App privacy notice.

Version 1 · 3 November 2026

This is a translation. If it differs from the Italian text, the Italian text prevails.

What we know about you when you use feelya., why, for how long and how you control it. The website waitlist is covered by the waitlist privacy notice (in Italian).

In short

You sign in with Apple, with Google or with your email and a 6-digit code we send you. Other people see the name and username you choose.
Nobody sees your date of birth or your phone’s country: we use them to know whether you are old enough to use feelya. and whether you are a minor.
When you debate, your voice reaches live the people at the table and anyone listening because they follow one of the people seated. We don’t record it and we don’t transcribe it.
We use your positions on topics only with your explicit yes. The compass is optional and has a separate consent: only you see the result.
Usage stats are off until you turn them on, and they are never linked to your account.
From the app you can download your data, delete the compass, withdraw your consents and close your account whenever you want.

01Who the controller is

The controller is the feelya. team. Before the app launches we will set up a company: from that moment the company will be the controller, and we will add its company name, registered office and VAT number here.

For any question about your data, and to exercise your rights, write to hello@feelya.it.

Before launch we are assessing whether Art. 37 GDPR requires us to designate a data protection officer (DPO). If we designate one, their contact details will be here.

02What data we process

Data	Where it comes from	If you don’t give it
Email	You type it and we send you a 6-digit code to sign in. If you sign in with Apple or Google, they pass it to us: with Apple it can be a relay address that hides yours. From them we receive only the email. No other user sees it.	You can’t create an account.
Name	You type it. Others see it: at the table, on your profile and in the leaderboard.	You can’t create an account.
Username	It is made from your name and you can change it. It is the name others find you by.	We give you one.
Date of birth	You type it, once only: after that it can’t be changed. It is used to check the minimum age and to know whether you are a minor. Nobody sees it.	You can’t use the app.
Country	When you type your date of birth, the app reads the region set on your phone (not your location). We use it only to know from what age you can use feelya. Nobody sees it.	If your phone doesn’t say, the minimum age is 16.
Language	The first time you sign in, it is your phone’s language if that is Italian, English, Spanish, French or German; otherwise English. You change it in Settings. It decides the topics, the tables, the question of the day, the leaderboard, the emails and the notifications you get.	There is always one.
Consents	When you accepted the privacy notice and the rules, and which version; whether and when you said yes to positions, to the compass and to the up-to-date compass.	You can’t get in without accepting the privacy notice and the rules.
Debate style	Your answers to the 5 questions about how you argue, at the start. The resulting style is worked out by your phone and only you see it; the server uses the answers to split the tables, as explained below.	You can skip them.
Compass	Your answers to the 12 questions of the test, the two scores we derive from them (economy and society) and the encrypted fingerprint of the recovery code. If you keep it up to date, also every move: whether it came from a table or from a question of the day, the axis, the value before and after. See section 4.	It is optional. The app works the same.
Positions	Where you stand on the 7 dots when you book a topic, after each debate and in in-person lobbies, and your answers to the question of the day. Also the optional line “your point in one line” when you book, which only you see.	Without a position you can’t book a table: that is how the sides are formed.
Your voice	The microphone, only during your turn at a voice table. We don’t record it. See section 3.	You can’t speak at the table.
Table activity	Bookings, tables you sit at, side, speaking order, when you join and leave, Valid points given and received, the “Keep going?” vote, who you name as the person who convinced you, removals.	They come from using the app.
In-person lobbies	The lobbies you create or join with a code, the running order, who speaks, your position before and after. See section 9.	Only if you use them.
Points and progress	Points, debates done, people convinced, the flame (the days in a row you answer the question of the day), and the grade and badges that come from them.	We work them out from your activity.
Relationships	Who you follow and who you block.	They are optional.
Moderation	The reports you make and receive, with the reason, the votes of the people at the table, strikes and breaks.	They come from using the app.
Notifications	Your phone’s token for sending you push notifications, which types you have turned off, your quiet time, the pause if you set one and the list of notifications in the app.	Push notifications are optional.
Usage stats	Only if you turn them on: which screens you open and what you tap, never the text. Linked to a random identifier of your phone, not to your account. See section 10.	They are off until you turn them on.
Technical data	Error reports (phone model, operating system, app version, the point in the code that broke), server logs and the IP address in the anti-abuse counters.	They come from using the app.

