Privacy policy · Tady is better

This policy explains what personal data Tady is better ("Tady", "we") processes when you use tadyisbetter.com and the Tady apps for Android and iOS, why, for how long and what your rights are. We wrote it to be read, not to hide things in it.

1. Who is responsible

Controller: Tady is better. Privacy contact: [email protected]. You can write to us in English, Czech or Spanish (we'll do our best in German and Russian too).

We have not appointed a data protection officer because the law does not require one for our activity (art. 37 GDPR); we will review this if the service grows.

Applicable law: Regulation (EU) 2016/679 (GDPR), Act No. 110/2019 Coll. on personal data processing, Act No. 127/2005 Coll. on electronic communications (cookies), Act No. 480/2004 Coll. on certain information society services (commercial emails). Supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

2. Browsing the site and the app

Data: IP address, browser or app type, pages requested, time, errors.
Why: to deliver the pages, keep the service secure and stop abuse.
Legal basis: legitimate interest (art. 6(1)(f) GDPR).
How long: server logs 14 days. Our own statistics are aggregated per page and day with no identifier.
Coordinates from rumba mode never reach our logs (see section 8).

3. Cookies and analytics

Only strictly necessary cookies are set without your permission. Google Analytics 4 loads only after you accept "Analytics" in the cookie banner, with Google Consent Mode v2 (analytics and advertising storage denied by default), no Google Signals, no remarketing and no advertising cookies. Legal basis: your consent (art. 6(1)(a) GDPR and § 89(3) of Act No. 127/2005 Coll.). Analytics data is kept for 14 months. The Android and iOS apps contain no analytics or advertising SDKs and do not use the advertising ID. Full list and settings: tadyisbetter.com/en/legal/cookies.

4. Your account

Data: email, name or alias, @username, language, optional profile photo, birth year (optional unless a feature needs it, see sections 8 and 9), sign-up date, favourites, chosen tastes and team, consents given.
Why: to provide the account and the features you use ("For you" suggestions, saved places, alerts you choose).
Legal basis: contract (art. 6(1)(b) GDPR), i.e. our Terms of Use.
Passwords: we never store your password, only an Argon2id hash. To warn you about leaked passwords we send a breach-checking service (Have I Been Pwned) only the first 5 characters of a SHA-1 hash of the new password; neither your password nor your email leaves Tady.
Sign-in links and tokens (email verification, password reset, magic link) are stored only as hashes and expire within minutes to 48 hours.
Suggestions: in-app activity (viewed, saved, booked, searched; never your location) is used to order venues for you and kept 180 days. We make no automated decisions with legal or similarly significant effects.
How long: while the account exists; after deletion the data disappears from backups within 30 days. Proof of the terms and consents you accepted (text version and date) is kept 3 years after the account ends, to be able to prove them.

5. Sign in with Google

If you choose "Continue with Google", the Google Identity Services script loads only at that moment. Google sends us your Google identifier, email, name and (if shared) photo, which we use to create or open your account. Legal basis: contract. Google Ireland Ltd. acts as an independent controller for the sign-in on its side (its own privacy policy applies).

6. Reservations, messages to venues and requests to makers

Reservations: name, email, optional phone, party size, date, notes, language and whether you book as a guest or with an account; optionally your country or "I live in Prague". The venue receives what it needs to handle the booking (name, party size, time, phone if given) plus a short summary (for an account: month you joined, number of bookings and no-shows; for a guest: "email confirmed"). The venue confirms or declines; nothing is decided automatically. Legal basis: contract (art. 6(1)(b)); the summary: legitimate interest in avoiding no-shows (art. 6(1)(f)). Anonymised 90 days after the reservation date. Every reservation email has a link to delete its data.
Messages to a venue ("Group or event? Write to them"): name, email, optional phone, date, group size and message, plus a hashed IP to fight spam. The venue uses them only to answer you, never for marketing. Anonymised after 12 months.
Requests to makers: name, email, optional phone, products, quantity, date and message, plus a keyed fingerprint of the IP and a Cloudflare Turnstile check against bots. The maker receives your contact details to reply and is an independent controller for what happens next. Anonymised after 12 months. Tady does not sell anything or take payments.
Venues and makers are bound by our venue/maker terms to use your data only for that purpose.

