Privacy Policy

Last updated: 6 November 2026 Version: 1.15

English translation. This document is a translation of the Italian privacy policy (PRIVACY_POLICY.md), which is the authoritative text. In case of any discrepancy between the two versions, the Italian version prevails. Both versions describe exactly the same processing operations.

Contents

1. Who we are (Data Controller)
2. What this notice covers
3. What data we process
4. Special categories of data ("sensitive data")
5. Purposes and legal bases
6. Mandatory and optional data
7. Location: how it works and how we protect it
8. Photos, verification documents and social handles
9. Messages and chats (automatic translation disabled)
10. Moderation, safety and automated decisions
11. Who we share data with (processors)
12. Where data is processed and transfers outside the EU
13. How long we keep data
14. Your rights
15. Deleting your account
16. Minimum age (18) and protection of minors
17. Data security
18. Notifications
19. SDKs and technical components (no advertising or profiling)
20. Complaint to the supervisory authority
21. Changes to this notice
22. Contact

1. Who we are (Data Controller)

The controller of the personal data collected through the Attimi app (Android package com.attimi.app, iOS app app.attimi, web app app.attimi.app) is:

• Mirco Orecchini (natural person — independent developer)
• Address: Via Pietrafitta 53, 47842 San Giovanni in Marignano (RN), Italy
• Privacy contact email: privacy@attimi.app

The controller is established in Italy (EU): no representative under Article 27 GDPR is required. No DPO has been appointed at this time; the controller will assess whether an appointment is mandatory (Article 37 GDPR) in light of the processing of special categories of data combined with location data, and will update this notice accordingly. For any question you can write to privacy@attimi.app.

For people who live in Brazil, the "encarregado" required by the LGPD (Lei 13.709/2018, Article 41) is the controller himself, Mirco Orecchini, reachable at privacy@attimi.app, in Portuguese too. For people who live in Colombia, the person who answers requests and complaints about data (Ley 1581/2012) is the controller, at the same address.

2. What this notice covers

Attimi is a social app for chatting with people who are available "right now", starting from those nearby. When you turn on "I'm available", your profile becomes visible to the other users who are available at the same time, according to each person's "Show me" choice, for a limited time (1 hour by default), after which your availability expires on its own. People within the radius you set are shown to you first, as "near you"; people farther away are shown after them, in order of distance. In the same way, other people see your profile among those "near" them if you are within the radius they set, and otherwise among the people farther away; about your location they only ever see an approximate distance.

This notice covers the Attimi app for Android and iOS, the web app at app.attimi.app (Attimi opened in a browser, on a phone, tablet or computer, with the same account and the same features, except notifications: section 18), the connected backend services and the website www.attimi.app (section 19). It is available in Italian, English, Spanish, French, German and Portuguese, accessible before registration and from within the app; if the versions differ, the Italian text prevails; for people who live in Brazil, in case of doubt the interpretation most favourable to you applies.

3. What data we process

3.1 Account

Email, nickname (unique public name), language. Authentication is handled by Supabase Auth, and you can create your account and sign in through three routes: with email + password, with "Continue with Google" (Android, iOS and web app) or with "Continue with Apple" (iOS and web app). With email + password, the password is stored only as a hash (a fingerprint from which the password cannot be recovered) and is never visible to the controller. If you do not confirm your address, we resend the confirmation email up to 3 times within the following 7 days, and the incomplete sign-up is deleted automatically 30 days later (section 13).

Signing in with Google or Apple. Your phone — or, in the web app, your browser — shows Google's or Apple's own panel; the app receives an identity token signed by the provider and hands it to Supabase Auth, which verifies it and opens the session. From Google we use and store only your email address, already verified by Google: the name and photo of your Google profile are not stored. From Apple we request only your email, not your name. If you choose Apple's "Hide My Email", we receive and store an Apple relay address (ending in @privaterelay.appleid.com) and our emails — only service emails: password reset, confirmation of account deletion — reach you through Apple's relay; for this purpose we registered our sender domain attimi.app and the address noreply@attimi.app with Apple. Accounts created with Google or Apple have no password: you can set one later with "Forgot password?". Signing in with Google or Apple inevitably means that Google or Apple learn that you signed in to Attimi, a social app for meeting people: their own privacy policies apply to that step (section 11). If an Attimi account with the same verified email already existed, the Google or Apple sign-in is linked to that same account (one account, two ways in); if that account had never confirmed its email, from that moment the email + password login no longer works until you set a password with "Forgot password?". The consents requested at sign-up (18+, privacy notice and terms, special category data) are asked in the app before the account is created with Google or Apple — or, if you enter from the login screen without ever having given them, in a dedicated step right after — and are recorded in the same way.