We don’t collect your phone’s location, your contacts, photos, advertising identifiers or what you do outside the app. We don’t ask for your phone number. We don’t record your voice and we don’t turn it into text.

03Your voice

It goes out live. When it is your turn, your voice reaches in real time the people at the table with you and anyone listening: someone who follows one of the people seated can listen to the table while it is under way, without a microphone. The server opens the microphone for one person at a time: the others are muted, and they can’t get around it.
We don’t store it. We keep no audio files, we make no transcripts or subtitles and we don’t count words. What you say at the table stays with the people who heard it.
It doesn’t leave our infrastructure. The audio goes through our voice server, which runs in the same European Union infrastructure as the rest of the app. We don’t use an external service for audio.
During a report. If someone reports you, your microphone stays off while the others vote, even if it is your turn.
In in-person lobbies your voice doesn’t go through the app: you are in the same room and the phone doesn’t use the microphone.

04Positions, compass and opinions

Political, religious and philosophical opinions are special categories of personal data (Art. 9 GDPR). In feelya. they can come up in four places: positions on topics, the question of the day, the compass and what you say at the table.

Positions and tables. To create your account you tap “Accept and take a seat”: you accept the terms, the rules and the privacy notice, and give your explicit consent to the use of your positions and your answers to the question of the day. You can withdraw it whenever you want in Settings › Consents: from that moment you can’t book, join lobbies or answer the question of the day, and we don’t seat you, even if you had booked.
Your dots. We show others which side you are on, never the number of dots.
The question of the day is optional: you answer only if you want to, once. Nobody sees your answer. After answering you only see how many people chose each dot.
The compass has an explicit consent of its own, which we ask for before saving your answers. No other user sees your answers or the result, and today we don’t use them to form tables.
The up-to-date compass. With another yes, optional, the compass updates with your positions: every finished table and every answer to the question of the day on a topic tied to an axis moves it 15% toward the position you took. We ask for this yes when you save the compass or at the end of a debate, with two equal buttons; after a no we don’t ask again for 30 days. Only you see the moves. You turn it off in Settings › Consents and the compass stays where it is; if you delete the compass, the moves are deleted too.
The recovery code. When you save the compass we show you a 15-character code, once only. We keep only an encrypted fingerprint of it. With that code you can copy the result onto an account; before you do, we ask for your consent again.
You delete it with one tap from Settings or from Consents: your answers, scores and code are gone. You can retake the test whenever you want.

Sharing outside the app. You can share your compass result, your profile, the question of the day or a table using your phone’s share menu. The app prepares the message and it can contain your username or your result, for example “64% left”. You send it yourself, wherever you want: we don’t publish it and we don’t know where it ends up. From then on, the rules of the service you post it on apply.

05Who sees what, inside the app

At the table the others see your name, username, side and speaking order, and whether you are present. They hear your voice during your turn. At the end of the table they see, for each side with at least 3 people, the average of the positions before and after, how many people moved and how many Valid points each person received, never from whom.
Who is listening. Someone who follows one of the people seated can listen to the table while it is under way: they hear the voices and see the topic, names, usernames and sides, never the positions. They can’t speak or vote.
Who convinced you. Only you know the person you name: they only see how many people they convinced, not which ones.
On a topic’s page everyone sees how many people booked, how they split between the two sides and the first letter of the username of the first three.
On your profile other people see your name, username, points, debates done, people convinced, how many people follow you and whether you are at a table right now. Nobody sees your email, date of birth, country, style, compass or answers.
In the leaderboard your name, username, points, debates, people convinced and flame appear. Each leaderboard covers only your language.
Who you follow is visible only to you. The people you follow see how many people follow them, not who. When someone you follow sits down at a table, you get a notification with the topic, at most one every 30 minutes per person.
Reports. The reported person doesn’t know who reported them. The others at the table see their username and the reason, and vote. Nobody sees how anyone else voted.
Our team, through a restricted dashboard, sees name, username, part of the email, age band, counters and reports. It doesn’t see your positions or your answers, except in the copy of your data we prepare when you ask for it.

