Privacy Policy

Last Updated: October 15, 2026

Version 3.0 — In compliance with EU Regulation 2016/679 (GDPR)

🛡️ Full Transparency

1. Data Controller

The Data Controller for the Huntly web platform and mobile application is:
Gaius Tsaamo (Sole Proprietorship Tsaamo Momo Josias Gaius)

  • Registered Office: Via Belvedere 2/53, 40048 San Benedetto Val di Sambro (BO), Italy
  • VAT ID: IT03827911201 — REA: BO-577697 (Bologna Business Register)
  • Privacy Email: [email protected]
  • Certified Email (PEC): [email protected]

2. Data Collected, Purposes & Legal Bases (Art. 13 GDPR)

Data voluntarily provided by users (Legal basis: Performance of a service / Contract — Art. 6.1.b GDPR):

  • Name / Nickname and Email Address (during optional registration or B2B API contractual inquiries)
  • Fuel price reports, service station details, and community validation contributions
  • Shopping lists created, store preferences, and promotional retail flyers saved
  • Fuel type preferences (petrol, diesel, LPG, CNG, EV) and favorite stations saved

Data automatically collected by the system:

  • Geographic location (GPS) to show nearby fuel stations, pump prices, and supermarkets (Legal basis: User's explicit consent — Art. 6.1.a GDPR)
  • Virtual XP points earned, rank achieved, and gamification progress (Legal basis: Performance of a service — Art. 6.1.b GDPR)
  • IP address, anonymous Device ID, and system technical logs for fraud prevention and API rate limiting (Legal basis: Legitimate interest — Art. 6.1.f GDPR)
  • Anonymous analytics and aggregated usage statistics on app navigation, flyer views, and price comparison
  • Device model and technical OS information to ensure app performance and compatibility

3. No Selling of Personal Data

  • Your personal data is never sold or transferred to advertising data brokers.
  • No intrusive tracking or hidden behavioral profiling.
  • Market intelligence reports generated for businesses are strictly anonymized, aggregated, and free of personal identifiers.

4. Third-Party Service Providers & International Data Transfers

Personal data is not sold to third parties, but used solely for service delivery or in aggregated and anonymous reports.

We use industry-leading technology partners compliant with GDPR standards:

  • Supabase Inc. (Secure database hosting in European data centers, compliant with SOC2 and GDPR)
  • Mapbox Inc. (Map tiles and geocoding provider with anonymized query endpoints)
  • OpenStreetMap / Nominatim (Open cartographic database for localization)

All data transfers to third-party providers use 256-bit TLS/HTTPS encryption.

Where processing involves data transfers to providers based in the United States (e.g. Supabase Inc., Mapbox Inc.), such transfers are safeguarded under the EU-U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCC) approved by the European Commission.

5. Data Security & Data Retention

  • In-transit (TLS/HTTPS) and at-rest encryption across all app communications and databases.
  • Database access protected by Row Level Security (RLS) and least-privilege access policies.
  • Encrypted automated backups and continuous intrusion monitoring across all systems.
  • Data Retention: Account data is retained until the user requests account deletion. Technical security, fraud prevention, and rate-limiting logs are retained for a maximum of 6 months and subsequently permanently deleted or anonymized.

6. Your Rights (GDPR)

In compliance with GDPR (EU Regulation 2016/679), you have full control over your personal data:

You can request access, correction, data portability, or restriction of your data by writing to [email protected].

You can request total deletion of your account directly from the app or from the page Delete Account.

7. Cookies and Tracking Technologies

  • Our website uses only essential technical cookies required for functionality and language preferences.
  • No third-party cookies for advertising, retargeting, or commercial tracking.
  • You can disable cookies at any time from your browser settings.

8. Changes to Privacy Policy

Any updates to this policy will be posted on this page with the revision date. For questions contact [email protected].

9. Contact and Right to Lodge a Complaint

For any questions regarding this Privacy Policy or to exercise your GDPR rights, you can contact the Data Controller at: [email protected] or via certified email (PEC): [email protected].

You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali — www.garanteprivacy.it, or your local EU national data protection authority) if you believe that the processing of your data violates applicable law.

🗑️ Delete Account✉️ Contact Us