1.1 Data Controller
- Developer name: Cristian Cantillana
- Application: +panoramas (
com.eventos.banana)
- Contact: ideality.can@gmail.com
1.2 Data We Collect
- Account data: email, nickname, date of birth, age
- Location data: GPS coordinates (latitude, longitude), geohash, region, district, country
- Biometric data: email and re-authentication token (not password) stored in encrypted storage (AES-256-GCM) only if the user enables biometric login. The token expires automatically after 30 days.
- Photos and images: profile photo, cover photo, gallery photos
- Identity documents: front photo of national ID card (only for +18 verification, reviewed by administrators)
- Messages: text content, voice messages, reactions, edit history
- Event data: titles, descriptions, locations, dates, participant lists
- Social data: friend list, friend requests, blocked users, saved events, event co-organizers
- Ratings: scores (1–5), comments, event attendance records, rating credits, history of ratings received and given, revealed rating IDs
- Device data: FCM token (push notifications), advertising ID (AdMob), device model (Crashlytics)
- Purchases: purchase tokens validated against Google Play, subscription type, Gold/Premium status, Gold source (purchase, founder, tester)
1.3 How We Collect Data
- Account registration (email, nickname, date of birth)
- Device GPS (with explicit user permission)
- Voluntary upload of photos and documents
- In-app activity (events created, messages sent, ratings given)
- Third-party SDKs: Firebase Analytics, Crashlytics, AdMob
1.4 Purpose of Data Processing
- Provide and operate the social events platform
- Connect users with nearby events based on location
- Verify identity for +18 content
- Send push notifications about events and messages
- Display rewarded video ads (AdMob)
- Process in-app purchases and subscriptions
- Manage rating system (credits, anonymization, reveal)
- Manage Gold/Premium status and associated benefits
- Manage event co-organizers
- Improve the app through analytics and error reporting
- Moderate content and prevent abuse (reports, blocks, toxic content filtering)
- Comply with legal obligations
1.5 Legal Basis
- Performance of service contract (Art. 6.1.b GDPR)
- User consent (location, photos, notifications)
- Legitimate interest (service improvement, security, fraud prevention)
1.6 Data Sharing with Third Parties
- Firebase (Google LLC): Firestore, Storage, Auth, Functions, Messaging, Analytics, Crashlytics, App Check
- Google Maps Platform: Google Maps SDK, Places API
- Google Play Billing: Payment and subscription processing
- Google AdMob: Advertising
- Firebase Cloud Functions: Purchase validation, account deletion, rating management, email verification, user administration
✅ Our commitment
We do NOT sell personal data to third parties. We do NOT share data for marketing purposes without explicit consent.
1.7 International Transfers
Data is stored on Google Cloud (Firebase) servers located in the United States and Europe. Google complies with the EU-U.S. Data Privacy Framework.
1.8 Data Retention
- Account: while the user keeps the account active
- Events: until the creator deletes them or the event expires
- Messages: until the user deletes the conversation
- Identity documents: until verification is complete (+90 days as backup)
- Rating credits: deleted when account is deleted
- Gold/Premium status: deleted when account is deleted
- Analytics: 14 months (Firebase Analytics)
- Crash reports: 90 days (Crashlytics)
- Session: while the user is authenticated
1.9 User Rights (GDPR / Chilean Law)
- Access: request a copy of all personal data
- Rectification: correct inaccurate data
- Erasure: request deletion of account and associated data
- Portability: receive data in a structured format
- Objection: object to processing for marketing purposes
- Restriction: restrict processing in certain cases
- Withdraw consent: at any time, without affecting the lawfulness of prior processing
📩 How to exercise your rights
Contact us at: ideality.can@gmail.com
1.10 Data Security
- Firebase Security Rules (Firestore + Storage) restrict data access
- Firebase App Check (Play Integrity) verifies legitimate devices
- Server-side rate limiting to prevent abuse
- EncryptedSharedPreferences (AES-256-GCM) for biometric tokens
- Server-side validation of in-app purchases
- Password strength validation
- Toxic content filtering in usernames and events
- Identity documents accessible only by the user and administrators
- Exact locations of private events obfuscated (±3.3 km)
- Admin Custom Claims for privileged function access control
- Protected fields in Firestore that only Cloud Functions can modify
- Pre-commit hook preventing sensitive files (keystores, secrets) from being committed
- Complete account deletion with all Firestore and Storage data
1.11 Minors
⚠️ Age restriction
The app is designed exclusively for users aged 18 and over. We do not intentionally collect data from minors. +18 content requires identity verification with an official document. If we discover that a minor has provided us with data, we will delete it immediately.
1.12 Changes to the Privacy Policy
We will notify users of material changes through the app or by email. The updated version will always be published at this URL.
