From the draft Privacy Policy (v2.4) and the app as it works today. Not legal advice. Deleting your account has its own page: Delete your account.
Your rights #
Under the GDPR you have the right to:
- access your data and get a copy of it,
- have inaccurate data corrected,
- have your data erased,
- restrict processing,
- receive your data in a machine-readable format and transfer it (data portability),
- object to processing based on legitimate interest, including the aggregated breeding analytics,
- withdraw consent at any time, where processing is based on consent,
- lodge a complaint with a data protection supervisory authority, for example in the country where you live or work.
How to make a request #
Email [email protected]. BreedMap may confirm your identity using the service's own sign-in methods, and answers within one month at the latest. For complex or numerous requests this can be extended by up to two more months, and you will be told why.
Many things you can do yourself:
- A copy of your data: "My account" > "Data & storage" > "Export my data" (see Export your data).
- Corrections: "My account" > "Account overview" (name, @handle, card values).
- Erasure: "My account" > "Archive or delete" > "Delete account…" (see Delete your account).
- Objection to the exact location of your photos being kept: ask by email; it is then replaced with the rounded location.
How long things are kept #
| Data | Kept | |---|---| | Sign-in log (email, IP address, what happened) | 90 days | | Help assistant breach log and answer ratings | 90 days | | Synced help assistant chat history ("Sync chat history" on) | until you clear it or turn sync off, or 12 months unchanged | | Messages | until a user deletes them (the sender can also delete for the recipient) | | Messages in the Other mailbox | 12 months after they were received | | Reported messages and support requests | only as long as needed to handle them | | Export files and their passwords | 3 hours | | Old sign-in email addresses (reserved for you after a change) | 365 days, or until "Forget old email addresses" | | Device tokens not used | 12 months | | Other database logs (access and purge logs) | 30 days | | Application and server logs | one month | | Email sending logs at the email service provider | 30 days | | Guardian declaration of a kid account | the life of the kid account and 12 months after | | Backups | kept for a limited time; deleted data remains in older backups until they expire, and is deleted again after a restore |
Care log history is never deleted; entries by a person who left show "Former member".
Kid accounts #
A person under 15 can only have a kid account, added by a guardian aged 18 or over from inside a family. The guardian exercises the child's data protection rights until the child turns 15. See Kid accounts and guardians.