Privacy Policy

Elekeza operated by Investitsia SA
Last updated 14 October 2026

This Policy explains how we process personal data in the Elekeza website at elekeza.app and Android application.

1 Controller and contact

Investitsia SA, Avenue Louis-Casaï 81, 1216 Cointrin, Switzerland, is the controller. For privacy enquiries or requests, email support@elekeza.app or write to this address.

2 Data we process

We process information you provide, information generated when you use Elekeza and information received from service providers or other users:

• Account and profile: telephone number, email address, account and sign-in information, profile photo, city, date of birth and gender.
• User content: tasks, assignments, dates, statuses, manually entered locations, messages, reviews, ratings, images and support correspondence.
• Technical data: IP address, browser or device information, operating system and app version, session information, timestamps, technical identifiers and error or crash information, including data processed by map components.

A telephone number or email address is necessary for your chosen sign-in method. Other data depend on the fields you complete and features you use. Please avoid submitting unnecessary sensitive information or another person’s private data.

The app does not obtain your device’s location. You select your region manually. Map providers can nevertheless receive your IP address, technical data and the map area requested.

3 Purposes and legal grounds

We use data to register and authenticate users; provide profiles, tasks, chat, reviews and maps; respond to enquiries; maintain and protect the service; prevent abuse; handle deletion and privacy requests; and meet legal obligations or defend legal claims.

Where applicable law requires a legal basis, we rely on contract for requested features, legitimate interests for proportionate security, service operation, support and legal claims subject to your rights, legal obligations, or consent where required. Consent may be withdrawn without affecting earlier lawful processing. This Policy does not itself constitute consent to optional processing.

We do not make solely automated decisions producing legal or similarly significant effects.

4 Visibility and recipients

User content requires sign-in. Visitors without an account can view the public landing page. Profiles, tasks and reviews are available to signed-in users with access to the relevant feature; chat messages are addressed to their participants. Authorised personnel may access data where necessary for operation, support, security or a legal matter. Do not assume that information you share with other users is confidential.

We use hosting and storage providers, SMS delivery providers and mobile operators, email infrastructure and map providers. They process the information needed for their role, such as hosted account and content data, telephone numbers and verification messages, email addresses and correspondence, or map requests and technical data. We may also disclose necessary information to advisers or authorities for a specific legal obligation or claim.

Android maps use Google Maps, which can process IP addresses, device and request metadata, an SDK identifier and crash information. See the Google Privacy Policy. Browser maps also involve technical requests to map infrastructure.

Hosting is in Switzerland. SMS, email and map services can involve international processing, including the EEA, United States and countries involved in provider routing. Where required, transfers need an applicable adequacy decision or contractual safeguards. Contact us for the countries and safeguards applicable to your data.

5 Cookies and security

We use cookies and similar storage for sign-in and service operation. Session storage lasts for the session; persistent storage remains until its configured expiry or earlier removal. Browser settings let you inspect and clear it, which may affect sign-in. Non-essential storage requires separate consent where applicable law requires it. The current service has no separate advertising or analytics SDK.

We use HTTPS to protect data in transit. Access and disclosure are limited to authorised service, support, security and legal purposes. No system can guarantee absolute security. Applicable breach-notification requirements apply.

6 Retention and account deletion

For an active account, we retain data as necessary to provide the service and handle related enquiries.

To request deletion, sign in through the app or website, open your profile or personal account area, select Delete account and confirm. This deletes the account used across both versions. Without access to the account or app, email support@elekeza.app with the registered telephone number or email address. Do not send passwords or sign-in codes. Any identity check must be proportionate and prompt.

Both deadlines run from receipt of the same request. Sign-in is disabled and active sessions are revoked when the request is confirmed. Deletion includes profile fields, contact details, photos and associated personal data in tasks, messages, reviews and other content; blocking access alone is insufficient.

Necessary shared-task history may remain for the other participant, labelled Account deleted, without a profile link, photo or contact details. Indefinite retention applies only where remaining information no longer identifies the deleted user, including when combined with information reasonably available to the other participant. Replacing a name alone is insufficient. The other participant’s own privacy rights continue to apply.

Only specific records necessary for a legal obligation, a particular claim or documenting a privacy request may be retained beyond normal deletion, for the period required by that obligation or while necessary for the identified matter, with restricted use and access. This does not justify keeping the whole account indefinitely.

Backups awaiting rotation are restricted to recovery and continuity purposes. Deletion is reapplied before restored data return to ordinary use, and relevant instructions are sent to processors acting for us. Independently held copies outside our control cannot necessarily be removed.

7 Your rights

Depending on applicable law, you may request information, access, correction, erasure, restriction or portability, object to relevant processing, withdraw consent and complain to a competent authority. Where data are used for direct marketing, applicable rights to object also apply.

Contact us using Section 1. We respond within the applicable deadline: Swiss access requests are normally answered within 30 days; EU or UK GDPR requests generally within one calendar month, with any permitted extension explained. These periods do not replace the deletion deadlines above.

You may contact the Swiss Federal Data Protection and Information Commissioner, the UK Information Commissioner’s Office or another competent authority where applicable.

8 Children and changes

Elekeza currently has no single worldwide minimum-age restriction. Local rules on eligibility, legal capacity and parental authorisation apply. Where prior parental authorisation is legally required, it must be obtained before the relevant processing; entering a date of birth is not verified parental consent. Parents or guardians can contact us to request appropriate correction, restriction or deletion.

We publish updates at elekeza.app/privacy, revise the date above and provide additional notice or obtain fresh consent where required.