Privacy Policy

Last Updated: 02/12/2025

This Privacy Policy describes how we collect, use, process, store, and protect personal data when you use the Coqudo mobile application (“Coqudo” or “the App”), in accordance with the EU General Data Protection Regulation (GDPR).

Coqudo is owned and operated by Methodia Srl.

1. Data Controller

Methodia Srl
Via Generale Giuseppe Valle, 83, 00148 Rome, Italy
VAT: IT17073671004
Email: support@coqudo.it
Commercial name: Coqudo

Methodia Srl does not currently appoint a Data Protection Officer (DPO), as it is not required under Article 37 GDPR.

2. Categories of Personal Data Collected

2.1 Data Provided Directly by the User

Registration data: name, surname, email address, password (encrypted).
Profile data: profile picture, description, preferences.
Item-related data: title, images, description, availability, pickup/return locations.
Communications: messages and content exchanged via the in-app chat.

2.2 Automatically Collected Data

Device information (model, operating system version).
IP address, usage logs, technical identifiers.
Crash diagnostics and analytics data (e.g., Firebase Analytics, Crashlytics).

2.3 Location Data

Location data is collected only with your explicit consent, through device-level permissions. It is used to provide nearby item search, pickup suggestions, and map-based functionality.

2.4 Payment Data

Payment data is processed exclusively by third-party providers Stripe and PayPal. Coqudo receives only limited transactional metadata (such as transaction ID, amount, status) and does not store full card numbers.

3. Purposes of Processing and Legal Basis (Art. 6 GDPR)

The table below summarizes the purposes of processing, the categories of data involved, and the applicable legal basis:

Purpose	Data Types	Legal Basis
Account creation and management	Registration & profile data	Performance of a contract (Art. 6(1)(b))
Listing and renting items	Profile & item-related data	Performance of a contract (Art. 6(1)(b))
In-app communication between users	Chat messages and related metadata	Performance of a contract (Art. 6(1)(b))
Payment processing	Payment metadata (via Stripe/PayPal)	Performance of a contract (Art. 6(1)(b))
Fraud prevention & security	Logs, device info, technical identifiers	Legitimate interest (Art. 6(1)(f))
Analytics & performance monitoring	Analytics & diagnostic data	Consent (Art. 6(1)(a))
Location-based features	GPS/location data	Consent (Art. 6(1)(a))
Legal and tax compliance	Transaction and billing data	Legal obligation (Art. 6(1)(c))

4. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy or as required by law.

Account data: retained for the duration of your account. If you delete your account, data may be retained for a limited period to comply with legal obligations or to resolve disputes.
Transaction data: retained for the period required by accounting and tax laws (typically up to 10 years).
Location data: retained only for the time necessary to provide the corresponding location-based features, and where possible in aggregated or anonymized form.
Analytics and log data: retained for limited periods necessary for diagnostics, security, and service improvement.

5. International Data Transfers (Art. 44–49 GDPR)

Some of the third-party services used by Coqudo (including Google Maps, Stripe, PayPal, Firebase) may transfer and process data outside the European Union (EU) or European Economic Area (EEA).

In such cases, data transfers are carried out in compliance with GDPR requirements, including:

Standard Contractual Clauses (SCCs) approved by the European Commission;
Adequacy decisions where applicable;
Other appropriate technical and organizational safeguards.

6. User Rights (Art. 15–22 GDPR)

As a data subject, you have the following rights regarding your personal data:

Right of access: to obtain confirmation as to whether your personal data is being processed and to receive a copy of such data.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): to request deletion of your personal data in the cases provided for by law.
Right to restriction of processing: to request that processing be limited in certain circumstances.
Right to data portability: to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to object: to object at any time to processing based on legitimate interest.
Right to withdraw consent: where processing is based on consent (e.g., location, analytics), you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may contact us at: support@coqudo.it.

7. Processing of Minors' Data

Coqudo is intended for users who are:

18 years of age or older; or
at least 12 years old and using the App under the supervision of a parent or legal guardian.

In EU jurisdictions where local law sets a higher minimum age for consent to data processing (typically between 13 and 16 years), parental consent may be required in accordance with such local regulations.

8. Automated Decision-Making

Coqudo does not use automated decision-making processes, including profiling, that produce legal effects or similarly significantly affect users within the meaning of Article 22 GDPR.

9. Third-Party Services

Coqudo integrates external services, including but not limited to:

Google Maps APIs for location and map-related features;
Stripe for payment processing;
PayPal for payment processing;
Firebase services for analytics and crash reporting.

These third parties may act as independent data controllers or data processors under their own privacy policies. We recommend reviewing their respective privacy policies for more information on how they process personal data.

10. Withdrawal of Consent

When processing is based on your consent (for example, location services or certain analytics), you may withdraw your consent at any time by changing the relevant permissions in your device’s operating system (iOS or Android).

Please note that revoking certain permissions may limit or prevent access to specific features of the App.

11. Changes to This Policy

Methodia may update this Privacy Policy from time to time. Updated versions will be made available within the App and identified by the “Last Updated” date at the top of this page.

Continued use of Coqudo after any changes have been implemented will constitute your acceptance of the updated Policy.

12. Contact

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us at:
support@coqudo.it