Data we collect
A username (it can be made up), a password that you choose, and a public name so your contacts can recognise you (it can also be made up). No email. No phone number. No data that links you to a real person.
For an exhaustive detail of all fields we store, how we protect them, and how long we keep them, see our Transparency Manifesto.
Legal basis for processing
The processing of your data is based on the following legal bases of the General Data Protection Regulation (GDPR) y la Ley Orgánica 3/2018 de Protección de Datos (LOPDGDD):
- Performance of a contract (Art. 6.1.b RGPD): Los datos de tu cuenta son necesarios para proporcionarte el servicio.
- Legitimate interest (Art. 6.1.f RGPD): Medición anónima de visitas en la página de presentación (sin cookies, sin IP, sin identificación).
- Legal obligation (Art. 6.1.c RGPD): Conservación de registros de pagos por obligaciones fiscales.
Your messages
They never touch our disks. They are encrypted on your device and decrypted on your contact's device.
Metadata
We do not keep records of who you talk to or when.
Data retention
Each type of data has a different retention period, detailed in our Transparency Manifesto. En resumen:
- Account data: until you delete your account.
- Sessions: maximum 24 hours.
- Connection signals: maximum 60 seconds, in memory only.
- Linking requests: maximum 3 days.
- Payment records: permanent (tax obligation). These records are completely anonymous: they only contain the amount and date of the payment, in order to issue the corresponding sales receipt. They do not include any data linking the payment to a specific user.
Data location
All our servers are located in Germany (proveedor Hetzner, centros de datos en Falkenstein y Helsinki). Tus datos no salen de la Unión Europea.
Payments are processed through external payment gateways. These gateways may process transaction data in accordance with their own privacy policies. We do not receive or store any personal data from the payer — we only receive a confirmation and an amount.
Anonymous measurement
On the landing page (not in the application) we perform anonymous visit measurement on our own servers hosted in Germany. No cookies, no IP address, no identifying anyone, and no sharing data with third parties.
Legal basis: interés legítimo (Art. 6.1.f RGPD) para comprender el alcance de nuestra página de presentación.
Right to object: puedes desactivar JavaScript en tu navegador para esta página. La medición dejará de funcionar sin afectar a la navegación.
Your rights
You can delete your account and all your associated technical data with a single click. No questions asked.
Under the GDPR and the Spanish LOPDGDD, you have the right to:
- Access: Saber qué datos tenemos sobre ti. Todo está detallado en el Manifiesto de Transparencia; para tu cuenta concreta, contacta con nosotros.
- Rectification: Puedes cambiar tu nombre público y tu contraseña directamente desde la aplicación.
- Erasure: Eliminar tu cuenta y todos los datos asociados con un clic, desde los ajustes.
- Portability: Solo2 ofrece exportación de copias de seguridad cifradas que contienen todos tus datos locales.
- Restriction of processing: En la práctica, los datos que tenemos sobre ti son tan mínimos que apenas hay nada que limitar. Pero si lo solicitas, restringiremos cualquier tratamiento que no sea estrictamente necesario para mantener el servicio.
- Objection: Puedes oponerte al tratamiento en cualquier momento. Para la analítica anónima, basta con desactivar JavaScript.
To exercise any of these rights, write to us at hola@menzuri.com.
If you believe we have not adequately addressed your rights, you can file a complaint with the Data Protection Commission (DPC): www.aepd.es
Minors
Solo2 is not intended for children under 14 years of age (in accordance with Article 7 of the Spanish LOPDGDD). We do not knowingly collect data from children under that age. If we discover that a child under 14 has created an account, we will delete it.