Privacy Policy
This Privacy Policy applies to the Bati app (the “Application”) for mobile devices, developed and operated by Rekovy ehf. (the “Service Provider”) as a Freemium service.
This Privacy Policy explains how personal data is collected, used, and shared when you use the Application.
Effective date: 2026-01-11
Data Controller
The data controller responsible for the processing of personal data under this Privacy Policy is:
Rekovy ehf.
Fálkahöfða 6, 270 Mosfellsbæ, Reykjavík
Email: [email protected]
Information We Collect
Information You Provide
We collect information you voluntarily provide, such as:
- User-generated content (e.g., journal entries, mood logs)
- Account-related information (e.g., email address or user identifier)
We use this data to provide, operate, and improve the Application, and to communicate important service-related notices.
Information Collected Automatically
We may collect:
- Device type and operating system
- App usage and interaction data
- Diagnostic and performance data
- IP address and approximate location (country/region level)
This data is used for analytics, security, troubleshooting, and service improvement.
Location Information
We do not collect precise real-time location data (GPS).
Approximate location may be inferred from IP address or device settings for analytics, security, and service improvement.
Legal Basis for Processing (GDPR)
For users in the EEA (including Iceland), we process personal data on these legal bases:
- Contractual necessity - to provide the Application
- Consent - where required (e.g., analytics preferences)
- Legitimate interests - to maintain, secure, and improve the Application
- Legal obligations - where required by law
Third-Party Services
We use third-party services for subscriptions, analytics, authentication, hosting, and infrastructure. These providers process data under their own privacy policies.
Examples include:
- RevenueCat – https://www.revenuecat.com/privacy
- PostHog – https://posthog.com/privacy
- Apple App Store services
- Google Play services
- Authentication providers (e.g., Apple Sign-In, Google Sign-In)
- Cloud infrastructure providers (e.g., AWS and related services)
Personal data shared with third parties is limited to what is reasonably necessary to provide the service.
Data Retention
User-provided data is retained for as long as you use the Application and for a reasonable period thereafter.
Automatically collected data is retained only as long as needed for its purposes, then deleted or anonymized.
Certain data may be retained longer where required to comply with legal obligations, resolve disputes, enforce agreements, or prevent fraud and abuse.
Your Rights (GDPR)
If you are in the EEA, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request deletion of your personal data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Requests: [email protected]
We may require identity verification.
Opt-Out and Preferences
Where the Application offers in-app controls (e.g., analytics preferences), you can opt out in settings.
You can also stop all data collection by uninstalling the Application.
Children's Privacy
The Application is not intended for users below the minimum age required in their country to consent to data processing. We do not knowingly collect such data. If we discover it, we will delete it promptly.
Parents/guardians can contact [email protected] for deletion requests.
Security
We implement reasonable technical and organizational measures to protect personal data. However, no system is completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date. Continued use of the Application constitutes acceptance of the updated policy.
Contact
For questions about this Privacy Policy, contact: