Privacy policy
Last updated 27 September 2026.
Who the controller is
Digital Symbio spol. s r.o., Karpatské námestie 7770/10A, 831 06 Bratislava – Rača, Slovakia. Company ID (IČO) 51 224 968, Tax ID (DIČ) 2120641875, VAT ID SK2120641875, registered with the Bratislava III District Court, Section Sro, Insert No. 182899/B. Contact for anything about your data: info@digitalsymbio.com.
What we process, and why
Your name and e-mail let you have an account and let the app run: signing in, running your own things and packs, and mail you asked for yourself (registration confirmation, password reset, an "an account with this address already exists" notice). We briefly log your address (IP) at sign-in and when rate-limiting attempts, so the app can withstand abuse. None of it is used for anything else — no analytics, no advertising, no tracking.
On what legal basis
Performance of a contract — GDPR Art. 6(1)(b), not consent. Creating an account forms a contractual relationship (an app for packing your things), for which processing your name, e-mail and pack data is necessary. Security logs (IP addresses at rate-limiting) are processed on the basis of legitimate interest — protecting the app from abuse (Art. 6(1)(f)).
How long we keep it
- Your account and its content (things, packs, kits, events) — for as long as the account exists. You delete it yourself in Settings, any time.
- Sign-ins (sessions) — 90 days after they expire.
- Security and error logs (sign-in attempts, app errors) — 30 days.
- Pack activity history (who did what on a shared pack) — 1 year.
Who sees it
The app runs on hosting by WebSupport, s.r.o. (web hosting and the
database), our processor. If you sign in with Google, Google receives only what you
agreed to at sign-in — the scope openid email profile (name, e-mail,
identity verification); the app receives nothing more from Google. A regular database
backup is kept encrypted on the controller's own infrastructure, off the hosting
provider — this is not a separate recipient, as it is the same controller's data. We
do not share, sell or trade your data with anyone else.
Sherpa — suggestions from a photo
When you use Snap your things in My things, the app sends your photos and the list of catalogue things you can see to the goabot service. It is run by the same controller, Digital Symbio, on its own infrastructure. Through its own model gateway, goabot passes them to the language model Claude by Anthropic PBC (USA), which returns a suggestion of what to add. Anthropic receives only the photos and the list of things and processes them under its own terms; this is a transfer to a third country (USA).
The suggestion is made by artificial intelligence and can be wrong. Nothing is saved until you have checked and confirmed it yourself.
Photos are made smaller in your browser and location data (EXIF) is removed from them first. Neither goabot nor the model receives your name, e-mail or account number — only a random key that counts your daily limit. We do not store the photos or the suggestion — neither in goabot nor in the model gateway. Only a record without content remains (when, what it cost, whether it worked). The legal basis is performance of a contract (GDPR Art. 6(1)(b)) — you start the feature yourself and you do not have to use it. If you do not want people or anything personal in a photo, simply leave it out of the shot.
Cookies
The app uses no analytics or advertising cookies — nothing tracks you across the
web. The cookies the app sets (fgr_s — sign-in, fgr_csrf —
form protection, fgr_g — Google sign-in flow state) are strictly necessary
for the app to work, so we do not need your consent for them.
Your rights
You have the right to access your data, to have it corrected, to have it erased, to restrict its processing, to receive a copy of it, and to object (GDPR Art. 15–21). You delete your account yourself in Settings — it is immediate and irreversible, and hard- deletes your identity and your own things and packs (a thing on somebody else's shared pack stays, just without your name on it). For anything else, write to info@digitalsymbio.com. If you believe we have mishandled your data, you may complain to the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava 27, Slovakia, dataprotection.gov.sk).
What we do not have
The app has no Data Protection Officer — processing personal data is not its core activity at scale. We do not ask for bank details or payment information; the app has no price.