Privacy notice

1. Who is responsible for your data?

The controller and operator of budapest.app is EasyNet Informatikai és Számítástechnikai Szolgáltató és Kereskedelmi Korlátolt Felelősségű Társaság (Easynet Kft.). Registered office and postal address: 1139 Budapest, Petneházy utca 37–47. E. lépcsőház, I. emelet 1., Magyarország. Company registration: 01-09-682490; tax number: 11905624-2-42; registry court: Company Court of the Budapest-Capital Regional Court.

Our official support, privacy and rights-request address is support@budapest.app. For general enquiries, use hello@budapest.app or https://budapest.app/contact.

2. Scope of this notice

This notice covers the budapest.app website, connected mobile application and account, community and reservation features, business portal, partner applications and contact requests. Features may vary by client and permission. You must be at least 18 to create an account.

Required fields are identified on each form; without them the relevant function cannot be provided. Optional fields may be left empty. Reading this notice or accepting the terms does not give blanket consent to processing or marketing.

3. Accounts, profiles and community information

Depending on your chosen sign-in method, we process your email, phone number or Apple/Google identifier, account ID, sessions, verification status, birth date and the versions of legal documents acknowledged or accepted. Sign-in codes are not public profile information.

Your profile may include a display name, username, photo or selected avatar, biography, birth year, gender, country and city, local or visitor role, languages, interests, travel dates and visibility choices. Community features may process programs, participation and meeting requests, footprints, posts, comments, likes, saved items and messages.

You provide most information. Additional data may come from your chosen identity provider, the relevant business or another member through a message, invitation or report. Technical and operational records arise through use.

4. Visibility and location

Public profile and content fields are visible to their audience, and some previews can be viewed without signing in. Profile and trip settings govern inclusion in the people lists. Sign-in contact details, block lists and private partner-application contact details are not public.

Nearby search can use a manually selected map point, approximate IP location or device location with permission. We do not continuously track location in the background. Public community map markers and distances are blurred or rounded; a program’s precise meeting point is available to its host and authorised participants.

Current device location is used for no more than 2 hours in normal operation. This does not apply to a business address, program location or address you separately publish or send. Precise information included in text, photos or messages is disclosed to that content’s audience. You can revoke device permission in your settings.

5. Reservations and partner information

A reservation records the offer, business, quantity, price and time information, status, redemption code, cancellation and redemption. The business sees the details needed to fulfil it and the guest’s display name; its portal reservation list does not disclose the guest’s sign-in email or phone number. Payment is on site; we do not request card details for reservations.

Partner applications contain business details, address and map point, category, description, offer idea, contact name, email, private phone, role, languages and optional links. Authorised administrators receive the application and an email notification. Approved partners have memberships, invitations, offers, operational records and, where granted, a founding-partner fee waiver.

Easynet Kft. also operates Zsákmány. For Zsákmány-origin offers, identifiers, quantities, statuses and times needed for booking and redemption can pass between the systems. This does not automatically merge accounts or profiles with Zsákmány or Freelove. The business controls processing connected with its on-site sale, payment and receipts.

Publishing listings and managing stock in the web partner portal involves listing text and images, prices, available quantities, time windows, reservation changes and actions by the relevant team member. The dedicated partner app for businesses is not yet available; its processing and any differences will be explained before launch.

6. Contact requests and complaints

Our separate contact form requests a name, reply email, topic and message. It creates a private enquiry in the admin inbox and sends it to support@budapest.app. It does not create a partner application or user account or subscribe you to marketing. Related email correspondence is used to resolve the enquiry.

We may request proportionate verification for account-related requests. Do not send passwords, one-time codes, complete payment card details or unnecessary sensitive information. Rights requests and formal complaints can also be sent directly to support@budapest.app.

We promptly email an acknowledgement to the reply address for requests submitted under Complaint. This confirms receipt, not a substantive decision.

7. Purposes and legal bases

Accounts, requested profile display, search, messaging, program participation, reservations and a partner contract with an individual: entering into or performing a contract, GDPR Article 6(1)(b).

System and account security, abuse prevention, necessary moderation, technical logging, general enquiries and organisational contact persons: legitimate interests, Article 6(1)(f). Our interests are a secure service and resolving requests; processing must be necessary and proportionate. You may object.

Mandatory complaint records, lawful authority requests and other legal duties: Article 6(1)(c). Retention needed to defend legal claims: legitimate interests. Optional marketing and other consent-based features: separate, revocable consent under Article 6(1)(a). Device permission alone does not replace a legal basis.

8. Recipients and service providers

Authorised support, operations and moderation staff access data according to their tasks. Necessary information may be shared with the relevant business, recipient member, hosting and communication providers, an authority or court acting lawfully, or advisers handling legal claims.

