Privacy Policy

This Privacy Policy describes the principles of processing personal data of users of the Talenzio mobile application, aimed at children and youth aged 6 to 17 years and adults. The protection of our users' privacy – especially minors – is our highest priority.

1. Data Controller

The controller of personal data of Talenzio application users is: Talenzio sp. z o.o. based in Poznań, Poland (61 – 805) ul. Św. Marcin 32/28 registered in the National Court Register under number 0000507488 NIP: 618 – 214 – 63 – 03 Email: contact@talenzio.pl.

2. Scope of Collected Data

The following personal data is collected during account registration:

• First name
• Last name
• Age
• Email address
• Place of residence (city/country)

Additionally, while using the application we may also collect:

• Sensitive data in the scope of content shared by the user (e.g. photos, drawings, audio/video recordings)
• Information about user activity (comments, posts, interactions)
• Technical data (device type, IP address, advertising identifiers, operating system)

3. Basis and Purpose of Data Processing

We process personal data solely for the purposes of:

• Creating and managing user accounts
• Adapting content and functionality of the application to the user's age
• Enabling interactions between users (comments, posts, community)
• Ensuring security and content moderation
• Fulfilling the obligation to obtain consent from a legal guardian for children under 13 years of age
• Analytical and statistical activities
• Improving the application's operation and personalizing the user experience

4. Legal Guardian Consent

In accordance with applicable law:

• Children under 13 years of age must obtain consent from a legal guardian to create an account and process personal data
• This consent is verified by providing the guardian's email address and their confirmation
• Accounts of children without confirmed consent may be temporarily suspended or deleted

5. Use of Third-Party Services

The Talenzio application uses third-party service providers who may process personal data on our behalf. These include:

• Firebase (Google) – user authentication, database, analytics
• Google Analytics – application usage statistics
• External libraries for interface and communication
• Content hosting (e.g. photos, videos, comments)

All services comply with GDPR and operate on the basis of data processing agreements.

6. Data Storage

Personal data is stored:

• For the entire period of using the application
• Until the account is deleted or consent is withdrawn
• For the period necessary to fulfil legal obligations or defend against claims (max. 6 years)

7. User and Legal Guardian Rights

Users and their legal guardians have the right to:

• Access to data
• Rectification of data
• Erasure of data ("right to be forgotten")
• Restriction of processing
• Data portability
• Object to processing
• Withdraw consent at any time

8. Security Measures

We have implemented technical and organisational measures ensuring an appropriate level of data protection, including:

• Data encryption during transmission and storage
• Access control to data
• Regular security tests
• Procedures for reporting data protection breaches

10. Complaint to Supervisory Authority

If you believe that your data is being processed in violation of the law, you have the right to lodge a complaint with the supervisory authority in your place of residence. In Poland, this is: President of the Personal Data Protection Office (PUODO) ul. Stawki 2, 00-193 Warsaw https://uodo.gov.pl/