Aller au contenu
← Retour à l'accueil

Privacy Policy

Last updated: June 9th, 2026

1. Overview

FeedBackApp enables speakers to collect real-time audience feedback during live events. During an event, audio will be recorded, transcribed, analyzed, the transcription linked to audience reactions, and the audio will be deleted immediately afterwards.

We process personal data in accordance with the European General Data Protection Regulation (GDPR) and applicable German data protection laws.

2. Data Controller

The data controller responsible for processing personal data through FeedBackApp is:

Jesus del Valle
Sonatenweg 10, 13158 Berlin, Germany
yeysus@gmail.com

3. Personal Data We Process

Account Information

For registered users, we process:

  • Email address
  • Encrypted or hashed authentication credentials
  • User role and account settings
  • Account creation and login timestamps

Anonymous Participants

Listeners may participate without creating an account. In this case, we may process:

  • A pseudonymous identifier stored in a cookie
  • Optional display name if voluntarily provided
  • Reactions submitted during events

Event Data

When an event is conducted through FeedBackApp, we may process:

  • Event title, description, date, and location
  • Audio recordings
  • Speech transcripts
  • Audience reactions and feedback
  • Event analytics and aggregated statistics

Technical Information

We automatically process certain technical data necessary for operation and security, including:

  • IP address
  • Browser and device information
  • Log data
  • Session information

Search Activity

When you use the site search, we log the search text, the time of the search, the number of results returned, and any facet filters applied, together with whether the search came from a registered or an anonymous user. Any link to your specific user account is automatically removed after a retention period (90 days by default; configurable by the operator), after which the search record is kept only in de-identified form for aggregate trend analysis. The legal basis is our legitimate interest in understanding and improving the service (Art. 6(1)(f) GDPR).

4. Purposes and Legal Bases

We process personal data for the following purposes:

  • Providing and operating the service — Art. 6(1)(b) GDPR
  • User authentication and account management — Art. 6(1)(b) GDPR
  • Security, fraud prevention, and abuse detection — Art. 6(1)(f) GDPR
  • Service improvement and troubleshooting — Art. 6(1)(f) GDPR
  • Search analytics (de-identified after retention) — Art. 6(1)(f) GDPR
  • Compliance with legal obligations — Art. 6(1)(c) GDPR
  • Audio recording and transcription of events — Art. 6(1)(a) GDPR (consent) and/or Art. 6(1)(b) GDPR where applicable

Event organizers are responsible for ensuring that participants are informed about recordings and that any required consents are obtained before recording begins.

5. Service Providers

We use selected service providers who process data on our behalf under data processing agreements pursuant to Article 28 GDPR.

These providers may include:

  • Hosting and infrastructure providers
  • Database and storage providers
  • Speech-to-text providers
  • Authentication and security providers

Where possible, data is processed within the European Economic Area (EEA). If data is transferred outside the EEA, appropriate safeguards such as the European Commission’s Standard Contractual Clauses are implemented.

5a. Subprocessors

FeedBackApp uses selected service providers (“subprocessors”) to operate the service. These providers process personal data only on our behalf and under appropriate contractual and technical safeguards.

Hetzner Online GmbH

Purpose: Hosting, infrastructure, database services, and object storage.

Data processed:

  • Account information
  • Event metadata
  • Audio recordings
  • Transcripts
  • Reactions and feedback data
  • Application logs and security records

Location: European Union (Germany and/or other EU data center locations selected by FeedBackApp).

Data usage: Hetzner provides the infrastructure required to store and process data. Hetzner does not use customer data for its own purposes.

Deepgram

Purpose: Speech-to-text transcription of event audio.

Data processed:

  • Audio recordings submitted during live events
  • Technical metadata required for transcription
  • Generated transcript text

Data usage: Deepgram processes audio solely to provide transcription services to FeedBackApp. Deepgram does not receive access to user passwords or account authentication credentials.

International transfers: Where processing involves transfers outside the European Economic Area (EEA), appropriate safeguards, including Standard Contractual Clauses where required, are implemented.

Updates

We may update our subprocessors from time to time as operational requirements change. Material changes will be reflected in this Privacy Policy.

6. Data Storage and Retention

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods may vary depending on:

  • The type of data processed
  • User settings
  • Legal requirements
  • Operational needs

Users may delete events or accounts at any time, subject to applicable legal retention obligations. Deleting an event permanently removes the event together with all data tied to it — including the audience reactions, notes, and transcript recorded during that event, and any uploaded event image. Deleting your account permanently removes your profile, the events you created (and their associated audience data), your uploaded pictures, your shop links, and your follow relationships in both directions (accounts you follow, and your followers' links to you). Deletion is immediate and cannot be undone.

7. Cookies

FeedBackApp uses essential cookies required for operation and security.

Examples include:

Essential Cookies — fba_anon

  • Purpose: Identifies anonymous event participants
  • Duration: Up to 1 year
  • Type: Essential

Authentication Cookies

  • Purpose: User authentication and session management
  • Duration: Session or configured login period
  • Type: Essential

These cookies are necessary for the functioning of the service and cannot be disabled through the application.

8. Your Rights

Subject to applicable law, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time

To exercise your rights, contact:

yeysus@gmail.com

You also have the right to lodge a complaint with a competent data protection supervisory authority.

9. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encryption, access controls, logging, and secure infrastructure practices.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the application or by other appropriate means.