3.2 Profile

Sex/gender, age range, bio (max 300 characters), photos (up to 5), optional social handles (Instagram/TikTok/Facebook).

3.3 Preferences and privacy settings

Preferred gender, preferred age range, nearby radius (1–200 km: the distance within which other people count as "near you"), availability duration, photo visibility (always / after the chat / never), "don't receive messages while I'm offline" (people you already chat with cannot message you while you are not available), "don't keep chats".

3.4 Location

GPS coordinates read only at the moment you turn on your availability. Your exact position is never stored on the server: the ±300 m random blurring is applied before anything is written, so our database only ever holds approximate coordinates. Search uses those and always shows an approximate distance, rounded by the server (for example "~12 km", or "~850 km" for someone far away). See section 7.

3.5 Messages

Text content of messages, read status, date/time, sender, reference to the chat. Automatic translation is currently disabled (see section 9): no message text is sent to third-party translation services.

3.6 Age/identity verification (feature currently suspended — section 16)

When enabled: an image of an identity document and a selfie.

3.7 Safety and moderation

Reports (reason, description, status), blocks against other users, any ban status and reason. If a report is made from inside a conversation, also a copy of the latest messages of that conversation (at most 200), taken at the moment of the report and kept only for moderation (sections 9, 10 and 13).

3.8 Technical and diagnostic data

Account creation date and last activity; crash reports with technical context about the device/app (via Sentry, configured not to send email addresses or IP addresses by default). For 30 days, the technical log of notifications: to whom, when, of what type and with what outcome each alert was sent and, if it was not sent, why — never the text of the alert (section 18). The date on which you tapped "I've read it" on the "Your safety" notice (section 16).

3.9 Payments

No data. Payment features (Stripe) are prepared in the code but disabled: the app is free. If they are enabled in the future, this notice will be updated before any payment data is collected.

3.10 Age range from Google Play

Android only. When you sign up, and the first time you sign in with your account on a phone (again after every sign-out), the app asks Google Play for the age range of your Google account — for example "18 or over", never your date of birth — if Google makes it available where you are and you agree in Google Play's panel. If the phone is in Brazil (its time zone says so), it asks every time the app starts. We use it only to keep minors out and we do not store it: the phone keeps only the result of the check for that account ("adult" or "no answer") and the date, so that it can be repeated after 30 days if Google did not answer. If Google says you are under 18, we record this in a report for moderation, so that the account can be removed (section 16).

4. Special categories of data ("sensitive data")

The choice of who you see can reveal or allow inferences about sexual orientation: in particular the combination of your gender and your "Show me" choice ("Men" / "Women" / "Everyone"; in the app versions up to 1.3.0 for Android "opposite sex" / "same sex" / "any"), used to decide who appears in your list. Photos can also indirectly reveal special category data. When it is re-enabled, verification through a document plus a selfie may involve the processing of biometric data.

This data falls within the special categories under Article 9 GDPR (for people who live in Brazil, "sensitive personal data", Articles 5, II and 11 of the LGPD). We process it only with your explicit consent, which we ask for at registration with a dedicated checkbox, separate from accepting this notice and the Terms, for one purpose only: deciding who appears in your list. Attimi cannot work without this data, so without this consent you cannot register. You can withdraw it at any time by deleting your account (sections 14–15).

5. Purposes and legal bases

6. Mandatory and optional data

• Mandatory in order to use the service: email, nickname, gender, age range and, for the core feature, the location permission.
• Optional: bio, photos beyond the first one, social handles. Not providing them does not prevent you from using the app.

7. Location: how it works and how we protect it

Location is designed according to privacy by design (Article 25 GDPR):

• Point-in-time reading, not continuous: your position is read only when you turn on your availability, with "balanced" accuracy. No background tracking. The permission requested is "while using the app" (never "always"/background).
• ±300 m obfuscation: at the moment of activation the server generates blurred coordinates with random noise.
• Your exact position is never stored: blurring happens before anything is written, so your precise location never enters the database, not even briefly. Our storage holds only blurred coordinates; the search for available people uses those and always returns an approximate distance, already rounded by the server. The columns that once held exact coordinates, and their history, were deleted on 6 August 2026.
• Rounded distance: the distance other people see is rounded by the server before it is sent: whole kilometres if you are within the radius set by the person looking (under one kilometre, "< 1 km"), tens of kilometres beyond that radius up to 500 km and fifties beyond that, always rounded up. Versions of the app released before version 1.2, still in use for a while, keep receiving the distance as before: with one decimal (100 m), and only within the radius; on screen they show whole kilometres anyway.
• Who receives your distance: users who are available at the same time as you and see you according to the "Show me" choice, whether near you or farther away (the list shows at most the thirty closest people beyond each person's radius), and the person you send a chat request to: if you are outside their radius, the request shows them (in the app from version 1.2) roughly how far away you are, rounded up to tens or fifties of kilometres.
• Limit on activations: availability can be switched on at most 10 times an hour and 30 times a day per account, to make it harder to work out where someone is by repeated attempts from different places.
• Residual risk, stated plainly: someone who switched availability on several times from different, chosen places could estimate from the rounded distances the approximate area where another available person is. The blurring (±300 m), the rounding and the limit on activations make this slower and coarser, but they do not rule it out: what could be estimated is at most the blurred point, never your exact position.
• User control: you can choose not to turn on your availability, turn it off, or revoke the location permission from your device settings.
• In the web app: your location is provided by the browser, with its permission; on a computer it often comes from the network and can be less precise, even by a few kilometres. We treat it the same way: blurred by the server before it is saved, never stored exactly.

Blurred coordinates are still personal data and are not treated as anonymous data: blurring reduces the risk, it does not make the data anonymous.

8. Photos, verification documents and social handles

Photos. Up to 5 images, stored in a storage bucket ("avatars") with no public file listing and with write access limited to your own folder. You control their visibility (always / after the chat / never). Photos may indirectly reveal special category data.

Social handles. Optional; they link your Attimi profile to external profiles and may make re-identification easier.

Verification documents (feature suspended). When re-enabled, document and selfie will be uploaded to a private bucket ("verifications") with write access only to your own folder, no client-side read access, accessible only to administrators.

9. Messages and chats (automatic translation disabled)

Messages in your conversations are stored on the backend for as long as the conversation exists. They are deleted in three cases:

• when you or the other person delete the conversation from the chat list: the conversation and its messages are removed from the server immediately;
• when you or the other person have turned on the "don't keep chats" option: in that case the entire conversation is deleted as soon as neither of you is available any more (checked every 10 minutes);
• when you or the other person delete your account: the conversation's messages are removed by cascade.

Deleting a conversation is always symmetrical: when one of these cases occurs the conversation disappears for both participants, not only for the person who acted, and it cannot be recovered. This is a deliberate choice protecting the confidentiality of both parties: neither of you keeps a copy of the other's messages. It follows that a decision by the other person can delete messages you could still see; the app tells you with a notice, without revealing who acted or which of the three cases occurred.

If none of these three cases occurs, messages remain stored. Availability, chat request and message data also travels to authorised clients through Supabase's realtime channel (in the EU).

One exception, from 4 September 2026: reports. When one of the two participants reports the other from inside a conversation, or the automatic filter in section 10 blocks a message, the server copies at that very moment the latest messages of that conversation (at most 200, from both participants) and keeps them separately, for moderation only. The conversation still disappears in the three cases above, for both of you; the copy does not. The copy is not visible to either user, nor to any other user: only the Controller reads it, in the moderation queue, to decide on the report. It is deleted automatically 90 days after the report is closed, or earlier, together with the report itself, and in any case within 12 months of the report (section 13). Without this copy, moderators would face — as actually happened during testing — a report with not a single message left to read.

Automatic translation: currently DISABLED. At this stage no message text is sent to third-party translation services. The feature is built but switched off; it will only be re-enabled in the future with a compliant provider and plan (with adequate handling of the texts), and this notice will be updated before any messages are sent to third parties.

10. Moderation, safety and automated decisions

To protect the community we apply measures that involve some automated decisions (Article 22 GDPR):

• Anti-prostitution filter: an automatic keyword-based check (IT/EN) may prevent a message containing certain terms from being sent; in that case the message is not saved. It is a "best-effort" check on the app side.
• Automatic ban on reports: at 3 distinct reporters the account goes under review; at 5 it may be suspended automatically. From 4 September 2026, to prevent report flooding: only one open report per reporter–reported pair counts, and only reports made by accounts that, at the time of the report, were more than 24 hours old count.
• Evidence for moderation: when you report someone from a conversation, or the filter blocks a message, a copy of the latest messages of that conversation is kept (section 9), readable only by the Controller in the moderation queue. This is not an automated decision: a person decides on the report by reading that copy.
• If you delete your account, the reports you made remain in the moderation queue, no longer linked to your profile, so that a report does not vanish together with the person who made it (section 15).
• Blocks: you can block other users, with mutual exclusion from search and messaging.

