Privacy Policy

1. Data controller

The controller of your personal data is GadAAC (“we”, “us”). Contact: kontakt@gadaac.com.

2. What data we collect

GadAAC collects and processes the following data:

• Account data— your e-mail address and an encrypted password, when you create an account in the app.
• Preferences— the selected text-to-speech voice, symbol card size, and other app settings.
• Custom tiles— labels, photos, and category assignments of the tiles you create.
• Sentences built in the app— the content of sentences is NOT stored or transmitted by us. Sentences stay exclusively on your device.
• Subscription and payment data— subscription status, the selected plan, and transaction identifiers. We do not store your card details — they are handled by the stores (Apple, Google) and Stripe.

3. Why we process your data

• To let you sign in and sync your settings.
• To store and display your custom tiles across your devices.
• To match AI suggestions to the context of the sentence being built (AI mode).
• To manage the GadAAC Premium subscription and unlock premium features.

4. Third-party services

We use the following third-party services:

• Supabase— storage of account data, preferences, and custom tiles. Servers in the EU.
• ARASAAC(Centro Aragonés para la Comunicación Aumentativa y Alternativa) — pictograms used in the app. Loaded from the public ARASAAC CDN. License: CC BY-NC-SA 4.0.
• Google Gemini API— in AI mode we send the list of available symbols and the current sentence context to match suggestions. We do not send personal data.
• Firebase Hosting— hosting of the web version of the app. It does not collect personal data.
• RevenueCat— subscription and premium entitlement management across all platforms. It processes purchase status and transaction identifiers (not card details).
• Stripe— payment processing for subscriptions purchased through the website (app.gadaac.com).
• Apple App Store and Google Play— payment processing for subscriptions purchased in the mobile app and refund handling under the stores’ policies.

Some of these providers (including RevenueCat and Stripe) may process data outside the European Economic Area on the basis of standard contractual clauses.

5. Device permissions

The mobile app may ask for access to the following device features:

• Photo library— to pick a photo for a custom tile.

Photos are uploaded exclusively to your account in Supabase Storage and are not shared publicly.

6. Data retention

We keep your data for as long as you have an active account. The app also works without an account — in that case we do not collect any personal data.

7. Your rights

Under the GDPR, you have the right to:

• Access your data.
• Rectify inaccurate data.
• Erase your data (the “right to be forgotten”).
• Data portability.
• Withdraw consent at any time.

To exercise your rights, write to kontakt@gadaac.com.

8. Children

GadAAC is an app designed to support the communication of neurodivergent people, including children. Accounts are created by a parent or guardian. We do not knowingly collect data from children under 16 without the consent of a legal guardian.

9. Changes to this privacy policy

We will announce significant changes by updating this page. We encourage you to check back periodically.

10. Contact

Questions about privacy? kontakt@gadaac.com