7. Ratings, reviews and reports

Ratings (Cracking, Good, Meh, Nope) without an account use a random identifier created on your device (tady.anon); our server keeps only a keyed code derived from it, from which the identifier cannot be recovered. With an account, your account is linked. Only totals and percentages are public. Legal basis: legitimate interest in reliable ratings without duplicate votes.
Reviews show your public name (first name or alias plus initial), the rating, tags, text and, if true, the "Verified visit" badge. They are public on the venue page and may appear in search engines. Legal basis: contract. Kept until you delete them or your account; reviews hidden by moderation 12 months.
Reports of content (reason, note, optional email, decision) are handled under the Digital Services Act (Regulation (EU) 2022/2065, arts 16 and 17) and kept 12 months. Legal basis: legal obligation (art. 6(1)(c)). Rules: tadyisbetter.com/en/legal/review-guidelines.

8. Rumba mode (sharing your area tonight)

Rumba mode lets you show the Tadyers you pick roughly where you are tonight. It is off by default and needs your separate, explicit consent (art. 6(1)(a) GDPR), which you can withdraw in one tap.

Age: 15 or over (the age of digital consent in the Czech Republic, § 7 of Act No. 110/2019 Coll.). We ask for your birth year.
What we use: your device's location only while rumba is on. Our server immediately rounds it to the centre of an area of about 130 m and derives the neighbourhood and a nearby venue; the exact point is not kept.
Who sees it: only the Tadyers you choose who are also sharing. Never venues, advertisers or anyone else. No public search of people.
How long: only your latest approximate position, in memory (Redis) for at most 15 minutes, overwritten with each update and deleted the moment you stop, sign out, withdraw consent or delete your account. No history. It is never written to our database, logs or analytics. Rumba switches itself off (by 06:00 or the time you choose; 12 hours at most).
What we keep: that a session happened (start, end, who you chose to share with), without coordinates, while your account exists; and your consent record.
We assessed the risks of this feature in a data protection impact assessment (art. 35 GDPR).

9. Hot promos tonight (optional, 18+)

If you also switch on "Hot promos near me", we use the same approximate position, only while rumba is on, to tell you about tonight's promotions from venues within 1.5 km (at most 1 per venue and 3 per night). It is a separate consent, off by default, only for people aged 18 or over with a verified email, because many promotions involve alcohol (Act No. 40/1995 Coll. on advertising does not allow alcohol advertising aimed at minors; Act No. 65/2017 Coll. forbids selling alcohol to under-18s). Venues never learn who received a promo or where anyone is. The per-night counter disappears at the end of the night. You can turn hot promos off without stopping rumba.

Promotions involving alcohol are shown elsewhere on Tady only to signed-in accounts with a verified email and a birth year showing 18 or over. We only use the year, never a full date of birth.

10. Tadyers (friends on Tady)

Tadyers is a mutual circle: both people must accept. You can choose whether people can find you by your exact @username and whether your saves and positive reactions are shown to your Tadyers ("Tadyers love this"); both can be switched off in one tap in Tadyers privacy settings. We never search by email or phone and never upload your contacts. Invitation links last 7 days and are stored only as hashes. Legal basis: contract (the social feature of your account). Kept while the friendship and the account exist.

11. Giveaways and contests

Data: on the website, your email (or your account), optional name and the age confirmation; on Instagram or TikTok, your public username and comment, which our team copies to the entry list.
Why: to run the draw, contact the winner and deliver the prize. Legal basis: the giveaway rules you accept (art. 6(1)(b)); publishing the winner's name only with their consent.
How long: entries are anonymised 90 days after the giveaway ends. If the law requires accounting or tax records for a prize, the winner's details needed for that are kept for the statutory period.
Entering never requires agreeing to marketing emails; that is a separate, optional box.

