Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains how your personal data is collected, used, and protected when you use Gems, an iOS app for sharing and discovering trusted place recommendations. Please read it carefully. If you do not agree with it, please do not use the app.

1. Who is responsible for your data

The data controller responsible for your personal data is:

Sune Thomsen
Sundkaj 85, 2150 Copenhagen, Denmark
Email: privacy@joingems.app

Gems is currently operated by an individual. If the operating entity changes (for example, to a registered company), this policy will be updated and you will remain the same protected user.

2. What data we collect

We collect only what we need to make Gems work. This falls into the following categories:

Account information

When you create an account we collect your email address and authentication details. If you sign in with Apple, we receive the information Apple shares with us (such as your name and an email or relay address), governed by your Apple ID settings. Authentication is handled by Google Firebase Authentication.

Profile and content you create

We store the recommendations, saved places, notes, scores, tags, photos, and other content you choose to add ("your content"), along with your display name and any profile details you provide. Because Gems is built around sharing with people you trust, content you choose to share becomes visible to the users you share it with.

Location data

With your permission, we collect your device location to show nearby places, attach a location to a recommendation, and improve search results. You control this through your iOS location permissions and can withdraw it at any time in your device settings. We do not track your location in the background unless you explicitly enable a feature that requires it.

Place information

When you search for places, your search queries are sent to the Google Places API to return matching results. These queries may include text you type and, where permitted, your approximate location to improve relevance.

Usage and diagnostic data

We collect analytics about how the app is used (such as features opened, session length, and interactions) through Google Firebase Analytics, and crash and performance diagnostics through Google Firebase Crashlytics. This helps us understand what works and fix what breaks. This data is tied to app and device identifiers rather than to your name.

3. How we use your data

We use your data to:

4. Legal bases for processing (GDPR)

As a user in the EU/EEA, your data is processed under the EU General Data Protection Regulation. We rely on the following legal bases:

5. Who we share data with

We do not sell your personal data. We share data only with service providers who help us operate Gems, and only as needed. Each is required to protect your data to a standard at least equal to this policy:

We may also disclose data if required by law, to enforce our terms, or to protect the rights and safety of users.

6. International transfers

Our primary data storage is in the EU (europe-west1). Some providers, such as Google and Apple, may process data outside the EEA. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep your data

We keep your account data and content for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain information to meet legal obligations or resolve disputes. Diagnostic and analytics data is retained for a limited period and then deleted or aggregated.

8. Your rights

Under GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, email privacy@joingems.app. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

9. Deleting your account

You can request deletion of your account and associated data at any time from within the app or by emailing privacy@joingems.app. Apple requires that apps offering account creation also offer account deletion, and Gems does.

10. Children

Gems is not intended for children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the authorities of any breach as required by law.

12. Changes to this policy

We may update this policy as Gems evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app. Continued use after changes means you accept the updated policy.

13. Contact

Questions about this policy or your data? Email privacy@joingems.app.