Current technology providers include Google Cloud (infrastructure and image processing), MongoDB (database technology within the hosting setup), Mailgun (email), Twilio (SMS and phone checks), Google Firebase Cloud Messaging and Apple APNs (push), Apple and Google (chosen sign-in), Google Maps/Places and OpenStreetMap (maps and places), and ipgeolocation.io (approximate IP location). The information involved depends on the feature you use.

Loading a map can send an IP address and the requested map area to its provider. Identity providers and external sites also have their own privacy rules. Some providers process data outside the EEA, particularly in the United States. Such transfers require safeguards under Chapter V of the GDPR. Contact support@budapest.app for information about specific recipients and applicable safeguards.

9. Uploads, automated checks and AI

Images can be resized for display and sent to Google Cloud Vision for safety checks. Automated text filters and human moderators may review content and reports. You can request human review of a disputed rejection or restriction.

Where AI-assisted event suggestions are available, the enabled Anthropic service may process the submitted poster, image or text to extract event information. The feature provides a separate notice and approval step; you can browse and reserve without using it. AI output can be wrong and requires review before publication. Do not upload confidential documents or unnecessary personal information.

10. Cookies, notifications and marketing

The current website does not load advertising pixels or a visitor-analytics SDK. Cookies support sessions, language, appearance, currency and remembering the cookie notice; temporary browser storage supports some unfinished actions. Details: https://budapest.app/cookies.

Push tokens and preferences support requested notifications. Marketing is off by default; submitting an enquiry or accepting the terms does not enable it. Service and security messages have separate purposes. You can change device notification permission and app settings independently.

11. How long information is kept

Account, profile and community information is kept while the account or content exists, followed by the deletion process and justified exceptions below. Inactivity alone does not automatically delete an account.

Current device location: usable for at most 2 hours; expired records are removed by automatic cleanup. Footprints: 7 days, except separately retained moderation evidence. Sign-in codes: valid for 10 minutes, with separate short-lived technical records. Mail delivery logs: up to 30 days after the last status update; delivered message bodies are removed from the sending queue.

Contact requests: until resolution, then at most 1 year for general enquiries. Consumer complaints and substantive replies are retained for 3 years. Closed admin enquiries receive an automatic deletion deadline; email correspondence follows the same purpose and retention policy.

Reservation, partner, verification, moderation and audit records are kept as needed to resolve the relationship, case or legal claim, or meet a legal duty. There is currently no single automatic deletion deadline covering all these records, operational logs and backups. This does not justify indefinite retention: necessity must be reviewed, and you can request the applicable period or criteria.

12. Account deletion and export

You can request deletion in Settings. We revoke access and sessions, remove current device location and push tokens, and stop trip visibility. Final deletion processing runs after a 30-day waiting period; a justified legal hold may delay it. Ask support@budapest.app about the status or for help.

The final process removes or clears personal profile information, your message bodies and personal media, and deletes relevant travel and community records. Business-owned content and images may remain with the business; a business left without an owner may be suspended. Limited reservation and moderation records, legal acceptance and operational receipts and identifiers may remain. Account deletion therefore does not immediately erase every record.

You can also request an export in Settings. Providing a copy must respect other people’s rights. Uninstalling the app does not delete your account; we cannot withdraw copies others made outside the service.

13. Security

We use HTTPS/TLS, session and permission checks, restricted administrative access and abuse-prevention logs. Chat is not end-to-end encrypted: authorised access necessary for operation, report investigation or legal duties is possible.

The contact form limits submission frequency using keyed fingerprints associated with IP and email addresses. These are not marketing profiles. No system is risk-free; relevant privacy incidents are handled under applicable rules.

14. Your rights and complaints

Subject to the legal conditions, you can request access and a copy, correction, deletion, restriction and portability; object to legitimate-interest processing; and withdraw consent. Withdrawal does not affect earlier lawful processing. Send requests to support@budapest.app or our postal address.

We normally respond within one month. Complex or multiple requests may require two additional months; we explain any extension within the first month. Exercising rights is generally free. Identification requests are limited to what is necessary to handle the request safely.

You may complain to Hungary’s NAIH: 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; https://naih.hu/ugyfelszolgalat-kapcsolat. Its website explains how to start proceedings. You may also contact the competent authority in your place of residence or a court.

15. Changes

The date and version identify this notice. We provide appropriate notice of material changes and request a separate decision for new consent-based purposes. Publication does not obtain consent retrospectively or change earlier legal bases. Hungarian, English and German versions describe the same operation; report discrepancies to support@budapest.app.