12. Emails

Service emails (verification, booking updates, security): contract.
Newsletters and offers: only if you tick the separate, unticked box and confirm by email (double opt-in), under § 7 of Act No. 480/2004 Coll. Every email has a one-click unsubscribe that works immediately. We keep the proof of consent (text version, date, confirmation IP) until you unsubscribe and 3 years after.
Emails are sent through Twilio SendGrid. We don't use tracking pixels or remote images in emails.

13. Push notifications (Android and iOS apps)

Push notifications are off by default. Only if you turn them on in "My account" (and allow them on your phone) do we store this device's push token, platform and language, linked to your account, to send you the alerts you chose. Legal basis: consent. Tokens are delivered through Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS). Notifications never contain your location. We delete the token when you turn notifications off, sign out or delete your account, when Google or Apple say it is no longer valid, and after 60 days without opening the app. In the app, your session is a signed token stored on your phone (30 days or until you sign out).

14. Venues and business contacts

If you work for a venue: when we invite your business, we use public business contact details (name of the business, public email or phone, contact person) and our visit notes, based on legitimate interest in individual business contact; you can opt out at any time and we delete them after 24 months without reply. Venue portal users: email, name and role, under the contract with the venue, for the relationship plus 12 months. Promotion redemptions are kept 24 months for accounting.

15. Who receives data (processors)

Hetzner Online GmbH (Germany): servers, database and encrypted backups, in the EU.
Cloudflare, Inc.: content delivery and attack protection; sees the IP address of each request; Turnstile anti-bot check on some forms.
Twilio Inc. (SendGrid): sending emails.
Google Ireland Ltd. / Google LLC: Google Analytics 4 (only with consent), Google Sign-In (only if you use it), Firebase Cloud Messaging (only if you turn on push on Android).
Apple Distribution International Ltd.: Apple Push Notification service (only if you turn on push on iOS).
Venues and makers you book with or write to, only for that purpose.
Authorities, only when the law requires it.

We have data processing agreements with our processors. Google Play and the App Store are independent controllers for downloading the app. We do not sell personal data, we have no third-party advertising and we do not share data for others' marketing.

16. Transfers outside the EU

Cloudflare, Twilio, Google and Apple may process some data in the United States. They are certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), with standard contractual clauses as a fallback. You can ask us for more information at [email protected].

17. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object to processing based on legitimate interest (and at any time to direct marketing), and to withdraw any consent at any time without affecting what happened before.

In "My account" you can download your data (JSON), delete your account, and withdraw each consent separately.
Every marketing email has a one-click unsubscribe; every reservation email has a link to delete its data.
For anything else write to [email protected]. We reply within one month (extendable by two months for complex requests, with notice). We may ask you to confirm the request from your account's email.
You can complain to the ÚOOÚ (https://uoou.gov.cz) or to the authority of your EU country of residence.

18. Security

Encryption in transit (TLS), passwords only as Argon2id hashes, tokens and codes only as hashes, login rate limits and lockout, HttpOnly and SameSite cookies, restricted server access, encrypted backups in the EU, secrets outside the code. If a data breach is likely to put you at risk, we notify the ÚOOÚ within 72 hours and tell you without undue delay.

19. Age

Tady accounts are for people aged 15 or over. If you are younger, please don't create an account; if we learn that an account belongs to someone under 15, we delete it. Some features are 18+: hot promos, promotions involving alcohol and giveaways with alcoholic prizes. Venues are responsible for not serving alcohol to under-18s.

20. Changes

We publish every version with its number and date. If a change affects something you consented to, we will ask you again; if it is important, we will tell you by email or in the app beforehand.