Privacy Policy

Last updated: September 28, 2026

We take your privacy seriously. This policy explains what data we collect and how we use it.

1. Who we are

Liity is developed and operated by Semir Teskeredzic ("Developer", "we", "us"), based in the European Union. This Privacy Policy applies to the Liity iOS application and any related services.

2. Data we collect

We collect only the minimum data necessary to operate the App:

  • Name - used to identify you to other users within the App.
  • Email address - used for account authentication and functional notifications (activity invitations, reminders, updates). Other users who know your email address can use it to invite you to an activity. Your email address is never shown to other users. See section 3 for details.
  • Country and city - required to show you relevant local activities. This is a mandatory setting without which the App cannot function. It is not used for advertising, geotargeting, or tracking.
  • Activity locations - when you create an activity, you add a location (from a list or by placing a pin on a map). This location is stored solely to display the meeting point to activity participants. It is not linked to your personal profile, used for geotargeting, or shared with third parties.

We do not collect passive location data (e.g. GPS tracking or background location). We do not run advertising or tracking SDKs. We do not sell, rent, or share your data with third parties for commercial purposes.

3. Invitations and other users

Liity is built around doing activities with other people. This means some data about you is provided by, or visible to, other users.


Invitations by email. An organizer can invite someone to an activity by entering their email address.

  • If the email address belongs to a Liity account, the invitation is delivered to that account and the organizer sees the name on that account. The email address itself is not shown. This means that someone who already knows your email address can find out that you use Liity.
  • If the email address does not belong to a Liity account, we store it with the invitation and send invitation emails and updates about that activity (for example, if it is cancelled). If you respond through the web invitation page, we also store the name you enter and your response.
  • If you later create a Liity account with the same email address, those invitations and responses are added to your new account.

People you have played with. When you take part in an activity, you appear in the invite list of the other participants of that activity, and they appear in yours, so that you can easily invite each other again. This list shows your name only. You can block any user at any time. Users who have blocked each other do not see each other in invite lists, and the blocked user is not notified.


Organizers' invite history. Organizers can see a list of the people they have previously invited, including email addresses they entered themselves. This list is visible only to that organizer.


If you do not use Liity. If an organizer has invited you by email and you do not have a Liity account, we process your email address, and your name and response if you choose to reply, only to deliver that organizer's invitation and updates about that activity. We keep this data as part of the organizer's activity records. You can ask us to delete it at any time by contacting us at the address in section 14.

4. How we use your data

Your data is used exclusively to:

  • Create and manage your user account.
  • Display your name to other users within activities you participate in, and in the invite lists of people you have played with.
  • Deliver invitations that organizers send to you, including to email addresses that do not yet have a Liity account.
  • Send functional push notifications and emails that are part of the App's core features.
  • Ensure the security and integrity of your account.

5. Legal basis for processing (GDPR)

We process your personal data under the following legal bases as defined in the EU General Data Protection Regulation (GDPR):
Contract performance (Art. 6(1)(b)): Processing your name and email is necessary to provide the App's services.
Legitimate interests (Art. 6(1)(f)): Sending functional notifications to keep you informed about your activities; showing you in the invite lists of people you have played with; and processing the email addresses, names and responses of invited people who do not have a Liity account, in order to deliver invitations an organizer has asked us to send.

6. Data storage and security

Your data is stored securely using industry-standard practices. We use Supabase (hosted infrastructure) to store your account information. Data is processed and stored within secure cloud environments. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it for a longer period.

8. Your rights under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to our processing based on legitimate interests.

These rights also apply if you do not have a Liity account but have been invited by email. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. International users

The App is available worldwide. If you are accessing Liity from outside the EU, your data may be transferred to and processed in EU-based infrastructure. Such transfers are subject to appropriate safeguards in accordance with applicable data protection law.

10. Age and eligibility

The App is intended only for users aged 18 and above. When you register, we collect your year of birth so that we can confirm you meet this requirement. We collect the year only, never a full date of birth.

Your year of birth is self-declared and we do not verify it against identity documents. It is never shown on your profile, never visible to other users, and is not used for any purpose other than confirming age eligibility. It is stored for as long as your account exists and is deleted when your account is deleted. We rely on our legitimate interest in keeping the App restricted to adults as the legal basis for this processing.

If the year of birth you provide indicates that you are under 18, registration is not completed and the account cannot be used. To prevent the same person from immediately registering again, we keep the minimum data from the sign-in created during the attempt: the email address and account identifier provided by the sign-in method used (Apple, Google, Strava or email), and the date of the attempt. We do not keep any profile information, and this data is used for no other purpose than blocking repeat registrations. It is kept for 12 months from the most recent attempt and then deleted. The legal basis is the same legitimate interest described above.

If you believe a person under 18 has provided us with personal data, please contact us and we will promptly investigate.

11. Notifications

We send push notifications and emails as part of the App's functionality (e.g. activity invitations and reminders). These are not marketing communications. You can disable push notifications at any time in your device settings. To opt out of email notifications, contact us at [email protected].

12. Third-party services

We use Supabase as our backend infrastructure provider. We use Resend to deliver emails, such as invitations and activity updates. Both process data on our behalf under a data processing agreement and do not use your data for their own purposes. We do not integrate any advertising networks, social media trackers, or analytics services.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. The date at the top of this page indicates when the policy was last revised.

14. Contact and complaints

For privacy-related questions or to exercise your rights, contact us at:
[email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.