Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how the operator of the Connect2 mobile application (the "App") — referred to here as "we", "us", or "the Controller" — collects and uses your personal data. We are the data controller under the EU General Data Protection Regulation (GDPR). Full controller and registered-company details are at the end of this policy.

Contact: support@virtup.eu

1. Data we collect

Category	Details	Why
Location	Your device's approximate and precise GPS location while you use the App.	To show you on the map to nearby users and to match service requests and offers.
Profile	Username, "about me" text, optional profile photo, and the services you offer or request.	To let other users identify and contact you.
Messages & activity	Chat messages, service requests, offers, claims, and ratings/comments you send.	To operate the messaging and marketplace features.
Device identifiers	A randomly generated session ID and a PIN you set (used to sign requests), and a push-notification token.	To authenticate your device and send you notifications. We do not collect your name, email, or account credentials.
Donations	If you donate, payment is processed by Stripe. We receive confirmation of the transaction but never your full card details.	To process voluntary donations.
Technical/log data	IP address, request timestamps, and basic error logs.	Security, abuse prevention, and reliability.

2. Legal bases (GDPR Art. 6)

Performance of a contract — to provide the App's core features you request.
Consent — for access to your precise location, camera and photos, and push notifications. You may withdraw consent at any time in your device settings.
Legitimate interests — to keep the service secure, prevent abuse, and handle reports.

3. Who can see your data

Other users: your username, approximate location, profile, offered/requested services, and ratings are visible to other users of the App. Do not share information you want to keep private.
Service providers (processors): Stripe (payments), Google Firebase (push notifications) and Google Maps (map display), and our hosting provider. Some of these may process data outside the EU/EEA under appropriate safeguards (e.g. Standard Contractual Clauses).
We do not sell your personal data.
We may disclose data if required by law or to protect the rights, safety, or property of users or the public.

4. Retention

Location snapshots are kept for up to 7 days.
Messages, requests, offers and ratings are kept until you delete them or your device data is removed.
We remove or anonymise data we no longer need.

5. Your rights

Subject to GDPR, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact support@virtup.eu. Because accounts are tied to a device-generated identifier, you can also erase most of your data by deleting your content and uninstalling the App. You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

6. Children

The App is not intended for anyone under 18, and children may not use it. We do not knowingly collect data from children.

7. Security

We use encryption in transit (HTTPS), signed requests, and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

8. Changes

We may update this policy; the "Last updated" date will change. Continued use of the App after an update means you accept the revised policy.

9. Contact

Questions? Email support@virtup.eu.

Data controller & registered company

Virtup OpsSys d.o.o.
Registered address: Augusta Šenoe 1, 10000 Zagreb, Croatia
Company ID (OIB): 12943899387