← Back to home

Privacy Policy

Last updated: July 17, 2026

COMM-IT ("we", "our", or "us") is operated by ECSoft. This Privacy Policy explains how we collect, use, and protect your information when you use the COMM-IT mobile application.

This Privacy Policy also covers our website (comm-it.news). If you join the pre-launch waitlist, we collect only your email address, used solely to notify you when the app launches; we do not share or sell it, and we delete it after launch or upon your request ([email protected]).

1. Information We Collect

When you create an account, we may collect:

If you sign in via a third-party provider (Google, Apple, Twitter/X, LINE), we receive only the information that provider shares with us (typically name and email).

We also collect the content and activity you generate in the app: comments, reactions (likes), saved articles and collections, in-app social relationships (users you follow and who follow you, groups), content reports, and language, country and category preferences.

If you enable local news, we process your approximate geographic location: it is used at the moment to find news in your area and is neither tracked nor stored. If you enable push notifications, we process your device notification token.

2. How We Use Your Information

Legal bases (Art. 6 GDPR): performance of the contract (your account and app features), your consent (e.g. notifications), our legitimate interest (security and abuse prevention) and compliance with legal obligations.

3. Data Storage

Your data is stored securely using Supabase (supabase.com), a third-party database provider that complies with GDPR and industry-standard security practices. Data is stored on servers within the European Union.

We retain your personal data for as long as your account is active (see Account Deletion below). Technical logs and diagnostic data are kept for a maximum of 6 months.

Data controller: ECSoft by Andrea Provenzali, Lucca (Italy).

In detail: account data is kept while your account is active; comments until you remove them or delete your account; reports and moderation decisions for up to 12 months (to handle appeals); technical logs for up to 6 months; backups are overwritten within 30 days.

4. Data Sharing

We do not sell your personal data. We do not share your data with third parties for their own purposes. Your data is processed, on our behalf and in compliance with the GDPR, by the following providers:

We send translation services only the text to be translated: never your name, email address or user ID.

Comments are public by design: they appear under the article and are visible to anyone reading it. In the app they are translated on your device, by the operating system's translator: the text never leaves your phone and is not sent to any provider. They remain personal data all the same: if in future a comment were translated by an external service or by our own infrastructure, what is stated above would apply, and your rights are unchanged.

Error reports. To detect and fix problems in the app we collect technical crash reports through Sentry (Functional Software, Inc.), which processes them on our behalf on servers located in the European Union. Reports contain technical information (device model, operating system and app version, and the point in the code where the error occurred) and do not contain your name, your email address or any identifier of your account. We do not collect performance data. Like other technical logs, they are kept for a maximum of 6 months.

Location. To determine your area from your position, approximate coordinates are sent to the OpenStreetMap reverse geocoding service (Nominatim), operated by the OpenStreetMap Foundation. The coordinates are not accompanied by your name or any identifier of your account, and we do not store them.

Website (comm-it.news): the site is delivered via Cloudflare (hosting/CDN), which processes technical data such as IP addresses for security and performance. We use Cloudflare Web Analytics, a cookieless tool that collects only aggregate statistics and does not track you across sites. Embedded YouTube videos load only if you accept the “Marketing” category in the cookie banner; once loaded, YouTube (Google) processes data under its own privacy policy. Local preferences (theme, language, cookie choices) are stored only in your browser.

5. Your Rights

You have the right to:

To exercise these rights, contact us at: [email protected]

You also have the right to lodge a complaint with your data protection authority (in Italy: the Garante per la Protezione dei Dati Personali).

6. Account Deletion

You can delete your account at any time from the app's Profile settings. This will permanently remove your personal data and all content associated with your account within 30 days.

7. Children's Privacy

COMM-IT is not intended for children. The minimum age to use the service is 14, or the higher age required in your country for digital consent (up to 16 in the EU, Art. 8 GDPR). At sign-up you are asked to declare that you meet the minimum age; providing your date of birth is not required. We do not knowingly collect personal data below that age, and accounts of users below the threshold are removed — if you believe this has happened, contact us and we will remove it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email.

9. Contact

For any privacy-related questions:
ECSoft by Andrea Provenzali, Lucca (Italy) — [email protected]

We have not appointed a Data Protection Officer (DPO), as this is not required for our activities; for any question about personal data you can use the email address above.