Effective date:<\/strong>\u00a023 October 2026<\/p>\n\n\n\n Controller \/ Operator:<\/strong> V\u00fdnosomat a.s., I\u010cO: 24480258, with registered office at Sv\u011btova 523\/1, Libe\u0148, 180 00 Praha, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, section B, file 30462 (\u201cVynosomat\u201d, \u201cwe\u201d, \u201cus\u201d or \u201cour\u201d).<\/p>\n\n\n\n Contact:<\/strong> dev@vynosomat.cz<\/a><\/p>\n\n\n\n Vynosomat provides the Vynosomat mobile application for investors, the V\u00fdnosomat Business mobile application for companies that raise funds through Vynosomat, and related online services as a commercial service. The Service is provided on an \u201cas is\u201d basis unless stated otherwise in the applicable Terms and Conditions.<\/p>\n\n\n\n This Privacy Policy explains how we collect, use and disclose personal information when a user chooses to use the Service. Unless a section says otherwise, it describes the Vynosomat investor app; what differs in the Business app is described in the section V\u00fdnosomat Business App.<\/p>\n\n\n\n By using the Service, you agree that we may collect and use information as described in this Privacy Policy. We use personal information to operate, maintain, secure and improve the Service. We do not sell personal information and we do not share it with third parties except as described in this Privacy Policy or where required by law.<\/p>\n\n\n\n Capitalised terms used in this Privacy Policy have the same meaning as in the Vynosomat Terms and Conditions, unless they are defined differently here.<\/p>\n\n\n\n To provide a better and safer experience, we may ask you to provide information that can identify you directly or indirectly. Depending on how you use the Service, we process:<\/p>\n\n\n\n The information we request will be retained by us and used only for the purposes described in this Privacy Policy, the Terms and Conditions, and other notices presented to you in the Service.<\/p>\n\n\n\n The app may use third-party services that collect information used to identify, analyse or protect users and devices. The third-party services currently used by the app are:<\/p>\n\n\n\n Facebook \/ Meta services are not used. The Service does not use Facebook, Meta SDKs, Facebook Login, Facebook Analytics or Facebook advertising tracking unless this Privacy Policy is updated to state otherwise.<\/p>\n\n\n\n The V\u00fdnosomat Business app is used by people who manage a company\u2019s workspace on Vynosomat: they countersign investors\u2019 contracts, keep track of the installments the company owes its investors and export payment orders, and publish news posts and videos for investors. Companies register and business users verify their identity in the V\u00fdnosomat Business web application, not in the mobile app.<\/p>\n\n\n\n In the Business app we process:<\/p>\n\n\n\n The camera, microphone and photo library are used only when you create content. The app shows your photo library so that you can choose what to publish; only the photos and videos you publish are uploaded.<\/p>\n\n\n\n The Business app does not use PostHog or any other analytics, crash-reporting or advertising service, and it does not send push notifications. The sections Analytics and Crash Reporting, Identity Verification and Push Notifications do not apply to it.<\/p>\n\n\n\n We use PostHog\u2019s EU service for product analytics, session replay and error reporting in release versions of the mobile app. Recording starts after you sign in and stops when you sign out. Events are associated with your account identifier and may include the app screens you visit, app lifecycle events, your interactions with investment features, device and app information, and error or crash reports. Session replay is configured to mask text inputs, text and images; touch positions and console logs are not recorded. PostHog is configured to discard IP addresses. We use this information to understand how the app is used and to improve its reliability and functionality. We do not use it for advertising and we do not combine it with data from other companies for advertising purposes.<\/p>\n\n\n\n Before you can invest, we verify your identity with Veriff. Verification opens in a browser window operated by Veriff inside the app, where you photograph your identity document and take a photo or video of your face. Veriff processes this data, including biometric data used to compare your face with the photo in your document, to verify your identity on our behalf, and reports the result to us. For details, see Veriff\u2019s privacy notice at www.veriff.com\/privacy-notice<\/a>.<\/p>\n\n\n\n You can lock the app with a PIN and, where your device supports it, with Face ID or Touch ID. This check runs entirely on your device: we never receive your biometric data or your PIN. In the V\u00fdnosomat Business app the same check can also confirm that you want to sign contracts.<\/p>\n\n\n\n If you allow notifications, we store your device\u2019s push-notification token to send you updates about your investments, payouts and projects. You can turn notifications off at any time in the app\u2019s notification settings or in your device settings.<\/p>\n\n\n\n We may use your name, e-mail address and phone number to send you news about Vynosomat and new investment opportunities. You can object to marketing communications at any time by contacting us at dev@vynosomat.cz<\/a>.<\/p>\n\n\n\n Whenever you use the Service, and especially when an error occurs in the app, we or our service providers may collect data and information from your device. This information is referred to as Log Data.<\/p>\n\n\n\n Log Data may include information such as your device Internet Protocol address, device name, operating system version, app configuration, the time and date of your use of the Service, diagnostic data, crash reports, performance data and other technical statistics.<\/p>\n\n\n\n We use Log Data to maintain the Service, investigate errors, improve reliability, detect misuse and protect users and our systems.<\/p>\n\n\n\n Cookies are small files that are commonly used as anonymous unique identifiers. They may be sent to your browser from websites you visit and stored on your device.