Privacy Policy

Effective Date: May 13, 2026
Last Updated: May 13, 2026

Welcome to Working Holiday App, operated by 7huh OƜ ("we," "us," or "our"). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Estonian data protection laws.

1. Data Controller

7huh OƜ

Registry Code: 17212090

Address: [Insert Registered Address, e.g., Sepapaja 6, Tallinn, 15551, Estonia]

Email: hello@7huh.com

2. Data We Collect

To provide the Working Holiday App service, we collect the following information:

Identity Data

Full name, Date of Birth, Nationality.

Contact Data

Email address, Phone number, Physical address.

Authentication Data

Apple ID or Google ID (if using Social Sign-on), and encrypted passwords (managed via Supabase).

Technical Data

IP address, device type, and usage logs.

3. Purpose and Legal Basis for Processing

We process your data under the following legal bases:

Performance of a Contract (Art. 6(1)(b) GDPR): To create your account, verify your identity, and provide the core features of the Working Holiday App.

Legal Obligation (Art. 6(1)(c) GDPR): To comply with accounting and tax laws in Estonia.

Consent (Art. 6(1)(a) GDPR): For marketing communications (if you opt-in).

4. Data Processors and Storage

We use industry-standard sub-processors to handle your data securely:

Supabase: Used for database management and authentication. Your data is stored in the EU (East) region. We have a signed Data Processing Addendum (DPA) with Supabase (dated March 12, 2026) to ensure GDPR compliance.

Firebase: Used for [specify usage, e.g., analytics, push notifications, or hosting].

5. Data Security

Your password is encrypted by Supabase using advanced hashing algorithms. We do not have access to your raw password. We implement technical and organizational measures to prevent unauthorized access, disclosure, or loss of data.

6. Data Retention

We retain your personal data only as long as your account is active or as needed to provide you with our services. If you delete your account, we will erase your data unless legal obligations (e.g., tax records) require us to keep it for a longer period (typically 7 years under Estonian law for financial records).

7. Your Rights

Under the GDPR, you have the right to:

  • Access, correct, or delete your personal data.
  • Object to or restrict the processing of your data.
  • Data portability (requesting a copy of your data in a structured format).
  • Withdraw consent at any time.

To exercise these rights, contact us at hello@7huh.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).