Privacy Policy

Last updated: 20 June 2026

Who we are

Pivka (the "app") is developed and operated by Martin Kasperlik (pivka.app), the data controller for the purposes of GDPR. This policy explains what data we collect, why, and what you can do about it.

What we collect

• Account: email address, username, display name, password (stored hashed by our auth provider).
• Profile: optional avatar photo; optional body stats (weight, height, biological sex) used only to estimate your BAC — never shared with other users.
• Activity content: photos, captions, titles, voice notes, drink logs, timestamps, optional venue label, BAC estimates, morning check-in responses (how you felt the morning after).
• Social: friends list, tags, likes (Cheers), comments, blocks, reports.
• Device: push notification token, device identifier (used internally by crash reporting and update services), app version, OS version.
• Crash and error data: anonymised stack traces, breadcrumbs, and device context collected automatically when the app crashes or encounters an error.

How we use it

To operate the app: show your feed, run leaderboards, deliver notifications, calculate your BAC estimate, and let friends interact with your activities. We do not sell your data, and we do not use it for advertising. The legal basis for processing is performance of the contract between you and us (operating the app you signed up for) and, where applicable, our legitimate interest in keeping the service secure and stable.

What is visible to other users

• Your username, display name, avatar, posted activities (photo, title, caption, drink summary, BAC estimate, voice note, morning check-in emoji), and Cheers / comments are visible to accepted friends and to users you tag.
• Your email, push token, body stats, and blocks / reports are private to you. Other users never see them.

BAC estimate

Body stats are stored on the server and attached only to your account. The BAC value shown on each activity is a rough estimate computed from your drinks and body stats using the Widmark formula. It is not medical advice and must not be used to decide whether you can drive or operate machinery.

Where data is stored

Data is hosted on Supabase infrastructure (EU region). Photos and voice notes are stored in Supabase Storage (EU region). Push notifications are routed through Apple Push Notification service (iOS) and Google Firebase Cloud Messaging (Android).

Third-party processors

• Supabase — database, authentication, file storage (EU region).
• Apple Push Notification service / Google Firebase Cloud Messaging — push delivery only; receives your push token.
• Expo — over-the-air app updates.
• Sentry — crash and error monitoring; receives anonymised error reports, stack traces, and device context. No personal content (photos, captions, drink data) is sent to Sentry.

How long we keep it

Until you delete your account. Deleting your account removes your profile, activities, drinks, photos, voice notes, comments, Cheers, friendships, body stats, blocks, and reports. Anonymised crash logs held by Sentry may be retained for up to 90 days per Sentry's own retention policy. Some security logs may be retained for up to 30 days for abuse-prevention purposes.

Your rights

Under GDPR you have the right to access, correct, export, or delete your personal data, and the right to object to or restrict certain processing. You can delete your account in-app at any time (Settings → Delete account — step-by-step guide). For any other request, write to [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. In the Czech Republic, the relevant authority is the Office for Personal Data Protection (ÚOOÚ).

Children

Pivka is intended for adults of legal drinking age in their country. We do not knowingly collect data from minors. If you believe a minor has created an account, contact [email protected] and we will remove the account promptly.

Changes

We may update this policy. We will note the change date at the top and notify active users in-app when changes are material.

Contact

Martin Kasperlik — [email protected]