You have the right to human intervention, to express your point of view and to contest a decision by writing to privacy@attimi.app.

11. Who we share data with (processors)

We do not sell your data. Some providers process it on our behalf (processors under Article 28 GDPR), only as far as necessary:

Sign-in providers: independent controllers, not processors. If you choose "Continue with Google" or "Continue with Apple", the sign-in step is carried out by Google LLC and Apple Inc., which act for their sign-in service as independent controllers and not on our behalf: they learn that you signed in to Attimi and process that step under their own privacy policies — Google Privacy Policy, Apple Privacy Policy. From them we receive only your email address (section 3.1); we do not send them any other data from your profile (if you use Apple's relay, only our service emails pass through Apple). In the same way, on Android Google Play passes us the age range of your account, only if you agree (section 3.10).

In the web app, the "Continue with Google" and "Continue with Apple" buttons are components loaded from Google's and Apple's servers when you open the sign-in or sign-up screen: Google and Apple therefore receive your IP address and technical browser data even if you then don't use them, as independent controllers and under their own notices. If you prefer to avoid this, you can use the app on your phone.

12. Where data is processed and transfers outside the EU

Primary data is processed in the EU (Supabase in Germany; Sentry in Germany; Crisp in France). The authentication session is also stored locally on your device (app storage) or, in the web app, in the browser's storage (section 19). The pages of the web app and of the website are delivered to you by Cloudflare, including from servers in the USA (sections 11 and 19).

Transfers outside the EU: the Expo infrastructure (notifications/builds) is in the USA; Stripe (USA/Ireland) is relevant only if payments are enabled. For such transfers, appropriate safeguards (Articles 44–49 GDPR) are provided by Standard Contractual Clauses (SCCs) and/or certification under the EU–US Data Privacy Framework. If you sign in with "Continue with Google" or "Continue with Apple", the sign-in step is processed by Google LLC and Apple Inc. as independent controllers (section 11), as is, in the web app, the loading of the sign-in components when you open the sign-in or sign-up screen (section 5), including on servers in the USA: both companies are certified under the EU–US Data Privacy Framework. You may request a copy at privacy@attimi.app.

If you live outside the European Union (for example in Latin America), your data travels from your country to the EU, where the servers are (in Germany), and, for notifications, to the USA, with the safeguards described above. If you live in Brazil or Colombia, the data we collect directly from you also remains subject to the law of your country (the LGPD in Brazil, Ley 1581/2012 in Colombia); the European Union is regarded as an area with an adequate level of protection both by the Brazilian authority (ANPD) and by the Colombian one (Superintendencia de Industria y Comercio). For people who live in Brazil, the collection we carry out directly from you is a "coleta internacional" (international collection), not a transfer (Res. CD/ANPD 19/2024), and it remains subject to the LGPD; passing data to our providers in Germany and France is covered by the ANPD's adequacy decision on the European Union (Res. CD/ANPD 32/2026). Notifications go through Expo (650 Industries, Inc., USA) only if you turn them on: Expo receives your phone's notification code, the nickname of the person writing to you and the fixed text of the alert, never the content of your messages. This sending serves to provide the notification service you asked for and is based on Article 33, IX together with Article 7, V of the LGPD; the European standard contractual clauses and the Data Privacy Framework mentioned above are not recognised by the ANPD, and the USA has no adequacy decision from it.

13. How long we keep data

Some copies may persist temporarily in technical backups, removed according to rotation cycles.

14. Your rights

Under Articles 15–22 GDPR you have the right to: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, withdrawal of consent, and not to be subject to significant automated decisions without human intervention (section 10).

You can exercise them from within the app (where available) or by writing to privacy@attimi.app. We will reply within one month (Article 12.3 GDPR), a deadline that may be extended in complex cases.

If you live outside the European Union, this notice applies to you in the same way: your data is processed under the same rules and with the same protections, because the Controller is established in Italy. In addition, you have the rights that the data protection law of your country gives you, and you exercise them in the same way, by writing to privacy@attimi.app.

