Privacy Policy

Last updated: 9 October 2026

Controller / Holder: Raúl Moreno Rosales, NIF 43202495P, address Pasaje Buger 13, 07008 Palma de Mallorca, Illes Balears, Spain, email [email protected]. Trade name: XerraDa.

In short: we use your data only to make the app work (to show you, suggest matches and keep people safe). No analytics, no advertising, we never sell your data and we never ask for your GPS location.

1. Who processes your data

XerraDa is a service for meeting people in Mallorca. Controller: Raúl Moreno Rosales · contact: [email protected].

2. What data we process

From your account: email and phone. From your profile: name, date of birth (also to check you are over 18), gender, preferences, municipality, a short description and your photos. Data you choose to add to find better who you are looking for: intention, orientation, lifestyle and hobbies (you can hide your orientation). Content: your messages and everything you send inside the app. And internal usage and safety data: your credits and their history, and reports and blocks. We do not ask for health, ideology or religion data; we use no analytics or advertising and we do not sell your data.

3. Location

We do not ask for your GPS location. We only store the Mallorca municipality you choose on your profile, to show it to others. We do not track where you are or ask for location permission.

4. Photos and messages

Images are stored on an external hosting service (Cloudinary). Some images sent in the chat are temporary: they are destroyed automatically and are not kept in the conversation history.

5. Who we share with and for how long

With Supabase (database and authentication, servers in the European Union), Cloudinary (images), Expo/EAS (app distribution and updates) and your device store (Apple or Google) if there are ever paid services; all on our behalf. We only hand data to authorities when the law requires it. We keep everything while your account exists.

6. Minors and security

Adults only (18+): we check the date of birth and delete any minor account we detect. Encryption in transit (HTTPS), per-user access rules and automatic deletion of temporary content.

7. Your rights and changes

Access, rectification, erasure, portability, restriction and objection at [email protected]. You can delete your own account from Profile and complain to the Spanish DPA (www.aepd.es). If this policy changes we update the date and tell you in the app.