1.13 Account and Data Deletion
Users can request the complete deletion of their account and personal data through the following methods:
Option 1 — From the app:
- Open +panoramas
- Go to Profile → Settings
- Press "Delete account"
- Confirm deletion
- All your data (profile, events, messages, photos, ratings) will be permanently deleted from our servers
- Your authentication account will be deleted
Option 2 — Email request:
Send an email to ideality.can@gmail.com with subject "ACCOUNT DELETION REQUEST" including:
- Your +panoramas nickname
- The email address associated with your account
- An explicit request to delete all your data
Data that will be deleted:
- Authentication account (login)
- User profile (nickname, photo, bio, interests)
- Created events
- Messages and conversations
- Uploaded photos and files
- Ratings and reviews
- Stored location data
Data that may be retained (due to legal obligations):
- In-app purchase transaction records (tax obligations)
- User reports (for moderation and safety)
- Anonymized analytics data (non-identifiable)
Deletion timeline:
Requests will be processed within a maximum of 30 business days. For email requests, we will confirm once the deletion is complete.
If you have difficulties with the process, contact: ideality.can@gmail.com
2.1 Acceptance
By using +panoramas, you accept these terms in their entirety. If you disagree with any provision, please stop using the app.
2.2 Eligibility
- You must be at least 18 years old
- You must provide accurate information during registration
- Only one account per person is permitted
2.3 Account Registration and Security
- You are responsible for maintaining the confidentiality of your password
- You must immediately notify us of any unauthorized use of your account
- You may not share your account with third parties
2.4 Prohibited Content
You may NOT post, create, or share:
- Illegal, violent, terrorist, or crime-promoting content
- Sexually explicit content outside the +18 category
- Hate speech, discrimination, or harassment
- False or misleading information
- Spam, unsolicited advertising, or promotion of illegal products
- Content that infringes copyright or intellectual property rights
- Content impersonating another person or entity
2.5 Prohibited Conduct
You may NOT:
- Harass, intimidate, or threaten other users
- Use the app for illegal activities
- Manipulate locations or falsify event attendance
- Create false or misleading events
- Attempt to breach app security or gain unauthorized access
- Use bots, scrapers, or other automated means
- Create multiple accounts to evade restrictions
- Manipulate the rating system (fake ratings, self-rating)
- Abuse the co-organizer system to evade event restrictions
2.6 User Responsibility
⚖️ Important clause
The user is solely responsible for all content they publish (events, messages, photos, comments), compliance with all applicable laws in their jurisdiction, the consequences of their interactions with other users, the accuracy of information provided during registration and verification, and the use they make of other users' information obtained through the app.
2.7 Indemnification
⚠️ Critical clause
You agree to indemnify, defend, and hold harmless the developer, its affiliates, directors, employees, and agents from and against any claims, demands, losses, liabilities, damages, costs, or expenses (including reasonable legal fees) arising from: (a) content you post or share in the app; (b) your use of the app; (c) your violation of these terms; (d) your violation of third-party rights; or (e) any damage you cause to other users.
2.8 Limitation of Liability
⚠️ Critical clause – Please read carefully
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW: The app is provided "AS IS" and "AS AVAILABLE", without warranties of any kind. The developer will NOT be liable for indirect, incidental, special, consequential, or punitive damages, nor for damages arising from: user interactions (physical or virtual); event cancellation or modification; data loss; damage caused by other users; misuse of location information; technical failures or service interruptions; or acts of third parties, including other users. The developer's total liability is limited to the amount paid by the user in the last 12 months or USD $100, whichever is less.
2.9 Identity Verification
- +18 verification is performed through manual review of official documents
- The developer does not guarantee absolute accuracy of the verification process
- Identity documents are stored securely and accessible only by administrators
- The developer reserves the right to reject verification requests
2.10 Suspension and Termination
The developer reserves the right, without prior notice or liability, to:
- Suspend or terminate accounts that violate these terms
- Remove inappropriate or illegal content
- Restrict access to the app for security reasons
- Terminate accounts inactive for more than 12 months
- Refuse registration of new accounts
2.11 Moderation
- User and content reports are reviewed by administrators
- Moderation decisions are final
- You agree not to create a substitute account if your account has been suspended
2.12 Intellectual Property
- The code, design, and brand of +panoramas are the property of the developer
- You retain ownership of your content but grant a non-exclusive license to operate the app
- You may not use the +panoramas name or logo without written authorization
2.13 In-App Purchases and Subscriptions
- Purchases are processed through Google Play Billing
- Refunds are subject to Google Play's refund policy
- Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period
- The developer does not store payment information (card details, etc.)
2.14 Governing Law and Jurisdiction
- These terms are governed by the laws of Chile
- Any dispute shall be resolved in the courts of Buín, Región Metropolitana
- If any provision is found invalid, the remaining provisions remain in full force
2.15 Contact
For questions about this policy or to exercise your rights:
- Email: ideality.can@gmail.com
- App: +panoramas → Profile → Settings