If you live in Brazil (LGPD, Article 18) you have the right to obtain: confirmation that we process your data; access to the data; correction of incomplete, inaccurate or out-of-date data; anonymisation, blocking or deletion of data that are unnecessary, excessive or processed in breach of the law; portability; deletion of the data processed with your consent; information about the parties we share them with; information about the possibility of not giving consent and the consequences of refusing; withdrawal of consent. You can also object to processing and ask for a review of decisions taken solely by automated means (Article 20). Write to privacy@attimi.app: it is free of charge. We give you confirmation that we process your data and access in simplified form straight away; the full reply (origin of the data, criteria and purposes) within 15 days of your request (Article 19), and we answer other requests within the same period. You can also turn to the ANPD (Article 18, § 1) and to consumer protection bodies such as Procon (Article 18, § 8). The legal bases are those in section 5 (under the LGPD: performance of the contract, Article 7, V, including notifications if you turn them on; legitimate interest, Article 7, IX; legal obligation, Article 7, II; consent, Article 7, I, and, for sensitive data, Article 11, I); for the gender you are looking for, from which your sexual orientation can be inferred, consent is specific and highlighted: you give it with a dedicated checkbox, only for deciding who appears in your list (Article 11, I); without it, you cannot use Attimi (Article 18, VIII).

If you live in Colombia (Ley 1581/2012, Article 8) you have the right to know, update and correct your data; to ask for proof of the authorisation you gave us; to be told how we use them; to lodge a complaint with the Superintendencia de Industria y Comercio; to withdraw the authorisation or ask for the data to be deleted; to access your data free of charge. We answer requests within 10 business days and complaints within 15 business days. The database stays active for as long as the service is active; each person's data is kept as described in section 13. The gender you are looking for is sensitive data: you are not obliged to provide it, but without it Attimi cannot suggest compatible people, so to use the app we ask for your explicit consent (section 4).

15. Deleting your account

You can delete your account and data yourself through "Delete account" in your profile (with double confirmation). Deletion removes your profile and, by cascade, the connected data (photos, messages, sessions with coordinates, blocks, reports received, verification requests) and the authentication user. The same applies to accounts created with Google or Apple: the authentication user is deleted together with the linked identity. We do not revoke the token on Apple's side: if you wish, you can remove Attimi from the "Sign in with Apple" list in your iPhone settings; likewise, in your Google account settings you can see and remove Attimi's access.

The reports you made remain in the moderation queue, no longer linked to your account, together with the attached copy of the messages (section 9): otherwise deleting an account would be enough to make a report disappear. Once decided, the report stays archived (closed) for as long as the reported person's account exists, as in the table in section 13; the copy of the messages is deleted 90 days after closure.

Deletion is also available via the web, without needing to log in or reinstall the app, at https://www.attimi.app/delete-account (or by writing to privacy@attimi.app).

Some information may persist for a limited period in backups, or be retained where necessary to comply with legal obligations or to establish, exercise or defend a legal claim (e.g. handling reports of abuse).

16. Minimum age (18) and protection of minors

Attimi is restricted to adults (18+). Use by minors is prohibited.

• At sign-up, an explicit confirmation of being at least 18 and acceptance of this notice are required (mandatory checkbox).
• Age verification through an identity document is temporarily suspended; at this stage we rely on self-declaration, on the check with Google Play where it is available and on moderation (including a report category for "minor"). A plan to re-enable document verification is in place.
• On Android we ask Google Play for the age range of your account (section 3.10): if Google says you are under 18, the account cannot be created, and with an account that already exists the app signs out, does not let you in and reports it to us, so that we remove the account. Where a law requires Google Play to verify age (for example in Texas) and the verification is missing, the app asks you to complete it in the Play Store before you can enter. In Brazil declaring that you are 18 is not enough: every time the app starts, the age range from Google Play is required.
• Before you can chat we show you the "Your safety" notice, with tips for meeting people and the statement that Attimi does not conduct criminal background screenings on its members; it always stays available on the Help page.
• If we detect, or receive a credible report, that a user is a minor, we remove the account and the data.
• As a social app we adhere to child safety (CSAE) standards, with in-app reporting and a point of contact: childsafety@attimi.app.

