Legal
Privacy
Policy
Last updated: August 2026 · Operator: chmays.app · support@chmays.app
1. Introduction
This Privacy Policy explains how Freepin ("we", "us", "our") collects, uses, stores and protects your personal data when you use our app and services. We operate in accordance with the General Data Protection Regulation (GDPR). The data controller is chmays.app.
2. Information We Collect
Information you provide:
- Name and phone number when creating an account
- Photos you upload of items
- Descriptions and details in your listings
- Messages you send to other users
- Ratings you submit
Information collected automatically:
- Your approximate GPS location (only while the app is active, to show nearby items)
- Device token for push notifications (only if you allow it)
- Timestamps for content creation and modification
We do not collect payment details, email addresses, precise home addresses, or behavioural data for marketing.
3. Purpose and Legal Basis
- Contract performance (GDPR Art. 6(1)(b)): Operating the platform, creating listings, delivering messages
- Legitimate interest (GDPR Art. 6(1)(f)): Security, abuse prevention, content moderation
- Consent (GDPR Art. 6(1)(a)): Push notifications and showing your phone number to other users
4. Sharing of Information
We never share your data with advertisers, data brokers, or any third party for payment. We share only with:
- Cloudflare Inc. (USA): Server infrastructure, databases and image storage — certified under EU-US Data Privacy Framework
- Apple Inc.: Push notifications via Apple Push Notification Service (APNs)
- Public authorities: Only when required by law or court order
Other users can see your name, your listings, and your phone number only if you actively choose to show it in privacy settings.
5. Data Retention and Deletion
- Account information: Retained while your account is active
- Listings: Automatically deleted after 14 days or when marked as taken
- Messages: Retained until you or the other party deletes the conversation
- Ratings: Retained on your profile while your account exists
- Push tokens: Deleted on logout or uninstall
To delete your account, email support@chmays.app with subject "Delete my account". We will delete all your data within 30 days.
6. Your Rights (GDPR)
- Access: Request a copy of the data we hold about you
- Rectification: Correct inaccurate data directly in the app or by email
- Erasure ("right to be forgotten"): Request deletion of your account and all data
- Restriction: Request we limit processing of your data
- Data portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interest
- Withdrawal of consent: At any time, without affecting the lawfulness of prior processing
To exercise your rights: support@chmays.app — we respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority (Denmark: datatilsynet.dk).
7. Security
- HTTPS encryption for all data transmission
- Encrypted tokens for authentication
- Access controls — only you can access your private messages
- Regular security updates to infrastructure
8. Children
Freepin is not intended for children under 13. We do not knowingly collect data from children under 13. Contact us immediately if you believe a child has created an account.
9. Changes to This Policy
We may update this policy. Material changes will be communicated via push notification or in-app notice. Continued use after notice constitutes acceptance.
10. Contact
chmays.app · support@chmays.app