Vynosomat
Effective date: 23 October 2026
Controller / Operator: Výnosomat a.s., IČO: 24480258, with registered office at Světova 523/1, Libeň, 180 00 Praha, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, section B, file 30462 (“Vynosomat”, “we”, “us” or “our”).
Contact: dev@vynosomat.cz
Vynosomat provides the Vynosomat mobile application for investors, the Výnosomat Business mobile application for companies that raise funds through Vynosomat, and related online services as a commercial service. The Service is provided on an “as is” basis unless stated otherwise in the applicable Terms and Conditions.
This Privacy Policy explains how we collect, use and disclose personal information when a user chooses to use the Service. Unless a section says otherwise, it describes the Vynosomat investor app; what differs in the Business app is described in the section Výnosomat Business App.
By using the Service, you agree that we may collect and use information as described in this Privacy Policy. We use personal information to operate, maintain, secure and improve the Service. We do not sell personal information and we do not share it with third parties except as described in this Privacy Policy or where required by law.
Capitalised terms used in this Privacy Policy have the same meaning as in the Vynosomat Terms and Conditions, unless they are defined differently here.
Information Collection and Use
To provide a better and safer experience, we may ask you to provide information that can identify you directly or indirectly. Depending on how you use the Service, we process:
- account and contact details: name, e-mail address, phone number, postal address and date of birth;
- details of companies on whose behalf you invest;
- financial information: bank account numbers for payouts, and your reservations, investments, payments, payout schedules and transactions;
- contract documents and the signature you draw when you sign them in the app;
- the result of your identity verification (see Identity Verification);
- identifiers: your account ID, the push-notification token of your device, and device and app information;
- usage and diagnostic data (see Analytics and Crash Reporting);
- the reason you give, if any, when you close your account.
The information we request will be retained by us and used only for the purposes described in this Privacy Policy, the Terms and Conditions, and other notices presented to you in the Service.
The app may use third-party services that collect information used to identify, analyse or protect users and devices. The third-party services currently used by the app are:
- PostHog (EU cloud) – product analytics, session replay and error and crash reporting;
- Veriff – identity verification;
- Expo push notification service, Apple Push Notification service and Firebase Cloud Messaging – delivery of push notifications;
- Google Play Services (Android only) – required to receive push notifications.
Facebook / Meta services are not used. The Service does not use Facebook, Meta SDKs, Facebook Login, Facebook Analytics or Facebook advertising tracking unless this Privacy Policy is updated to state otherwise.
Výnosomat Business App
The Výnosomat Business app is used by people who manage a company’s workspace on Vynosomat: they countersign investors’ contracts, keep track of the installments the company owes its investors and export payment orders, and publish news posts and videos for investors. Companies register and business users verify their identity in the Výnosomat Business web application, not in the mobile app.
In the Business app we process:
- the user’s account and contact details: name, e-mail address and phone number;
- the workspace and the companies the user acts for, including their signing persons;
- the signature the user draws to countersign contracts, and a saved signature if the user chooses to save one;
- photos, videos and their sound that the user records or picks and publishes, and the text of posts. Published content is shown to investors in the Vynosomat app;
- data of the company’s investors that the company needs to administer its contracts and installments, such as investors’ names, contract details, installment amounts and bank account numbers for payment orders. Payment orders, statements and documents you export or share leave the app for the destination you choose.
The camera, microphone and photo library are used only when you create content. The app shows your photo library so that you can choose what to publish; only the photos and videos you publish are uploaded.
The Business app does not use PostHog or any other analytics, crash-reporting or advertising service, and it does not send push notifications. The sections Analytics and Crash Reporting, Identity Verification and Push Notifications do not apply to it.
Analytics and Crash Reporting
We use PostHog’s EU service for product analytics, session replay and error reporting in release versions of the mobile app. Recording starts after you sign in and stops when you sign out. Events are associated with your account identifier and may include the app screens you visit, app lifecycle events, your interactions with investment features, device and app information, and error or crash reports. Session replay is configured to mask text inputs, text and images; touch positions and console logs are not recorded. PostHog is configured to discard IP addresses. We use this information to understand how the app is used and to improve its reliability and functionality. We do not use it for advertising and we do not combine it with data from other companies for advertising purposes.
Identity Verification
Before you can invest, we verify your identity with Veriff. Verification opens in a browser window operated by Veriff inside the app, where you photograph your identity document and take a photo or video of your face. Veriff processes this data, including biometric data used to compare your face with the photo in your document, to verify your identity on our behalf, and reports the result to us. For details, see Veriff’s privacy notice at www.veriff.com/privacy-notice.
Face ID, Touch ID and App PIN
You can lock the app with a PIN and, where your device supports it, with Face ID or Touch ID. This check runs entirely on your device: we never receive your biometric data or your PIN. In the Výnosomat Business app the same check can also confirm that you want to sign contracts.