17. Data security

We apply appropriate technical and organisational measures (Article 32 GDPR), including:

• Row Level Security (RLS) on all tables: everyone accesses only their own data;
• exact position never stored: the ±300 m obfuscation is applied server-side before writing, and no column in the database holds exact coordinates; the search for available people goes through a dedicated function that uses only the blurred coordinates and returns a distance already rounded by the server; activations in a short time are limited (10 an hour, 30 a day);
• private "verifications" bucket for documents (admins only); "avatars" bucket with no public listing and write access limited to your own folder;
• authorisation checks in server functions (caller identity = user; operations on chats and requests restricted to participants); the anonymous role revoked from application functions;
• secrets and API keys kept server-side, never bundled in the app;
• no password for accounts created with Google or Apple: the provider's identity token is verified by Supabase Auth at sign-in and is not kept;
• encryption in transit (HTTPS/TLS) for all communications;
• Sentry with sendDefaultPii:false (no email/IP by default);
• automatic retention: availability sessions expire on their own and their blurred coordinates are cleared after 30 days; conversations delete themselves when the "don't keep chats" option is on; complete deletion of data on request.

In the event of a data breach posing a risk to your rights, we will notify the Italian Data Protection Authority within 72 hours (Article 33) and, in high-risk cases, inform the data subjects (Article 34).

18. Notifications

The app can show you notifications (new chat request, expiry, new message) subject to your consent to the relevant system permission (through the Expo infrastructure). You can turn them off at any time from your device or app settings. In the web app there are no notifications for now: to see who writes to you, keep the page open while you are available; we will update this notice before adding them.

To be able to understand why an alert did not arrive, the server records for 30 days to whom, when, of what type and with what outcome each alert was sent and, if it was not sent, why (permission not granted, "Never" or "Only while I'm available" setting, suspended account) and whether it fell in the night-time quiet band (section 13): never the text of the alert, which is not stored anywhere. The outcome is Expo's reply (alert accepted or rejected), not a confirmation that the phone displayed it. Only the Controller reads this technical log, from the administration panel; its basis is our legitimate interest in making alerts work (section 5), and it is deleted together with the account.

19. SDKs and technical components (no advertising or profiling)

The app does not use advertising profiling cookies or marketing/tracking SDKs. It uses technical components: Sentry (crash diagnostics, no email/IP by default), Crisp (support chat loaded in a WebView; support messages are processed by Crisp), the Expo notification infrastructure and the Google and Apple sign-in libraries, used only for the "Continue with Google" / "Continue with Apple" buttons (section 3.1). Your login session is stored locally on your device to keep you signed in.

The web app app.attimi.app. In the browser, Attimi uses the same technical components as the app: Sentry for crashes, Crisp for support (inside a frame in the page) and the Google and Apple sign-in components (section 11). No profiling cookies and no banner: the web app stores in the browser's memory only what it needs to work — your login session, so you don't have to sign in every time; your language and a few technical preferences (for example whether you have already read the "Add to Home Screen" guide); a few working notes about your account, such as the list of conversations already seen, the duration of your current availability and the outcome of the age check — that is, the "strictly necessary" storage that the law exempts from consent (Article 122 of the Italian Privacy Code). The session and the notes about your account disappear when you sign out; your language and preferences stay until you clear your browser data. If you use Attimi both from Safari and from the icon on your iPhone's Home Screen, the two memories are separate. The pages of the web app are delivered by Cloudflare, like the website, with the same cookie-free statistics described below.

The website www.attimi.app. To know how many people visit the site we use Cloudflare Web Analytics, a service of Cloudflare, Inc., the company that already hosts the site. It does not use cookies, stores nothing on your device and does not recognise you from one visit to the next or across other sites: it records the page viewed, the site you came from, the type of browser and device and the country, and we see only totals (for example "120 visits from Italy this week"). We use it only to understand how many people arrive and from where; the legal basis is our legitimate interest (Art. 6.1.f). Like any service that hosts a website, Cloudflare necessarily receives your IP address in order to show you the pages; for the statistics it derives only the country from it. Cloudflare processes these data on our behalf, including in the USA, and is certified under the EU–US Data Privacy Framework.

20. Complaint to the supervisory authority

If you believe the processing infringes the GDPR, you may lodge a complaint (Article 13.2.d):

Garante per la protezione dei dati personali — Piazza Venezia 11, 00187 Rome, Italy — Switchboard +39 06 696771 — certified email protocollo@pec.gpdp.it — www.garanteprivacy.it. You may also contact the authority of the EU country where you live or work. If you live outside the European Union, you may also contact the data protection authority of your country: in Brazil the Agência Nacional de Proteção de Dados (ANPD) — www.gov.br/anpd —, through the gov.br service "Abrir requerimento relacionado à LGPD": for a complaint as a data subject ("petição de titular") you must first have written to us and attach proof of the request left unanswered; a report ("denúncia") can be made by anyone, even without writing to us first; in Colombia the Superintendencia de Industria y Comercio (SIC) — www.sic.gov.co.

