Privacy
In detail
Who we are
Utriq is an app by Boostdev, [?], Chamber of Commerce number [?]. Boostdev is the controller: we decide why and how your data is used.
Questions about your data? Email info@boostdev.nl.
Which data we use
We use as little data as we can. No phone number, no real name and no date of birth.
- Your email address, to send you a sign-in code. You do not have a password.
- Your nickname and the language you chose. Others only see your nickname.
- Your confirmation that you are 16 years or older, with the time.
- The cases you submit, your response, your votes, your reports and the rulings of the AI judge. Also your groups, whom you have blocked and which version of the house rules you confirmed.
- For 18+ cases: only that you are 18 years or older, when that was checked and by which method. We do not get back a name, date of birth or bank details.
- Whether you have Plus and until when. We do not see payment details: they stay with Apple or Google.
- A notification token from your device, if you turn on notifications. Notifications never contain the content of a case.
- Technical data needed to make the service work and to protect it against abuse, such as times and counters per account. Our logs do not contain the texts of cases.
- Your email address and a nickname are needed for an account. Without that data you cannot use Utriq. The 18+ check and notifications on your device are voluntary.
Why we use it
Every purpose comes with its basis: the reason in the law why we may use your data.
- To let you sign in and have an account. Basis: performance of the contract (Article 6(1)(b) GDPR).
- To show your case, let others vote and show the result. Basis: performance of the contract.
- To let the AI judge give a ruling and to translate cases. Basis: performance of the contract.
- To have an AI check every case before it is posted for violence, sex, abuse, self-harm, minors in danger, attempts to steer the judge and, in public cases, personal data. Basis: our legitimate interest in offering a safe service (Article 6(1)(f)).
- To handle reports, hide or remove cases and inform you about it. Basis: legal obligation under the Digital Services Act (Article 6(1)(c)) and our legitimate interest.
- To check that you are 18 years or older before you can see 18+ cases. Basis: your consent (Article 6(1)(a)). You withdraw it by emailing info@boostdev.nl. Then we delete the check and you no longer see 18+ cases.
- To activate Plus. Basis: performance of the contract.
- To prevent abuse, such as many accounts in a short time or too many rulings per day. Basis: our legitimate interest.
- To send you a notification when there is a new case or a ruling. Basis: your consent in the settings of your device.
- To improve the instructions of the AI judge when someone reports a ruling. One of us then reads the case and the ruling. We do not train an AI model with your text. Basis: our legitimate interest in giving fair rulings.
Sensitive data
We do not ask for data about your health, your beliefs, your sex life or other special categories of personal data. A case can still be about them. That is why you tick a separate box at the house rules to say that your case may contain such data about yourself. That is your explicit consent (Article 9(2)(a) GDPR) to have it checked, judged, translated and shown to whoever you show the case to. You withdraw that consent by deleting the case. Do not write sensitive data about someone else.
In a public case, the AI check blocks names, addresses and other data that can identify someone, including yours.
Who we share data with
We do not sell data. We use these processors, with whom we have agreed on the protection of your data:
- Hostinger, for the servers Utriq runs on, in Frankfurt (Germany).
- Amazon Web Services (AWS), for the AI. We use Claude models from Anthropic through AWS Bedrock. Our request starts in Frankfurt and AWS processes it in one of its data centres in the EU. The text of a case goes there for the check, the ruling and the translation. AWS does not store that text and Anthropic does not get to see it. Nobody uses it to train AI.
- Brevo, in France, for sending the sign-in emails.
- Apple and Google, for downloads, payments and notifications on your device.
- A Dutch iDIN provider, for the age check, if you choose it.
- Authorities, if the law requires it. If we suspect a criminal offence that threatens someone's life or safety, we report it to the police or the public prosecutor (Article 18 Digital Services Act).
Outside the EU
Our servers and the AI run in the EU. Apple and Google may also process your purchase and the notifications on your device outside the EU. The EU-US Data Privacy Framework or the standard contractual clauses of the European Commission apply to that. AWS and Anthropic are American companies. So an American authority can ask them for data under American law, even when the data is in Europe. You can ask for a copy of the arrangements via info@boostdev.nl.
How long we keep data
- We delete the texts of a case (both sides, the translations and the judge's reasoning) 90 days after the ruling. From the backups the text is gone at most 30 days later.
- On a group's record, only the parties, the outcomes, the category and the date remain, for as long as the group exists.
- We keep backups for at most 30 days.
- We keep your account and nickname until you delete it. After that everything is gone within 30 days, including from the backups.
- A sign-in code is valid for 10 minutes.
- We keep the fact that you are 18 years or older until you withdraw your consent or delete your account.
- We do not keep other data longer than needed for the purpose we use it for.
- A case without a ruling, such as a withdrawn case or a case that did not pass the check, is deleted 90 days after its last change.
- We delete votes and reports together with the texts of the case.
- We delete a notification token when you turn notifications off or delete your account.
Your rights
You may see your data, have it corrected, have it deleted, have the processing restricted, take it to another service and object to processing based on our legitimate interest. If you gave consent, you may withdraw it at any time. That does not work retroactively.
You can download your data and delete your account in the app. For anything else, email info@boostdev.nl. We reply within a month.
Do you disagree with how we handle your data? Then you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the supervisory authority in your country.
The AI judge
The judge is an AI. You see that with every ruling, and the text is marked as AI text. Translations are made by an AI too. That is why every translation says it was made by AI.
A ruling is an opinion for the group, with an explanation. There is no penalty or order and nothing follows from it for your rights. So it is not a decision with legal effects or a similarly significant effect, as meant in Article 22 GDPR. The jury consists of people.
The check before posting is automatic. It can stop your case or turn it into an 18+ case. That is not a decision with legal effects, and a person can always take a look. If your case is not posted, you see what is wrong and adjust the text yourself. If you think that is unjustified, email info@boostdev.nl. Then a person looks at it.
Age
Utriq is for people aged 16 and older. You confirm that when you sign up. If we find out someone is younger, we delete the account.
Ads, tracking and cookies
There are no ads, no tracking and no third-party analytics. On the website we only set a functional cookie for signing in, so that you can turn on 18+ cases.
Changes
If we change this statement, we change the date at the top. For a major change we also show it in the app.