Privacy Policy
Last updated: 21 July 2026
This Privacy Policy explains which personal data we process when you use the mobile app Maynsta(“App”, “Maynsta”, “we”). Protecting your data matters to us. We process data solely on the basis of the EU General Data Protection Regulation (GDPR) and applicable law.
1. Controller
The controller responsible for data processing within the meaning of the GDPR is:
Maynsta GmbH
Email: contact@maynsta.com
2. What data we process
a) Account data
When you register and use your account we process: your email address, a securely hashed password, your display name, your unique @username, an optional bio as well as profile and cover image. If you sign in via Google or Discord, we receive your name, email address and, where available, a profile picture from these providers.
b) Content you create
Collections and “moments” you create: photos, videos, audio recordings, captions, tags, cover images, comments and likes. For each collection you decide whether it is private, public or visible only to selected friends.
c) Social & communication data
Follow relationships and requests, direct messages to other users, message reactions (emojis) and shared attachments. Messages are transmitted so the respective recipient receives them.
d) Technical & usage data
To provide the App we process technically necessary data such as your device/language setting, app settings (e.g. theme, screen-time limit) and a session token for signing in. A push token may be processed for notifications if you enable them.
Some settings (e.g. color/background, daily screen-time limit) are stored locally on your device only and are not transmitted to us.
3. Purposes & legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the account & core features (profile, collections, chat, feed) | Art. 6(1)(b) – performance of a contract |
| Showing content to the audience you choose (public / friends) | Art. 6(1)(b) – performance of a contract |
| Push notifications for new messages | Art. 6(1)(a) – consent (revocable at any time) |
| Security, abuse prevention, protection of minors, compliance with legal obligations | Art. 6(1)(c) & (f) – legal obligation / legitimate interest |
4. Sharing & services we use
We do not sell your data. To provide the App we use carefully selected processors:
| Service | Purpose |
|---|---|
| Supabase | Hosting of the database, user authentication and storage of media (photos/videos/audio) |
| Google & Discord | Optional sign-in (“Log in with Google / Discord”) |
| Expo (EAS) / Google Firebase Cloud Messaging | Delivery of app updates and push notifications |
| Google Play | Distribution of the app and crash reports |
Other users see the content you make public or share with them, as well as your profile (name, @username, bio, picture). We disclose data to authorities only where we are legally obliged to do so — in particular to protect children (see Child Safety Standards).
Depending on your provider’s server location, data may be processed outside the EU (e.g. in the USA). Please configure your Supabase region accordingly and, where applicable, add the relevant region and the basis for any transfer to a third country (Standard Contractual Clauses).
5. Retention period
We store your data for as long as your account exists and this is necessary for the purposes described. If you delete your account, your personal data is deleted unless statutory retention obligations require otherwise. Content you have shared may remain with recipients until they delete it.
6. Deleting your account & data
You can delete your account at any time directly in the App: Profile → “Delete account”. This removes your profile and its associated data. Alternatively, you can request deletion by email to contact@maynsta.com; we process the request within the statutory time limits.
7. Your rights
Under the GDPR you have the right to:
- access to the data stored about you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (“right to be forgotten”, Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing (Art. 21)
- withdraw consent with effect for the future (Art. 7(3))
To exercise these rights, simply message contact@maynsta.com. You also have the right to lodge a complaint with a data protection supervisory authority.
8. Minimum age & children
Maynsta is not directed at children. Use is permitted only from the age of 12 (or the minimum age for consent to data processing that applies in your country). If we become aware that a younger child has created an account without valid consent, we delete it. For the protection of minors from sexual content, see our Child Safety Standards.
9. Data security
Data is transmitted encrypted (HTTPS/TLS). Passwords are never stored in plain text. Access to content is controlled by access rules (Row Level Security) at the database level, so that only authorized users can see private or restricted content.
10. Changes to this policy
We may update this Privacy Policy to reflect changed features or legal requirements. The current version is always available at this address. The date above shows the latest revision.
11. Contact
For any privacy questions you can reach us at contact@maynsta.com.