21. Changes to this notice

We may update this notice to reflect changes to the service or to the law (e.g. enabling translation with a compliant provider, enabling payments, or enabling identity verification). In case of material changes we will inform you through the app and/or by email. The date and version are shown at the bottom.

22. Contact

• Controller: Mirco Orecchini
• Email: privacy@attimi.app
• Account deletion via the web: https://www.attimi.app/delete-account

Attimi — privacy notice. Last updated: 6 November 2026 — Version 1.15. Android app package: com.attimi.app — iOS app: app.attimi.

Version 1.15 changes (6 November 2026): Attimi can also be used from a browser, at app.attimi.app, with the same account (sections 1 and 2): "Continue with Google" and "Continue with Apple" in the web app too, where the sign-in components are loaded from Google's and Apple's servers (sections 3.1 and 11); the location provided by the browser, handled as always (section 7); the session stored in the browser's memory, with no profiling cookies and no banner (sections 12 and 19); the web app pages delivered by Cloudflare like the website, with the same cookie-free statistics (sections 11 and 19); no notifications in the web app for now (section 18). No new data stored on the server; nothing changes for people who use the app on their phone.

Version 1.14 changes (28 October 2026): Attimi is coming to Brazil, the United States, Puerto Rico and Colombia too. On Android the app asks Google Play for the age range of your account, to keep minors out, and does not store it (sections 3.10, 5, 11 and 16); if the phone is in Brazil, every time the app starts. Before you can chat the "Your safety" notice appears, and we keep the date on which you read it (sections 3.8 and 16). Rights, response times and authorities for people who live in Brazil and Colombia (sections 1, 12, 14 and 20). The profile description goes up to 300 characters (section 3.2). The notice is now also available in Portuguese (section 2). For people who live in Brazil we explain collection, notifications and rights more clearly, with the new name of the authority (sections 1, 2, 12, 14 and 20). For everyone, sections 4 and 5 describe the consent for gender and preference as it really is in the app, with its dedicated checkbox. For people who live in the European Union, apart from that, the only changes are the date on which you read the "Your safety" notice and, once Google makes it available here too, the age check with Google Play. Wording update of 29 October 2026, with no change to the data processed: Attimi is described as a social app, and the choice of who you see is "Show me: Men, Women, Everyone" (sections 2, 4, 5 and 7).

Version 1.13 changes (26 October 2026): for people who live outside the European Union: the notice applies in the same way, plus the rights given by the law of their own country and the possibility of contacting their own authority (sections 14 and 20); data travels from their country to the EU and, for notifications, to the USA (section 12). Nothing changes in the data processed, nor for people who live in the EU.

Version 1.12 changes (13 October 2026): who can see you while you are available: not only people near you but also people farther away, who see only a rounded distance (sections 2 and 7); a chat request from outside your radius shows roughly how far away it comes from (section 7); the distance is now rounded by the server and activations are limited to 10 an hour and 30 a day (sections 7 and 17); a residual risk is stated plainly (section 7); the alert for an accepted chat request is removed; the alerts for a chat request, for a new message and for your availability about to expire stay (section 18). People who already have an account are told about this change inside the app, the first time they open it after updating (section 21). No new personal data is stored, apart from the number of the version of this notice that was shown to you (so that the notice is not repeated): the distances are calculated at the moment, and the server only keeps a daily count, with no reference to people, of how many chats start between people far from each other.

Version 1.11 changes (23 September 2026): the notice now covers the website too. Section 2 includes the website www.attimi.app; section 19 explains that we count visits to the site with Cloudflare Web Analytics, without cookies, seeing only totals. Nothing changes for the app or for the data of the people who use it.

Version 1.10 changes (15 September 2026): two new ways to sign in, declared before being switched on: "Continue with Google" (Android and iOS) and "Continue with Apple" (iOS only), alongside email + password, which always remains available and which nobody is required to replace. Section 3.1 says what we receive from the provider (only your email address, already verified; from Apple, if you choose "Hide My Email", a relay address), what we do not store (profile name and photo), that these accounts have no password, how an existing account with the same email is linked and when the consents are asked; section 5 mentions the email passed on by the provider; sections 11 and 12 add Google LLC and Apple Inc. as independent controllers of the sign-in step, with servers also in the USA (EU–US Data Privacy Framework certification); section 15 says that deletion is the same and how to remove Attimi from "Sign in with Apple"; section 17 that the provider's token is verified and not kept; section 19 mentions the sign-in libraries; section 13 updates the maximum length of an availability session, now up to 6 hours. No new purpose, no new retention period, no advertising, no data sold.

