This policy applies to the Musevo mobile app and this website (together, the “Service”). We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller responsible for processing your personal data is Cubera Solutions AG, General-Wille-Strasse 96, 8706 Feldmeilen, Switzerland. For any privacy matter you can reach us at info@cubera.ch. Our data protection officer is Pascal Hauser.
2. What we collect
- Account & profile: your email address, chosen handle, and password, plus anything you add to your profile such as an avatar and a short line about your craft. Your password is always scrambled (hashed) before it is saved, so no one, not even us, can read it.
- Content you create: the artworks you upload together with any title or notes you add, and the pieces or journeys you bookmark and save. To add artwork, you can grant the app access to your camera or photo library; images are uploaded only when you choose to add them.
- Usage & log data: limited technical information — device type, operating system, app version, IP address and server logs — needed to deliver, secure and monitor the Service, together with aggregate counts such as how many times a piece has been viewed. We do not build behavioural profiles of you.
Musevo has no likes and no comments by design, so we do not collect or store social-engagement metrics on your work. The app contains no advertising and no third-party tracking or analytics SDKs, and does not track you across other apps or websites.
Some of the artworks you create are yours alone; content you choose to share is stored so that it can be shown to other people using the Service and is retrievable via its own web address. Please only share work you are comfortable making visible to others.
3. Why we use it and on what legal basis
- To provide your account and the core features of the app, and to store and display the artworks and journeys you create or save — to perform our contract with you (Art. 31 FADP; Art. 6(1)(b) GDPR).
- To send verification codes, password resets and essential service notices — also to perform our contract with you and to keep your account secure.
- To keep the Service secure, prevent abuse, moderate reported content and improve it — on the basis of our legitimate interests in operating a safe, reliable Service (Art. 6(1)(f) GDPR).
- For anything optional, only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Who we share it with
We do not sell your personal data. We share it only with the service providers that help us run the Service, each under an appropriate data-processing agreement:
- Microsoft Azure— hosts the Service and stores your account data and uploaded content, in data centres in Switzerland.
- Twilio SendGrid— delivers our transactional emails (verification codes, password resets, service and moderation notices) and receives your email address for that purpose.
- Apple and Google— operate the App Store and Google Play, from which you download the app; they process limited download and diagnostic information under their own privacy policies.
We also monitor the health and security of the Service using our own logging and observability systems operated on our behalf within our infrastructure.
5. Where your data is stored and transfers abroad
Your account data and uploaded content are stored in Switzerland(Microsoft Azure, Switzerland region). The main processing that takes place outside Switzerland is the delivery of our emails through SendGrid in the United States; for that transfer we rely on a recognised safeguard (the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework).
6. How long we keep it
We keep your data for as long as your account is active. You can delete individual pieces of content or close your account at any time, after which we delete or anonymise your personal data within 30 days, except where we must retain certain data by law. Residual copies in encrypted backups are removed as those backups rotate.
7. Your rights
Subject to applicable law, you have the right to access your data and to have it corrected, deleted, restricted or ported, to object to certain processing, and to withdraw any consent you have given. To exercise these rights, contact info@cubera.ch. You also have the right to lodge a complaint with a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or your local data protection authority in the EU.
8. Children
Musevo is not intended for children under 13. If you are younger than the age of digital consent in your country, you may use the Service only with the involvement of a parent or legal guardian. We do not knowingly collect personal data from children below these ages; if you believe we have, please contact us and we will delete it.
9. How we protect your data
We use appropriate technical and organisational measures to protect your data, including encryption of data in transit, hashed passwords and access controls. No online service can be guaranteed to be completely secure, but we work to keep the risk as low as possible.
10. Cookies & analytics on this website
This marketing website uses only the cookies strictly necessary for it to function, and serves its fonts from our own servers rather than a third party. It does not run third-party advertising or tracking. If we ever add optional analytics, we will describe them here and, where required, ask for your consent first.
11. Changes to this policy
We may update this policy from time to time. We will post the new version here and, for material changes, notify you in the app. The date at the top shows when it was last updated.
12. Contact
Questions about your privacy? Write to info@cubera.ch.