Push Notifications
If you allow notifications, we store your device’s push-notification token to send you updates about your investments, payouts and projects. You can turn notifications off at any time in the app’s notification settings or in your device settings.
Marketing Communications
We may use your name, e-mail address and phone number to send you news about Vynosomat and new investment opportunities. You can object to marketing communications at any time by contacting us at dev@vynosomat.cz.
Log Data
Whenever you use the Service, and especially when an error occurs in the app, we or our service providers may collect data and information from your device. This information is referred to as Log Data.
Log Data may include information such as your device Internet Protocol address, device name, operating system version, app configuration, the time and date of your use of the Service, diagnostic data, crash reports, performance data and other technical statistics.
We use Log Data to maintain the Service, investigate errors, improve reliability, detect misuse and protect users and our systems.
Cookies and Similar Technologies
Cookies are small files that are commonly used as anonymous unique identifiers. They may be sent to your browser from websites you visit and stored on your device.
The Vynosomat app does not explicitly place cookies for its core mobile-app functionality. However, third-party code, libraries or related web pages used by the Service may use cookies or similar technologies to collect information and improve their services.
You may be able to accept, refuse or delete cookies through your browser or device settings. If you refuse cookies, some parts of the Service may not function properly.
Service Providers
We may engage third-party companies and individuals for the following purposes:
- to facilitate the Service;
- to provide the Service on our behalf;
- to perform Service-related services;
- to analyse how the Service is used;
- to detect, prevent and resolve technical or security issues.
These service providers may have access to personal information only to perform the tasks assigned to them on our behalf. They are required not to disclose or use the information for any other purpose, except where required by law.
Where required, we use appropriate contractual and technical measures with processors and service providers to protect personal information.
Security
We value your trust in providing personal information to us and use commercially reasonable technical and organisational measures to protect it.
No method of transmission over the internet and no method of electronic storage is completely secure or reliable. We therefore cannot guarantee absolute security, but we work to protect the Service against unauthorised access, alteration, disclosure or destruction of information.
Links to Other Sites
The Service may contain links to third-party websites, apps or services. If you click a third-party link, you will be directed to that third party.
External sites and services are not operated by Vynosomat. We recommend that you review the privacy policies of those third parties. We have no control over, and assume no responsibility for, third-party content, privacy policies or practices.
Account Deletion
You can close your account directly in the app: open Profile, tap Delete account at the bottom of the page, review the investments listed, tap Continue and confirm with your password. Your account is closed immediately and you are signed out. This cannot be undone.
You can also request deletion by e-mail, even without the app, at dev@vynosomat.cz, preferably from the e-mail address you use to sign in. If the request comes from another address, we first verify that the account belongs to you. We handle requests within 5 business days.
When your account is closed, we delete the data of your account, including profile and contact details, investment and bank-account details, documents and signatures. We keep only the e-mail address of the closed account, so that we know the account existed and was closed at your request; for this reason it cannot be used to register again. We keep this e-mail address for as long as we operate the Service.
Closing your account does not end contracts you have concluded with project operators. Payouts from running investments continue to be paid to your bank account, but you will no longer see them in Vynosomat.
Výnosomat Business accounts are closed on request. In the Business app, open Profile and tap Delete account, which prepares an e-mail to dev@vynosomat.cz, or write to that address directly from the e-mail address you sign in with. If the request comes from another address, we first verify that the account belongs to you. Closing a business account does not end the company’s contracts with investors or its obligations under them. We delete the personal data of the account’s user; data that we must keep by law or that forms part of the company’s contracts with investors, such as signed contracts and installment records, is kept for as long as the law or those contracts require.
Your Rights
Under the General Data Protection Regulation you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise these rights, contact us at dev@vynosomat.cz. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).
Children and Minors
The Service is not directed to children. Investment, financing or account features may be available only to users who meet the minimum age and legal-capacity requirements stated in the Terms and Conditions.
For users in the Czech Republic, a child may grant consent to personal data processing in relation to information society services addressed directly to the child from fifteen years of age. Where a user is below the applicable age or lacks the legal capacity required to use the Service, processing must be authorised by a parent or legal guardian where required by law.
We do not knowingly collect personal information from children or from persons who are not allowed to use the Service. If we discover that such information has been provided to us, we will delete it from our systems where legally required. If you are a parent or guardian and you believe that a child has provided personal information to us, please contact us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. You should review this page periodically for changes.
We will notify users of changes by posting the updated Privacy Policy in the Service, on our website, or by another appropriate method. Changes are effective when posted unless a later effective date is stated.
Contact Us
If you have questions, requests or suggestions regarding this Privacy Policy, contact us at:
Výnosomat a.s.
Světova 523/1, Libeň, 180 00 Praha, Czech Republic
IČO: 24480258
Registered in the Commercial Register maintained by the Municipal Court in Prague, section B, file 30462
web: www.vynosomat.cz