About this policy
This policy explains how InSupport processes data when you use its directory of support services in Greece. It covers the Android and iOS apps. It does not cover counselling or other support delivered by organisations listed in the directory.
You do not need an account to use InSupport. Searching and filtering take place on your device. The app contains no advertising or usage analytics tools, and we do not sell app user data or use it for targeted advertising. Some features connect to external providers, as explained below.
Controller and contact details
Data controller: SYMPLEXIS. Postal address: 7, Katechaki str., 11525, Athens. Contact for privacy questions and rights requests:info@symplexis.eu.
The contact address is for privacy matters and is not an emergency service. Please do not send descriptions of violence, medical information or other sensitive details that are unnecessary for your request.
Data used on your device
We store language, display theme, text size, onboarding completion and discreet appearance preferences locally. A local flag remembers whether you dismissed the welcome message. Searches, filters and selected services are used for the current view and are not sent as a usage history to a server operated by us.
If you choose a PIN, the native app stores it on the device through its secure storage mechanism and does not send it to us.
The service directory is bundled with the app. We do not request access to your contacts, photos, microphone or call history. The app has no incident-reporting form or medical information submission feature.
Optional location access
With your permission, the app obtains your current location, which may be precise, to sort nearby services and recenter the map. You can refuse permission and continue searching or browsing. If permission has already been granted, the app may use location when you open relevant screens.
We do not track location in the background or store a GPS or journey history. The current position is used in memory while needed by the relevant screen. You can revoke permission in your device settings. Requests for map tiles can reveal the area you are viewing to the provider even when location permission is disabled.
Maps and fonts
Maps load from OpenFreeMap, operated by Hyperknot Software Kft. in Hungary. The provider and delivery infrastructure receive IP address, requested resources and device or browser details for map delivery and security. Tile requests identify the viewed area. We do not transmit your PIN, search text or a separate GPS history. The map loader requests resources without credentials or cookies.
OpenFreeMap states in its published policy that ordinary access logs do not store IP addresses, while error logs may include IP addresses for seven days and temporary security logs for up to thirty days. Provider terms and practices can change. Its privacy policy is linked below.
The interface loads IBM Plex Sans through Google Fonts at fonts.googleapis.com and fonts.gstatic.com. Google receives IP address, resource URL and HTTP headers, including device details and a referrer when supplied. Google states that the Fonts API uses no account sign-in or cookies, includes no credentials from its other services, and does not use these data for profiling or targeted advertising. IP addresses support request delivery and security. Google publishes safeguards including encryption in transit and restricted access. Retention follows its policies; the Fonts FAQ gives no fixed API-specific period.
External services and recipients
Choosing a call, email, website or directions opens the corresponding application or service. The selected provider telephone number, email address, website link or destination is passed to it. Directions may open Apple Maps, Google Maps or another installed navigation app. We do not add your own precise position to the directions link; the navigation app may obtain it under its own permissions.
Your telephone provider and the organisation you call may process caller identification and contact information under their own obligations. Calls, including calls to 112, may create device or provider records. These external services apply their own privacy rules.
Correspondence is accessible to authorised personnel and the necessary email provider.
Email provider: Google Ireland Limited (subject to confirmation of the contracting legal entity), Google Workspace – Gmail, using a Google Workspace account under the [applicable subscription plan].
Role in processing: Data processor for personal data processed on behalf of the Publisher in connection with Google Workspace services, in accordance with the applicable Cloud Data Processing Addendum (CDPA).
Applicable terms:
- Cloud Data Processing Addendum (CDPA): https://admin.google.com/terms/apps/8/2/en/dpa_terms.html
- Google Workspace Terms of Service: https://workspace.google.com/terms/
Information may be disclosed to authorities or advisers where required by law or for legal claims. Using the directory does not automatically send a report to the police.
The integrated providers’ published policies describe their respective security and data-use safeguards. They do not by themselves establish which agreements the publisher has in place.
Purposes and legal bases
Optional location processing is based on your consent under GDPR Article 6(1)(a). Withdrawal does not affect the lawfulness of earlier processing. Operating system permission controls access to the feature; this notice explains how the information is used.