<\/p>\n\n\n\n The Vynosomat app does not explicitly place cookies for its core mobile-app functionality. However, third-party code, libraries or related web pages used by the Service may use cookies or similar technologies to collect information and improve their services.<\/p>\n\n\n\n You may be able to accept, refuse or delete cookies through your browser or device settings. If you refuse cookies, some parts of the Service may not function properly.<\/p>\n\n\n\n We may engage third-party companies and individuals for the following purposes:<\/p>\n\n\n\n These service providers may have access to personal information only to perform the tasks assigned to them on our behalf. They are required not to disclose or use the information for any other purpose, except where required by law.<\/p>\n\n\n\n Where required, we use appropriate contractual and technical measures with processors and service providers to protect personal information.<\/p>\n\n\n\n We value your trust in providing personal information to us and use commercially reasonable technical and organisational measures to protect it.<\/p>\n\n\n\n No method of transmission over the internet and no method of electronic storage is completely secure or reliable. We therefore cannot guarantee absolute security, but we work to protect the Service against unauthorised access, alteration, disclosure or destruction of information.<\/p>\n\n\n\n The Service may contain links to third-party websites, apps or services. If you click a third-party link, you will be directed to that third party.<\/p>\n\n\n\n External sites and services are not operated by Vynosomat. We recommend that you review the privacy policies of those third parties. We have no control over, and assume no responsibility for, third-party content, privacy policies or practices.<\/p>\n\n\n\n You can close your account directly in the app: open Profile<\/strong>, tap Delete account<\/strong> at the bottom of the page, review the investments listed, tap Continue<\/strong> and confirm with your password. Your account is closed immediately and you are signed out. This cannot be undone.<\/p>\n\n\n\n You can also request deletion by e-mail, even without the app, at dev@vynosomat.cz<\/a>, preferably from the e-mail address you use to sign in. If the request comes from another address, we first verify that the account belongs to you. We handle requests within 5 business days.<\/p>\n\n\n\n When your account is closed, we delete the data of your account, including profile and contact details, investment and bank-account details, documents and signatures. We keep only the e-mail address of the closed account, so that we know the account existed and was closed at your request; for this reason it cannot be used to register again. We keep this e-mail address for as long as we operate the Service.<\/p>\n\n\n\n Closing your account does not end contracts you have concluded with project operators. Payouts from running investments continue to be paid to your bank account, but you will no longer see them in Vynosomat.<\/p>\n\n\n\n V\u00fdnosomat Business accounts<\/strong> are closed on request. In the Business app, open Profile<\/strong> and tap Delete account<\/strong>, which prepares an e-mail to dev@vynosomat.cz<\/a>, or write to that address directly from the e-mail address you sign in with. If the request comes from another address, we first verify that the account belongs to you. Closing a business account does not end the company\u2019s contracts with investors or its obligations under them. We delete the personal data of the account\u2019s user; data that we must keep by law or that forms part of the company\u2019s contracts with investors, such as signed contracts and installment records, is kept for as long as the law or those contracts require.<\/p>\n\n\n\n Under the General Data Protection Regulation you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise these rights, contact us at dev@vynosomat.cz<\/a>. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (\u00da\u0159ad pro ochranu osobn\u00edch \u00fadaj\u016f, uoou.gov.cz<\/a>).<\/p>\n\n\n\n The Service is not directed to children. Investment, financing or account features may be available only to users who meet the minimum age and legal-capacity requirements stated in the Terms and Conditions.<\/p>\n\n\n\n For users in the Czech Republic, a child may grant consent to personal data processing in relation to information society services addressed directly to the child from fifteen years of age. Where a user is below the applicable age or lacks the legal capacity required to use the Service, processing must be authorised by a parent or legal guardian where required by law.<\/p>\n\n\n\n We do not knowingly collect personal information from children or from persons who are not allowed to use the Service. If we discover that such information has been provided to us, we will delete it from our systems where legally required. If you are a parent or guardian and you believe that a child has provided personal information to us, please contact us.<\/p>\n\n\n\n We may update this Privacy Policy from time to time. You should review this page periodically for changes.<\/p>\n\n\n\n We will notify users of changes by posting the updated Privacy Policy in the Service, on our website, or by another appropriate method. Changes are effective when posted unless a later effective date is stated.<\/p>\n\n\n\n If you have questions, requests or suggestions regarding this Privacy Policy, contact us at:<\/p>\n\n\n\nInformation Collection and Use<\/h2>\n\n\n\n
\n
\n
V\u00fdnosomat Business App<\/h2>\n\n\n\n
\n
Analytics and Crash Reporting<\/h2>\n\n\n\n
Identity Verification<\/h2>\n\n\n\n
Face ID, Touch ID and App PIN<\/h2>\n\n\n\n
Push Notifications<\/h2>\n\n\n\n
Marketing Communications<\/h2>\n\n\n\n
Log Data<\/h2>\n\n\n\n
Cookies and Similar Technologies<\/h2>\n\n\n\n
Service Providers<\/h2>\n\n\n\n
\n
Security<\/h2>\n\n\n\n
Links to Other Sites<\/h2>\n\n\n\n
Account Deletion<\/h2>\n\n\n\n
Your Rights<\/h2>\n\n\n\n
Children and Minors<\/h2>\n\n\n\n
Changes to This Privacy Policy<\/h2>\n\n\n\n
Contact Us<\/h2>\n\n\n\n