Version 1.9 changes (14 September 2026): no new processing, five clarifications. Section 2 now says that the notice is also available in Spanish, French and German (the Italian text prevails); section 3.1 says that the password is stored as a hash, not "in encrypted form"; section 3.3 quotes the two options with the names they have in the app ("don't receive messages while I'm offline", "don't keep chats") and clarifies that the first one blocks messages while you are the one who is not available; in the table of section 13 the cross-reference to the "Reports/moderation" row now uses the row's actual name. In section 16 the child safety (CSAE) point of contact is childsafety@attimi.app, the same as on the website's legal page (before: privacy@attimi.app).

Version 1.8 changes (4 September 2026, late evening): two retention periods not declared before. Sign-ups never confirmed (the confirmation email is resent up to 3 times within 7 days) are deleted 30 days after sign-up (sections 3.1 and 13); the administrative access log (every reading from the Controller's panel is recorded) is kept for 12 months (section 13). Both deletions are automatic, every night.

Version 1.7 changes (4 September 2026, evening — corrections after the internal review): section 2 says that this notice covers the app for Android and for iOS; section 5 gives the technical log of notifications a legal basis (legitimate interest), and sections 3.8, 13 and 18 say in full what it contains (including the reason for a non-sent alert and the quiet band) and that the outcome is Expo's reply, not delivery to the phone; section 9 and the table in section 13 say that a deleted conversation disappears from the server immediately, not "within 24 hours"; the blurred coordinates of availability sessions are now cleared 30 days after the session (sections 13 and 17): before, they stayed until the account was deleted. No new processing operation, no new recipient.

Version 1.6 changes (4 September 2026): a technical log of notifications, declared before use (sections 13 and 18). For every alert the server tries to send, it records for 30 days to whom, when, of what type and with what outcome — never the text of the alert, which has no place to be written at all. It serves to answer anyone who says "I don't get notifications" and to verify sending tests. No new recipient: Expo already received the same alerts. Deleted with the account.

Version 1.5 changes (4 September 2026): a new processing operation, declared before use. When a conversation is reported (by a participant, or by the automatic filter), the server copies its latest messages — at most 200 — and keeps them separately for moderation only, until 90 days after the report is closed, and in any case within 12 months (sections 3.7, 5, 9, 10, 13 and 15). Until now a reported conversation could vanish before being read, leaving moderators with an empty report. Three related clarifications: the reports you made stay in the queue even if you delete your account (sections 10 and 15); automatic suspension counts distinct reporters whose account is older than 24 hours, and one open report per pair (section 10); no new recipient, no data sent to third parties.

Version 1.4 changes (13 August 2026): the description of location handling in sections 3.4, 7, 13 and 17 was corrected. Earlier versions stated that the server stored "both the real coordinates and a blurred version". That stopped being true on 6 August 2026: since that date the ±300 m blurring is applied BEFORE anything is written, the columns that held exact coordinates were deleted along with their history, and no column in the database holds a precise position any more. The notice therefore described LESS protection than the service actually provides. No change to the processing: only the description changed, and it now matches how the service is built. No new purpose, no new recipient, no new data collected.

Version 1.3 changes (12 August 2026): the notice at the foot of the document describing it as a technical draft was removed. No change to the processing: purposes, legal bases, recipients, retention periods and rights are identical to version 1.2. The English translation of this notice — already announced in section 2 — was published at the same time; in case of discrepancy the Italian text prevails.

Version 1.2 changes (4 August 2026): section 9 and the corresponding row of the retention table were clarified. The text used to say "when you have turned on the 'don't keep chats' option" and "when you delete the conversation", implying that only your own choices counted. In reality, deleting a conversation is symmetrical: it applies to both participants and can also be triggered by the other person (deleting the chat, the "don't keep chats" option being active for even one of the two, deleting their account). This is a deliberate choice protecting the confidentiality of both parties. No change in behaviour: the app has always worked this way, only the description changed. No new processing, no new purpose, no new recipient.

Version 1.1 changes (30 July 2026): section 9 and the retention table in section 13 were corrected. Version 1.0 stated that messages "self-delete 24 hours after the match expires": in actual operation this does not happen automatically, because since chat approval was disabled matches no longer move to the "expired" state on their own. The text now describes the three cases in which messages are genuinely deleted.