Ahaondéag — Privacy Policy

1. Introduction

Ahaondéag (“we”, “our”, “us”) is committed to protecting your privacy and collecting only the data needed to operate a safe, meaningful, and human-scale social network.

This Privacy Policy explains what information we collect, why we collect it, how we use it, how long we keep it, and what rights you have under data protection law (including GDPR).

By using Ahaondéag, you agree to this Privacy Policy.

2. Information We Collect

We collect only the information necessary to provide our services and maintain safety.

2.1 Account Data

• Email address
• Password (encrypted using secure hashing)

We use this data to create, secure, and manage your account and to send essential communications (e.g., verification emails).

2.2 Verification & Security Data

• IP address
• Basic device and browser information
• Login timestamps

This helps us detect suspicious activity, prevent abuse, and protect accounts from unauthorised access.

2.3 Activity Data

• Posts and comments
• Ideas and idea stages
• Votes on ideas
• Flags raised on content
• Group membership (public and private)

We use this information to make Ahaondéag function: to show posts, track ideas and votes, support the flagging system, and maintain group history.

2.4 Chat Data

• 1-to-1 chat threads
• Messages exchanged within those threads

Private chats are stored so that you and the other participant can see your conversation history. If there is no activity in a chat for 11 weeks, the entire conversation (thread and messages) is automatically deleted.

2.5 System Data

• Server and error logs
• Essential cookies (see Cookie Policy)
• Non-identifying technical metadata (e.g., browser type)

This helps us monitor system performance, debug issues, and protect against attacks.

3. Data We Do Not Collect

• We do not use advertising or marketing trackers.
• We do not sell or rent your data to third parties.
• We do not embed third-party tracking pixels (e.g., social media ad pixels).
• We do not keep 1-to-1 chat data beyond the defined retention period.

4. How We Use Your Data

We use your data strictly for the following purposes:

• To create and manage your account and login sessions.
• To operate groups, posts, ideas, votes, and flags.
• To detect and prevent abuse, spam, and security threats.
• To send essential notifications (e.g., verification, rotation notices).
• To improve performance and stability using anonymised statistics.

We do not use your data to build advertising profiles or deliver targeted marketing.

5. Legal Basis (GDPR)

Under the EU GDPR, our lawful bases for processing your data include:

• Contract – providing access to Ahaondéag and its core features, which requires us to process your account and activity data.
• Consent – for optional features where we explicitly ask for your agreement. You may withdraw consent at any time.
• Legitimate interest – maintaining security, preventing abuse, and improving the service in ways that respect your privacy.
• Legal obligation – where we must retain or disclose information to comply with applicable laws or orders.

6. Cookies

Ahaondéag uses a small number of cookies for login, security, and simple preferences (such as theme choice). These are described in detail in our Cookie Policy.

You can control cookies through your browser settings. However, blocking essential cookies may prevent you from logging in or using key features.

7. Data Retention

We keep data only as long as necessary for the purposes described above.

After these retention periods, data is permanently erased from live systems and scheduled to be removed from backups.

8. Your Rights

Under GDPR and similar laws, you have several rights regarding your personal data. Subject to certain conditions, you may:

• Access – request a copy of the data we hold about you.
• Rectification – ask us to correct inaccurate or incomplete data.
• Erasure (“Right to be Forgotten”) – request deletion of your account and associated data, subject to legal and safety constraints.
• Restriction – request that we limit certain types of processing.
• Portability – request your data in a structured, commonly used format.
• Objection – object to processing based on legitimate interest or withdraw consent for optional features.

To exercise any of these rights, contact us at privacy@ahaondeag.ie. We aim to respond within 11 working days.

9. Data Sharing and Transfers

• Data is stored on secure servers located within the EU/EEA.
• We do not sell or trade your data with third parties.
• If we use service providers (e.g., for email or infrastructure), they will be bound by appropriate data protection agreements and GDPR-compliant safeguards.
• We do not transfer your personal data outside the EEA unless adequate protections are in place.

10. Security

We take security seriously and use a range of measures, including:

• Encryption of data in transit (HTTPS).
• Secure password hashing and salting.
• Access controls and server hardening.
• Rate-limiting and automated abuse detection.

While we work to protect your data, no online system can be guaranteed 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by law and, where applicable, inform the relevant data protection authority within 72 hours.

11. Public Content and Transparency

• Public idea boards display idea text, vote counts, and stages, but never usernames or identifiable personal details.
• Group moderation logs and flag actions remain visible only within the relevant group or to affected users.
• Aggregated, anonymised statistics may be used to communicate trends and community health.

12. Children’s Privacy

Ahaondéag is intended for users aged 16 and over. We do not knowingly collect information from children under 16.

If you believe a child under 16 has created an account, please contact us at privacy@ahaondeag.ie so we can investigate and delete the account if necessary.

13. Changes to This Policy

We may update this Privacy Policy from time to time as Ahaondéag evolves or legal requirements change.

• We will update the “Last updated” date at the top of this page.
• Where appropriate, we may notify you of significant changes within the app or by email.

Your continued use of Ahaondéag after changes take effect means you accept the updated Policy.

14. Contact and Complaints

If you have questions or concerns about this Privacy Policy or how we handle your data, you can contact us at:

📧 privacy@ahaondeag.ie
📍 Ahaondéag, Dublin, Ireland

You also have the right to lodge a complaint with your local data protection authority. In Ireland, this is the Data Protection Commission (DPC).