For necessary service operation and security, answering requests and maintaining professional directory contacts, we rely on legitimate interests in providing accessible information and a secure service under Article 6(1)(f). Compliance with legal obligations relies on Article 6(1)(c). Information requested for a rights request is limited to what is necessary to verify and answer it.
The app does not request health data or personal accounts of violence. If processing special-category data becomes necessary for a particular communication, we will explain the purpose and applicable Article 9 condition before that use. We do not make automated decisions with legal or similarly significant effects or build advertising profiles.
Retention and deletion
Local preferences remain until changed or removed with the app data. The PIN remains until you change it, disable discreet appearance or restart onboarding. Restarting onboarding does not erase all app data or the map cache.
The native app stores map resources in a cache limited to 50 MB and 3,000 entries, removing less recently used items when space is needed. Stored resource URLs and access times may indicate viewed areas, but the cache does not contain GPS history. There is no fixed deletion deadline for each item; expired resources can remain usable offline.
On Android, use the app storage settings to clear app data or cache. On iOS, deleting the app removes ordinary app data, but Keychain items can persist; remove the PIN through the app settings before deleting the app.
Privacy or support correspondence is retained for 5 years after the request closes, unless the law requires longer retention or specific records need to be retained for legal claims. The relevant basis and duration will be explained where applicable. External providers handle their own records under their policies.
Security
The app uses HTTPS for maps and fonts, stores preferences locally and uses secure PIN storage in native apps. Native plugin bridge logging is disabled. No device or transmission method can provide absolute security.
Operating systems, backup services and app stores may process their own installation or diagnostic data under their settings and policies. Uninstalling does not necessarily remove these external records or backup copies.
Processing outside the European Economic Area
Google states that it uses servers internationally, so processing may occur outside the EEA, including in the United States. Its published transfer notice states that Google LLC is certified under the EU–US Data Privacy Framework and that it uses standard contractual clauses where required. These are provider statements and do not establish a separate agreement with InSupport’s publisher.
Hyperknot Software Kft. is based in Hungary, within the EEA, but OpenFreeMap states that it may use Cloudflare for map content delivery. Cloudflare Inc. is a US company; it reports primary storage in the US and EEA, potential international access, and DPF or standard contractual clauses as applicable. This concerns the map provider’s infrastructure, not app hosting.
International data transfers and safeguards
The Publisher uses Google Workspace (Gmail) for email services. Depending on the applicable service configuration and contractual commitments, personal data may be stored or processed in data centres located in different countries. Google may also engage subprocessors located outside the European Economic Area (EEA), including for technical support.
Where personal data is transferred outside the EEA to a country that does not benefit from an applicable adequacy decision, such transfers are subject to the safeguards provided for under the applicable Google Workspace contractual terms, including Standard Contractual Clauses (SCCs) where applicable.
Further information is available in the Google Workspace Cloud Data Processing Addendum, the Google Workspace Subprocessors List, and Google’s Data Centre Locations.
You can request information about relevant safeguards from the privacy contact. Links to provider notices appear below.
Your rights
Where applicable, you can request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent. Contact info@symplexis.eu. We normally respond within one month. If an extension is permitted because of the complexity or number of requests, we will notify you within the first month.
We cannot remotely access data held only on your device. You can manage it using the controls explained above. We do not require you to create an account just to exercise your rights. You can complain to the Hellenic Data Protection Authority or the competent supervisory authority in your country.
Professional contacts and younger users
The directory contains organisation details and professional contacts obtained from project sources and published service information. These are not app user records. If a listing includes your personal professional information, contact info@symplexis.eu to request source information, correction or consideration of a deletion request.
We do not ask for age or date of birth and do not create accounts or advertising profiles for children. The protections in this policy apply to all users. Access to a particular support service depends on that provider’s eligibility rules. Contact the privacy address if you believe unnecessary personal information about a child has been sent to us.
Changes and provider policies
We will publish the updated policy with its effective date. Material changes will receive appropriate notice and fresh consent will be requested where required. You can request this policy in an accessible format from info@symplexis.eu.
Google international transfer frameworks