Privacy policy
Last updated: 14 July 2026
At Quedeo we take your privacy seriously. This policy explains what personal data we process when you use our website (quedeo.com) and our application (app.quedeo.com and the mobile apps), for what purposes, on what legal basis, who it is shared with and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
The controller of your data is Rubén Méndez Vallés, acting as a sole trader (self-employed) and owner of Quedeo.
- Privacy contact email: contacto@quedeo.com
You can use that address for any question about this policy or the processing of your data, including to exercise your rights.
2. What data we process
| Category | Data |
|---|---|
| Account | Email address and password (always stored hashed/encrypted, never in plain text). |
| Profile | Name or nickname, date of birth (used to show your age), gender, city, bio, interests, languages and any photos you upload (profile picture and gallery). |
| Service activity | Plans you create (title, description, category, date, time and the location you choose), plans you join, contacts, chat messages and favourites. |
| Technical data | IP address, device and browser type, and the session identifiers needed to keep you signed in. |
We only process the data you give us when you sign up and use the service, plus the minimum technical data needed for it to work and stay secure. We do not access your device's GPS: a plan's location is the one you choose on the map, and your profile city is text you enter yourself.
3. Purposes and legal basis
- Creating and managing your account and profile and providing the service (showing plans, letting you join or create them, contacts and chat). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Security and abuse prevention (for example, limiting sign-in or sign-up attempts per IP address). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Service communications, such as verifying your email or important notices about your account. Legal basis: performance of the contract and legitimate interest.
- Complying with legal obligations where applicable. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Who we share your data with
We do not sell your data. To provide the service we rely on providers that act as processors or necessary recipients:
- Cloudflare, Inc. — content delivery network (CDN), DNS, security and hosting of the website and app. It processes IP addresses and request traffic.
- OpenStreetMap Foundation (Nominatim) — when you search for or choose a plan's location, your query is sent to turn it into an address/coordinates.
- CARTO (CartoDB) — provides the map tiles (images) shown in the app.
- Google (Google Fonts) — the website loads its typeface from Google's servers, which receive the visitor's IP address to serve the font.
The server and database where your data is stored are hosted in Spain (European Union).
In the future we will add sign in with Google (which would share your Google account's email, name and picture with us) and an email provider to send verification emails. We will update this policy when those services go live.
5. International transfers
Some providers (such as Cloudflare or Google) are US companies and may process data outside the European Economic Area. Where that happens, such transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
6. How long we keep your data
We keep your data while your account is active. If you delete your account or ask us to, we erase it, except for anything we must keep to comply with legal obligations. Note that messages you have sent in group chats may remain visible to the other participants.
7. Your rights
You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent you have given. To do so, write to contacto@quedeo.com stating the right you wish to exercise. We may ask you to verify your identity.
If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
How to delete your account
You can delete your account and all your data at any time from within the app, under Settings → Delete account. Deletion is immediate and irreversible. Alternatively, you can request it by emailing contacto@quedeo.com from your account's email address.
8. Security
We apply reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), passwords stored using hashing functions, token-based authentication and restricted access to the information.
9. Minors
Quedeo is a service exclusively for people aged 18 and over. We do not allow anyone under 18 to register, and age is checked at sign-up. If we find that an account belongs to someone under 18, we will delete it.
10. Cookies and local storage
The app stores a session identifier on your own device (browser or mobile local storage) to keep you signed in between visits. We do not use advertising or tracking cookies, or any third-party analytics. The web version remembers your language through the page URL.
11. Changes to this policy
We may update this policy to reflect changes in the service or in the law. We will always publish the current version on this page, showing the date it was last updated.
12. Contact
For any question about this policy or the processing of your data, write to us at contacto@quedeo.com.