F, Bloc C, 400485 Cluj-Napoca, Romania
Email: tradely.support@gmail.com

2. Data We Collect

Some data is collected automatically when you sign in or use protected features. All remaining data is provided voluntarily by you — nothing beyond the categories below is collected unless you choose to enter or trigger it.

Collected automatically on sign-in

• Google, Apple, or email account information used to sign in: name, email address, and (for Google) profile photo when available, plus account creation timestamp
• Firebase UID — a unique identifier assigned by Firebase Authentication for your signed-in account
• Anonymous Firebase UID — assigned for browse-only sessions that do not create a user profile document

Provided voluntarily by you

• Phone number (if added to your profile)
• Location data (GPS coordinates — only while the app is open and location tracking is enabled)
• Listing information: profession, services, details, address, website, working hours, contact visibility rules, and tags
• Photos uploaded to your listing (stored as WebP files; free tier 1 photo, Premium up to 9; about 1 MB max per photo after processing)
• Reviews you submit, including any replies you post as a provider
• Job offers you post, including title, details, budget/currency, lifespan, tags, and contact details shown to nearby users
• Saved contacts, blocked users, providers you have reviewed, and users you have reported (stored as UIDs on your profile, subject to platform limits)
• Content reports you submit (the reported item, reason, and your UID as the reporter)
• Premium billing status when you subscribe (processed by Stripe — we do not store card details)

Collected automatically during use

• Per-operation rate-limit counters — created and updated when you call rate-limited features; used internally for abuse prevention; never shared with other users
• App Check / reCAPTCHA Enterprise tokens used to verify requests to our Cloud Functions
• Listing interaction counts (listing views, contact opens, gallery opens, profile saves, and website visits) — recorded server-side for any active listing; the in-app analytics dashboard is a Premium feature (free accounts may see metrics behind an upgrade prompt)
• Job-offer view counts on active job offers
• Server-side location derivatives such as geohash used for nearby search (not exposed to other clients as a raw field)

3. How We Use Your Data

We use your data for the following purposes:

• Providing and operating the Tradely platform
• Displaying your listing and/or job offer and shared location to nearby users while you are visible and have an active listing or job offer (Discover applies distance and ranking rules described in our Terms of Service)
• Processing Premium payments via Stripe (including trials where offered)
• Sending billing-related communications via Stripe
• Providing listing-performance analytics (dashboard access is Premium; counts are recorded for active listings on Free and Premium)
• Preventing abuse, spam, fraudulent, and illegal activity
• Enforcing rate limits to protect platform stability
• Improving the service

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• Contract performance — to provide the service you signed up for
• Legitimate interests — fraud and abuse prevention, platform integrity, security, rate limiting, and provider analytics
• Consent — location tracking while the app is active
• Legal obligation — retaining certain billing or legal records as required by law

5. Location Data

Location data is only collected while the app is open and location permission is granted. For browse-only (anonymous) sessions, location stays on your device for map centering and nearby search queries — it is not written to a user profile and is never published to other users. For signed-in accounts, location is used to show your position on the map, power nearby search, and — only while you have an active listing or job offer and visibility is on — keep a shared map location that nearby users can see. Shared-location updates may occur periodically while tracking is on (for example after meaningful movement or on a short interval). You can stop location sharing by turning visibility off, deleting your listing/job offer, or closing the app.

6. Data Sharing

We do not sell your personal data. We share data only with the following third parties as necessary to operate the service:

• Google Firebase — authentication, database, hosting, file storage, Cloud Functions, and App Check / reCAPTCHA Enterprise
• Stripe — payment processing (see Stripe Privacy Policy)
• OpenFreeMap — map style and tile delivery (anonymous map requests to tiles.openfreemap.org)

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account we permanently delete your user profile document and related subcollections (including reviews about you, gallery metadata, and analytics) and delete listing photos from Cloud Storage. Reviews you wrote on other users' listings are not removed by account deletion. Active offers, requests, and saved/blocked UID lists on your profile are removed with your user document.

Daily rate-limit counters (quotas document) are retained after account deletion. The following are also retained after account deletion:

• Firestore subscription linkage for your account (Stripe customer and subscription identifiers, status, and trial flags) — retained for billing continuity and fraud prevention; not deleted by Tradely’s account-deletion flow
• Payment and customer records in Stripe — retained as required by Stripe and by tax/accounting law
• Your Firebase Authentication identity (Google, Apple, or email) — not deleted by Tradely’s account-deletion flow (you manage that via your sign-in provider)
• Reporter UIDs already stored on other users’ photos or reviews — may remain until that content is deleted

If you had an active, trialing, past-due, or unpaid Premium subscription, account deletion schedules cancellation at the end of the current billing period rather than issuing an automatic refund.

8. Your Rights (GDPR)

If you are located in the EU or EEA you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your Tradely account and associated data (subject to the retention items listed above)
• Right to restriction — request we limit processing of your data
• Right to data portability — request your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw location consent at any time

To exercise any of these rights, contact QUANT MAEDICA LIFE SRL at tradely.support@gmail.com. We will respond within 30 days.

9. Cookies and Local Storage

Tradely does not use tracking cookies. We use browser localStorage for preferences such as theme (light/dark), distance unit (km/mi), and Discover filter settings. This preference data never leaves your device and is not accessible to us. Firebase Authentication may use session cookies strictly necessary for authentication — these are exempt from consent requirements under GDPR.

10. Data Security

We use industry-standard security measures including deny-all Firestore and Storage rules (client reads and writes go through authenticated Cloud Functions), HTTPS encryption, Firebase App Check with reCAPTCHA Enterprise, and Stripe’s PCI-compliant payment infrastructure. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.

11. Children's Privacy

Tradely is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us at tradely.support@gmail.com and we will delete it promptly.

12. International Transfers

Tradely uses Google Firebase and related Google Cloud services. Our callable Cloud Functions are configured in the us-central1 region. Other Firebase services (such as Authentication, Hosting, Firestore, and Storage) may process data in Google infrastructure that is not limited to the EU. Stripe may process payment data outside the EU under Standard Contractual Clauses or other appropriate safeguards. Map tiles are requested from OpenFreeMap. By using Tradely you acknowledge that your data may be processed outside your country of residence as needed to operate the service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via the app where practicable. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

14. Contact and Complaints

For privacy-related questions or to exercise your rights, contact QUANT MAEDICA LIFE SRL at tradely.support@gmail.com. You also have the right to lodge a complaint with your local data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP) at dataprotection.ro.

See also our Terms of Service and Refund Policy.