D
Discussion

Privacy Policy

Effective from 27 July 2026

This translation is provided for convenience. In case of any discrepancy, the Czech version prevails.

This policy describes what personal data the Discussion application and website (the “service”) process, for what purpose, for how long, and what rights you have. The service is a personal (non-profit) project and puts emphasis on privacy – we do not sell the content of your messages or misuse it for advertising. The rules of using the service are governed by the separate Terms of Use.

1. Data controller

The controller of personal data is Michal Trnka (a natural person, Czech Republic), operator of the Discussion service. Contact: mitrnka@gmail.com.

2. What data we process

CategoryDataPurpose
Account data E-mail address, nickname, password (stored in encrypted/hashed form) Creating and securing the account, sign-in, password recovery
User content Private messages, reactions, attachments (photos, videos, files), and on the web also discussion posts, comments and votes Providing chat and discussions between users
Contacts / friendships List of friends and friendship requests Contact list, controlling visibility and communication
Technical and security data IP address, sign-in time and history, time of last activity Account security, abuse prevention and audit
Notification identifiers Push notification registration token (Firebase Cloud Messaging), on Apple devices a token for incoming calls (Apple PushKit) Delivering push notifications and incoming calls
Error diagnostics (mobile app) Anonymous technical data sent when the app fails/crashes: platform type (Android/iOS), operating system version, device model, app version and error description. They are not linked to your account or identity and are not used for tracking. Detecting and fixing errors, improving app stability
Data processed by artificial intelligence (AI) features Text that you yourself submit using the spell-check or rephrasing feature (the “magic pencil”), and the description you enter to generate a profile picture (avatar). Both features are optional – they never run without your request, and ordinary message or discussion content is not sent to them. Spell-checking and rephrasing text, generating a profile picture

Voice calls take place directly between devices (peer-to-peer, WebRTC technology) – our servers do not store the content of calls. In difficult network conditions the audio is relayed through our relay (TURN) server, but it is not stored there either.

3. Purpose and legal basis of processing

4. Sharing with third parties

We do not sell personal data. We use the following processors to run the service:

5. Retention period

6. Deleting your account and data

You can delete your account and the data connected to it directly in the service: on the web in My Account → Delete account (you can reach your web account from the mobile app as well). You can also request deletion by e-mail at mitrnka@gmail.com. After deletion, the user's data (messages, attachments, friendships, posts) are removed.

7. Your rights

In accordance with the GDPR you have the right of access to your data, rectification, erasure, restriction of processing, data portability and the right to object. You can exercise your rights using the contact below. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).

8. Children

The service is not intended for persons under 15 years of age (the age from which a child in the Czech Republic can give consent to the processing of data in relation to information society services). If we find out that we have processed a child's data without proper consent, we will delete the data.

9. Security

Communication with the servers is encrypted (HTTPS). Passwords are stored in hashed form. Access to data is restricted and protected.

10. Changes to this policy

We may update this policy; the current version is always available at this address.

11. Contact

Michal Trnka – mitrnka@gmail.com
Web: discussion.cz