Privacy policy

Effective 25 October 2026 · covers the Choosy Goosy Android app and choosygoosy.fun

In short: we collect only what the app needs so your group can ask questions and vote. We don't sell data or show ads. Option photos are deleted from the server a day after the result. Data is stored on Google Firebase servers in Warsaw.

1. Who is responsible for your data

The data controller is Rafał Majecki, the creator of Choosy Goosy. For anything related to your personal data, write to support@choosygoosy.fun.

2. What we collect

Account

• Guest account: an anonymous account ID and a name like “Guest 4F2A”. You don't give us a name or email address.
• Google account: if you sign in with Google or link it later, Google gives us your name (display name), email address and profile photo. The email address is used only for signing in and is never shown to other people. Members of your groups see your name and photo.

What you create in the app

• Groups: group name, invite code, member list and who created it.
• Questions: the question, its options, voting time and author.
• Option photos, if you add them. Before uploading, the app shrinks the photo and re-encodes it without EXIF metadata, including location.
• Votes: which option you picked, stored with your account ID (so everyone can vote only once).
• Reactions to results (emoji).
• Reports of content or users (reason, optional note, question/group ids) so we can moderate abuse. A report sent through the website form holds what you type in it (description, where you saw it, optionally an email for our reply); to limit spam we keep a report counter keyed to a hash of your IP address for about 2 hours — the IP address itself is not stored.
• Blocked user list on your account — so we can hide their questions for you and not notify you about them.
• Terms acceptance: the version of the Terms you accepted and when — so we know which rules apply to the content you create.

Technical data

• Notification token (Firebase Cloud Messaging) — to notify you about new questions, reminders and results.
• Usage statistics (Firebase Analytics): events such as signing in, creating a question, voting or joining a group, with an installation ID, device model, OS version and approximate country. They don't contain the text of questions or options, or what you voted for.
• Firebase Crashlytics: Optional Firebase Crashlytics reports and usage analytics help improve the app. Reports may contain device and installation identifiers and crash details. We do not add poll contents or account identifiers. You can disable this at any time.

On your phone

The app keeps local copies of option photos (so they survive deletion from the server) and settings such as your theme and last opened group. This data never leaves your phone and is removed when you uninstall the app.

The choosygoosy.fun website

The website uses no cookies and no analytics tools. Fonts are served from our own server. The hosting server (Firebase Hosting) keeps standard connection logs, including IP addresses, for security.

3. Why, and on what legal basis

• Running the app — account, groups, questions, votes, photos, reactions and notifications. Basis: providing the service you ask for (Art. 6(1)(b) GDPR). We send notifications only if you allow them in your system settings.
• Diagnostics are optional and off by default. Firebase Analytics and Crashlytics are enabled after you turn diagnostics on in settings. Basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time by turning diagnostics off, without affecting the lawfulness of earlier processing.
• Security — preventing abuse and server logs. Basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Who sees your data

• Members of your groups see your name and profile photo, the questions you ask, options with photos, and your reactions.
• Votes: until the timer ends, nobody sees anyone's vote — not even whoever asked. After the result, the app shows only how many votes each option got. Your vote is, however, stored with your account ID, and once the result is out group members have technical access to it, even though the app doesn't display it.
• Reports and reported content are seen only by the app's operator, for moderation. The reported person isn't told who reported them. Nobody but you sees your blocked list.
• Google (Google Ireland Ltd. and Google LLC) provides our Firebase services — sign-in, database, photo storage, notifications, statistics, crash reports and website hosting — and processes data on our behalf as a processor.

We don't sell data or share it with advertisers.

5. Where it is stored

The database and photos are stored on Firebase servers in the europe-central2 region (Warsaw). Some Google services — sign-in, notifications, statistics and crash reports — may also process data outside the European Economic Area, including in the USA. Google protects such transfers under the European Commission's adequacy decision (EU-US Data Privacy Framework) and standard contractual clauses.

6. How long we keep it

• Option photos — deleted from the server automatically a day after the result. They remain only as copies on participants' phones.
• Account, groups, questions, votes and reactions — while you use the app, or until you ask us to delete your account.
• Notification token — until you sign out on that phone or the token expires.
• Blocked list and terms acceptance — while you have an account (you can unblock someone at any time).
• Reports — until the moderation case is closed, then at most 12 months, unless the law requires longer (e.g. for illegal content).
• Statistics — up to 2 months at user level, aggregated after that.
• Crash reports — up to 90 days.

7. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on our legitimate interest . To use these rights, write to support@choosygoosy.fun. We will reply within a month.

You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your country.

8. Deleting your account

A short version of these steps is also at choosygoosy.fun/en/delete-account. Reports you sent yourself are kept until the moderation case is closed (see section 6) — without them abuse couldn't be handled.

You can delete your account yourself in the app: tap your avatar on the home screen and choose Delete account. We then delete, immediately and for good:

• your account and profile (name, photo, sign-in email address) and notification tokens;
• the questions you asked, together with their photos and the votes cast on them;
• your votes and reactions on other people's questions — finished votes keep only the anonymous count per option;
• groups where you were the only member. In other groups you're removed from the member list, and if the group was yours, the longest-standing member becomes its owner;
• data saved on that phone (photo copies, account settings), your blocked list and your terms acceptance.

If you no longer have access to the app, email support@choosygoosy.fun asking us to delete your account, and include your display name from the app (and, for a Google account, your email address). We will delete it the same way within 30 days. Statistics and crash reports that aren't tied to your account expire on their own after the periods in section 6.

You can leave a group and sign out in the app at any time. Note that after signing out of a guest account you can't get back into it.

9. Children

The app is meant for people aged 16 and over. If we learn that an account belongs to someone under 16, we will delete it together with their data.

10. Changes

If we change this policy, we'll publish the new version here with a new date. We'll also let you know in the app about significant changes.