1. Who We Are
The controller of your personal data is:
Returnio s.r.o.
a company incorporated under the laws of the Czech republic
Registered office: Tržiště 372/1, Malá Strana (Praha 1), 118 00 Praha
Email: info@returnio.cz
(hereinafter referred to as “we”, “us”, or the “Controller”).
Because our services are also targeted at users within the European Union, we process personal data in accordance with Regulation (EU) 2016/679 (GDPR).
2. About the Application
This mobile application Invexty is a complementary tool to your account on the website www.invexty.com.
The app itself does not allow users to create an account — it uses the information already stored in your web account.
Main purposes of the application:
● Delivering push notifications,
● Two-factor authentication (2FA) for confirming sensitive actions in your web account (e.g., claiming rewards),
● Sending security alerts.
3. What Data We Process
Data from your web account
● Internal user ID, email address, or other identifiers transferred from your web account,
● Information about the status of your account.
Technical and operational data
● Device push token (e.g., for Firebase / APNs),
● Device type and operating system version,
● App version, language, timestamp,
● IP address and security event logs.
Two-Factor Authentication (2FA) data
● Information whether verification was successful or not,
● The related action in your web account (e.g., “claim reward”, “add payout address”),
● One-time codes / confirmations are stored only for the time necessary to complete verification.
Notification delivery data
● Information on whether a notification was delivered and opened.
If additional data (e.g., payment, KYC, billing) is processed via the web platform, it is governed by the main Privacy Policy available at https://invexty.com/en/privacy-policy.
4. Purpose and Legal Basis of Processing
| Purpose |
Description |
Legal Basis (GDPR) |
| Providing the service |
Operating the app, 2FA, and notifications to securely complete operations in your web account. |
Contract performance / Terms of Service (Art. 6(1)(b)) |
| Service security and abuse prevention |
Log management, detection of suspicious activity. |
Legitimate interest (Art. 6(1)(f)) |
| Legal compliance |
Processing required by legal or regulatory obligations. |
Legal obligation (Art. 6(1)(c)) |
| Optional in-app notifications / marketing |
Only if explicitly enabled by the user. |
Consent (Art. 6(1)(a)) |
5. Data Recipients
Your personal data may be disclosed to the following categories of recipients:
● Our employees and authorized collaborators managing the web and the app,
● App development and maintenance provider: Pixelmate, s.r.o.
● Technology providers for push notifications (Apple, Google/Firebase),
● Hosting and security monitoring providers,
● Public authorities, if required by applicable law.
Some recipients may be located outside the EU/EEA. In such cases, we apply appropriate safeguards (e.g., Standard Contractual Clauses of the European Commission) or transfer data only to countries recognized as providing an adequate level of protection.
6. Data Retention
● Push token: for as long as the app/device is actively used and installed,
● Data processed on the basis of consent: until consent is withdrawn,
● Data processed to fulfill legal obligations: for the period required by applicable law.
7. Your Rights
You have the right to request:
● Access to your personal data,
● Correction of inaccurate data,
● Erasure (where data is no longer necessary),
● Restriction of processing,
● Objection to processing based on legitimate interest,
● Data portability,
● Withdrawal of consent (where processing is based on consent).
To exercise your rights, contact us at info@returnio.cz.
You also have the right to lodge a complaint with an EU supervisory authority — for example, in the Czech Republic:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů),
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic,
www.uoou.cz.
8. Changes to This Policy
We may update this Privacy Policy, especially when new app features are introduced or data processors change. The current version will always be available within the application.