QueueTogether Privacy Policy

Version 2026-11-05. This policy explains how QueueTogether (the iOS app and the online service that runs it) processes personal data under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003. The Italian version prevails in case of conflict.

1. Data controller

• Controller: Francesco Guiducci, ditta individuale IFG Digital – IFG eCommerce
• Address: Via Pullino, Roma (RM), Italia – REA RM-1682220
• VAT number: 16879681001
• Privacy contact: info@ifgecommerce.com

No Data Protection Officer has been appointed, as one is not required for this processing. For any request write to info@ifgecommerce.com.

2. What the service does

QueueTogether lets private, invite-only groups share resources (for example desks, rooms, equipment) and manage turns in a queue. The service shows no advertising, does not sell personal data and does not use it for profiling or marketing.

3. Data we process

• Account data: internal account identifier, the display name you choose, language, notification preferences, creation date, account state, the accepted Terms version and the minimum-age confirmation.
• Sign-in data: with Sign in with Apple we keep only a hash of your Apple identifier and, encrypted, the token needed to revoke access when you delete your account; Apple may give us an anonymous relay address, which we do not keep. With Google we keep a hash of your Google identifier and your verified email address. With the email code we keep your email address. Email addresses are stored encrypted, together with a keyed hash used to recognise them; the sign-in code is stored only as a hash and expires after 10 minutes.
• Sessions: hashes of session tokens, the app installation identifier, expiry times.
• Push notifications: the device token for Apple Push Notification service (stored encrypted), environment (development/production), state and registration date.
• Purchases: for the Pro subscription Apple sends us a signed transaction: original transaction identifier, product, environment, dates (including the expiry date) and any refund or revocation, plus a random identifier of your account (appAccountToken) that the app gives Apple at purchase time. We never receive payment details: payment is handled entirely by Apple.
• Group and queue data (queue events): groups you belong to and your role, your queue entries, offers, uses and releases with their times, in-app notices, reports about resources (with any note you write), a technical log of the group's administrative actions. Group admins see members' display names, the queue state and the reports of their group. In groups with member visibility, other participants can also see the display names of people in the queue or using a spot. In private groups, those names are hidden from other participants.
• Reports and blocks between users: if you report another member we keep who reported, who was reported, the reported display name, the reason and any note; the list of members you blocked.
• Security data: the request IP address, used only as a hash to limit abuse (rate counters), and technical error logs that do not contain the content of your requests.
• Images you choose to upload: profile photos and images attached to shared resources or fault reports, together with upload identifiers, the author and dates. Images are resized and EXIF metadata, including any GPS location, is removed. Access depends on space membership, profile settings and moderation measures.

We do not process special categories of data (Art. 9 GDPR). Please do not enter such data in names or notes.

4. Purposes and legal bases

• Creating and running your account, signing you in, operating groups, queues, notifications, data export and deletion: performance of a contract (Art. 6(1)(b) GDPR), namely the Terms of Service you accept.
• Handling the Pro purchase, restores and refunds reported by Apple: performance of a contract (Art. 6(1)(b)).
• Service security, fraud and abuse prevention, rate limits, handling reports and removing users who breach the Terms: legitimate interests of the controller and of users in a safe service (Art. 6(1)(f)).
• Keeping a minimal purchase ledger after account deletion, to handle refunds and restores and for legal obligations: legitimate interests (Art. 6(1)(f)) and, where applicable, legal obligation (Art. 6(1)(c)).
• Answering requests from authorities or defending legal claims: legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)).

Account data is required to use the service; without it no account can be created. We make no decisions based solely on automated processing that produce legal effects on you. Names you enter are checked automatically to block slurs and links: if a name is rejected you can choose another one.

5. Providers and recipients

We use these providers, each only as needed for the service:

• Cloudflare, Inc. (USA): service hosting, database and compute, as processor.
• Apple Inc. / Apple Distribution International Ltd.: Sign in with Apple, Apple Push Notification service, App Store and in-app purchases. For the App Store and your Apple Account, Apple acts as an independent controller under its own policy.
• Google LLC / Google Ireland Limited: Sign in with Google, if you choose it. Google acts as an independent controller for its own account.
• Resend, Inc. (USA): delivery of the sign-in code emails, as processor.

Data may be transferred to the United States. These transfers rely on the EU-U.S. Data Privacy Framework adequacy decision for certified providers and/or on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR). You can ask info@ifgecommerce.com about the safeguards in place.

Admins of the groups you join see the group data described in section 3. We do not disclose data to other third parties unless required by law.

6. Retention

• Sessions: the access token lasts 15 minutes, a session at most 30 days from its last renewal; sessions end at logout or account deletion.
• Email codes: 10 minutes; records of expired codes are erased within one hour.
• IP-based security counters: erased within 24 hours after their window ends.
• Queue events (turns, offers, uses, in-app notices, group log): at most 90 days, except turns in progress; each group's log is also limited to its most recent events.
• Reports between users: at most 12 months; erased earlier if either account is deleted.
• Account and linked data: as long as the account exists. When you delete your account, data is erased from live systems usually within minutes and in any case within 30 days; groups you owned are closed and your data in other groups is anonymised.
• Backups: the provider's technical database backups are overwritten within 30 days.
• Purchase ledger: after account deletion we keep only the minimal Apple transaction data (identifier, product, dates, refund state) and the hash of the sign-in identity linked to the purchase's random identifier, to handle refunds and let you restore the purchase if you come back, for as long as required by law and never longer than 10 years.
• Images: a profile photo is kept until it is replaced, removed or the account is deleted. Resource and fault photos are kept for at most 90 days. Unattached photos are deleted after one hour, and photos of resolved faults within 7 days of resolution, always within the 90-day limit.

7. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection (Arts. 15-22 GDPR). You can exercise them directly in the app:

• Export your data: from the account settings you can download a copy of your data as JSON (profile, sign-in methods, groups, turns, reports, purchases, registered devices).
• Edit: change your display name, language and notifications in the settings.
• Delete your account: from the account settings, after verifying your identity again.
• Leave a group or block a member directly from the group.

You can also write to info@ifgecommerce.com; we answer within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

8. Minors

The service is only for people aged at least 16. We ask you to confirm this when you start. If we learn that an account belongs to a younger person, we delete it.

9. Security

Traffic is encrypted (HTTPS). Email addresses, notification tokens and revocation tokens are encrypted in the database; session tokens and codes are stored only as hashes. No measure is infallible: if a data breach affects you, we will inform you as required by the GDPR.

10. Changes

We may update this policy. Important changes will be announced in the app. The version date is shown at the top.