Privacy Policy

Data Controller:

• Legal name: Societate cu Raspundere Limitata "CREATIVE CRAFTS"
• IDNO: 1021600036940
• Address: Moldova, Municipiul Chișinău, Trușeni, Str. Ghidighici 34
• Email: info@redu.md

Data Protection Officer (DPO):

Our designated DPO can be contacted at dpo@redu.md for any questions or requests relating to the processing of your personal data or the exercise of your rights.

When you use redu, the following information may be automatically collected:

• Device identifier (client_guid): A unique identifier generated by the app, used for analytics and API authentication. This is not linked to your personal identity.
• Technical headers (X-redu-Client): With each API request, the app sends your platform type, app version, locale, and screen density to ensure proper service delivery.
• Search queries: Your search terms may be logged server-side to improve search quality.
• Usage analytics: Anonymous data such as app opens, feature usage, and crash reports, collected via Firebase Analytics.

Under LP195/2024 and the GDPR, every processing activity requires a legal basis. The table below sets out each purpose and its corresponding legal basis:

Purpose	Data processed	Legal basis
Deliver the app and its features (search, compare, display prices)	Device identifier, technical headers	Legitimate interest — necessary to operate the service you requested
Improve search quality	Search queries (anonymized)	Legitimate interest — improve the service for all users
Analytics, bug fixing, and crash reporting	Usage analytics, crash reports (via Firebase Analytics)	Legitimate interest — maintain, secure, and improve the app
Respond to your feedback	Feedback message, optional email address	Consent — implied by your voluntary submission

Where processing is based on legitimate interest, we have assessed that our interest does not override your fundamental rights and freedoms, given that the data collected is minimal, non-identifying, and necessary for core app functionality.

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact dpo@redu.md.

We retain different types of data for different periods:

• Device identifier (client_guid): Retained while you actively use the app. Deleted upon request.
• Search queries: Retained for up to 12 months, then anonymized or deleted.
• Feedback messages: Retained for up to 24 months or until resolved, whichever comes first.
• Analytics data: Retained for up to 24 months, in accordance with Firebase Analytics retention settings.

You may request deletion of your data at any time by contacting dpo@redu.md.

We do not sell, rent, or trade your personal data. We use the following third-party data processor:

• Google LLC (Firebase Analytics): Processes anonymous usage analytics and crash reports on our behalf. Google acts as a data processor under a data processing agreement. Google's privacy policy: policies.google.com/privacy.

No other third parties receive your personal data.

Under LP195/2024 and the GDPR (where applicable), you have the following rights regarding your personal data:

• Right of access (Art. 15): Request confirmation of whether your data is being processed and obtain a copy.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your personal data when it is no longer necessary or when you withdraw consent.
• Right to restriction (Art. 18): Request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our DPO at dpo@redu.md. We will respond within 30 calendar days. If your request is complex, we may extend this period by a further 60 days, with prior notification.

If you believe your personal data rights have been violated, you have the right to lodge a complaint with the supervisory authority:

• Centrul Național pentru Protecția Datelor cu Caracter Personal (CNPDCP)
• Address: str. Serghei Lazo 48, MD-2004, Chișinău, Republic of Moldova
• Website: datepersonale.md

We encourage you to contact our DPO first at dpo@redu.md so we can attempt to resolve your concern directly.

For general inquiries: info@redu.md

For data protection inquiries: dpo@redu.md

Postal address: SRL "CREATIVE CRAFTS", Str. Ghidighici 34, Trușeni, Municipiul Chișinău, Republic of Moldova