Last updated: July 29, 2025
1. General Information
This Privacy Policy describes how Evermalaka (“we”, “our” or “the company”) collects, uses, stores and protects your personal information when you use:
- Our website
- Our mobile applications (availables on App Store)
- Any other related services we offer
Infrastructure: Our services are hosted on secure servers by Hetzner (Germany), which complies with European data protection standards.
By using our services, you agree to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide Directly
On the website and application:
- Registration information (name, email, phone)
- Profile information
- Content you share or post
- Communications with us
- Payment information (processed by secure third parties)
2.2 Automatically Collected Information
On the website:
- IP addresses
- Browser and device information
- Pages visited and browsing time
- Cookies and similar technologies
- Web analytics data
On the mobile application:
- Unique device identifiers
- Operating system information
- App usage data
- Location information (only with your permission)
- Performance and crash data
- Identifier for Advertisers (IDFA) – only with your consent
2.3 Third-Party Information
- Social media data (when you connect your accounts)
- Payment service provider information
- Third-party analytics data
3. How We Use Your Information
We use your information to:
3.1 Service Operation
- Provide and maintain our services
- Process transactions
- Communicate with you
- Provide technical support
3.2 Improvement and Personalization
- Personalize your experience
- Analyze usage of our services
- Develop new features
- Conduct research and analysis
3.3 Marketing and Communications
- Send product updates
- Promotional offers (with your consent)
- Newsletters
- Targeted marketing communications
3.4 Security and Legal Compliance
- Protect against fraud and abuse
- Comply with legal obligations
- Enforce our terms of service
- Protect rights and security
4. Legal Basis for Processing (GDPR)
We process your personal information based on:
- Consent: For marketing, non-essential cookies, location
- Contract performance: To provide our services
- Legitimate interest: For analytics, security, service improvements
- Legal obligation: To comply with legal requirements
5. Cookie Policy
5.1 What Are Cookies
Cookies are small text files stored on your device when you visit our website.
5.2 Types of Cookies We Use
Strictly Necessary Cookies:
- Essential for website functionality
- Cannot be disabled
- Include session and security cookies
Performance Cookies:
- Collect information about how you use the site
- Help us improve functionality
- Google Analytics: _ga, ga*, _gid (anonymized)
- Performance metrics and usage analysis
Functionality Cookies:
- Remember your preferences
- Improve your user experience
- Language, region settings
Marketing Cookies:
- Used for personalized advertising
- Track your activity across different sites
- Only with your explicit consent
5.3 Cookie Management
You can manage your cookie preferences:
- Through our cookie banner
- In your browser settings
- By adjusting privacy settings in our services
6. Sharing Information with Third Parties
6.1 Service Providers
- Hosting: Hetzner Online GmbH (Germany)
- Web Analytics: Google Analytics (with enhanced privacy configuration)
- Payment processing
- Technical support
- Email and communication services
6.2 Business Partners
- Only with your explicit consent
- For joint offers and promotions
6.3 Legal Requirements
- Compliance with court orders
- Protection of legal rights
- Fraud prevention
- Public safety
6.4 Business Transfers
- In case of merger, acquisition or asset sale
7. International Transfers and Hosting
Hosting Infrastructure: Our services are hosted on servers by Hetzner Online GmbH, located in Germany. Hetzner complies with:
- European data protection regulations (GDPR)
- ISO 27001 security standards
- European data center certifications
- GDPR-compliant data processing agreements
Other Transfers: Your data may be transferred and processed in countries outside your residence for specific services. We ensure adequate protections through:
- Standard contractual clauses
- EU adequacy decisions
- Appropriate transfer frameworks
- Technical and organizational security measures
8. Data Security
We implement technical and organizational security measures:
- Data encryption in transit and at rest
- Strict access controls
- Regular security monitoring
- Risk audits and assessments
- Staff privacy training
9. Data Retention
We retain your personal information for:
- Account data: While you maintain an active account
- Transaction data: According to legal and tax requirements
- Marketing data: Until you withdraw consent
- Cookie data: Depending on cookie type (session to 2 years)
- System logs: Generally 12-24 months
10. Your Privacy Rights
10.1 Rights under GDPR (EU)
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data
- Restriction: Limit processing of your data
- Portability: Receive your data in portable format
- Objection: Object to processing
- Withdraw consent: At any time
10.2 Rights under CCPA (California)
- Right to know what information we collect
- Right to delete personal information
- Right to opt-out of selling information
- Right to non-discrimination
10.3 How to Exercise Your Rights
- Email: info [at] evermalaka [dot] com
- Within the app: Settings > Privacy
- Through privacy options available in our services
11. Minors’ Privacy
Our services are not directed to children under 13 years old (16 in the EU). We do not knowingly collect personal information from minors without verifiable parental consent.
12. Mobile Application Specific Information
12.1 App Permissions
- Location: For location-based features (optional)
- Camera: To upload photos (optional)
- Notifications: For alerts and updates (optional)
- Contacts: For social features (optional)
12.2 App Data
- We do not sell personal data to third parties
- We do not use data for behavioral advertising without consent
- We comply with Apple App Store privacy guidelines
12.3 Cross-App Tracking (iOS 14.5+)
- We request permission before tracking across apps
- You can control this in Settings > Privacy > Tracking
13. Website Specific Information
13.1 Google Analytics
We use Google Analytics 4 (GA4) to analyze the usage of our website and mobile application.
Information Google Analytics collects:
- Pages visited and time spent
- Approximate geographic location (country/city)
- Device type and browser
- Traffic source (how you reached our site)
- Interaction events (clicks, downloads, forms)
Privacy configuration implemented:
- IP address anonymization enabled
- Demographics and interests disabled by default
- Data retention period set to 14 months
- Data sharing with Google disabled
Your options:
- You can opt-out by installing the Google Analytics Opt-out Browser Add-on
- Manage preferences through our cookie banner
- Data is processed according to Google’s Privacy Policy
Legal basis: Consent (for analytics cookies) and legitimate interest (for essential anonymized analytics).
13.2 Other Analytics Tools
- Website performance metrics
- User behavior analysis (anonymized data)
13.3 Email Communications
- Newsletter and update systems
- Service notifications
- Promotional communications (with consent)
14. Changes to This Policy
We may update this policy periodically. Significant changes will be notified through:
- Prominent notice on our website
- In-app notification
- Email to registered users
- 30 days advance notice for material changes
15. Contact Information
Data Controller: Evermalaka
Privacy Inquiries and General Contact: Email: info [at] evermalaka [dot] com
For any inquiries related to this privacy policy or the processing of your personal data, you can contact us through the email address indicated above.
This privacy policy is written in English and is the official version.
Version: 1.0 Effective Date: July 29, 2025