There are no private messages in feelya.

06Why we process them and on what legal basis

To do what	Legal basis
Create your account, send you the sign-in code, let you book and debate, lobbies, points, leaderboards, following, notifications, language	Performance of the contract you accept with the terms (Art. 6.1.b GDPR)
Check the minimum age and protect people under 18, using your date of birth and country	Performance of the contract, because the minimum age is a condition of the terms (Art. 6.1.b), and the legal obligation to protect minors on online platforms (Art. 6.1.c; Art. 28 of Regulation (EU) 2022/2065, the “DSA”)
Process positions on topics, at the table and in lobbies, and transmit what you say at the table, which can reveal political or religious opinions	Explicit consent (Art. 6.1.a and 9.2.a GDPR), which you give with “Accept and take a seat”
Save your answer to the question of the day	Explicit consent (Art. 6.1.a and 9.2.a GDPR), the same one as for positions, which you give when you create your account. Answering is optional
Compass, up-to-date compass and recovery code	Explicit and separate consent (Art. 6.1.a and 9.2.a GDPR)
Debate style, and spreading people who tend to speak up most across several tables on the same topic	Performance of the contract (Art. 6.1.b GDPR). You can skip the questions
Reports, the table vote, strikes, breaks, review by a person	Legal obligations on illegal content (Art. 6.1.c GDPR; Arts. 16 and 17 DSA) and legitimate interest in keeping tables safe for everyone, especially the youngest (Art. 6.1.f GDPR)
Usage stats	Consent (Art. 6.1.a GDPR), which you give by turning them on when you create your account or later in Settings, and withdraw whenever you want
Error reports	Legitimate interest in an app that works (Art. 6.1.f GDPR)
Account security, limits on codes and attempts, logs, backups	Legitimate interest in a secure, working service (Art. 6.1.f GDPR)

Without the consent on positions you can’t sit at a table: giving a position on a topic is the service itself. You can still enter the app and watch. The consents on the compass and on usage stats, on the other hand, are truly free: if you don’t give them, you lose nothing.

07Automated decisions

No algorithm makes decisions about you on its own with legal or similarly significant effects (Art. 22 GDPR). Suspending or closing an account is always decided by a person on our team. There are, however, some automated steps, and we tell you which:

Matching. At 21:30 the server forms the tables for your language by putting together people who chose opposite sides; people in the middle go to the shorter side. Anyone left out the time before is seated first, and two people who have blocked each other never end up at the same table. Beyond that, the order of bookings and a random draw count. When the same topic fills more than one table, style only decides which table you sit at, never whether you sit: people whose answers show they tend to speak up most are spread across the tables instead of all ending up at the same one. If you didn’t answer, you count as somewhere in the middle. The compass plays no part.
The microphone. The server opens it only for the person whose turn it is, and keeps it off for anyone who has been reported for as long as the vote lasts.
Removal, strikes and breaks. They are decided by a vote of the other people at the table, not by an algorithm. The system counts the votes and applies the consequences: leaving the table, the strike and, from the second strike in 30 days, a break from tables. For hate, discrimination and threats, a person on our team also reviews the report: if they don’t confirm it, the strike is removed.
Points and grades. We calculate them automatically from what happens at the tables. They are part of the game and have no other consequences for your account.

You can ask for a person to review any decision that concerns you: see the community rules.

08Minimum age and minors

The minimum age depends on the country set on your phone:

in Italy, 14, the age from which you can consent to an online service on your own (Art. 2-quinquies of the Italian Privacy Code);
in the other countries of the European Union, the European Economic Area and in the United Kingdom, the age set by their law for consenting to an online service (Art. 8 GDPR), but never less than 14;
in Australia, Malaysia and Indonesia, 16; in South Korea, 14; in the United States, India and Brazil, 18;
in every other country, or if your phone doesn’t say the country, 16.

Before you use anything in the app we ask for your date of birth. If it is below the minimum age, we close the account straight away and we don’t save the date. For 30 days we keep only an encrypted fingerprint of your email, so you can’t get back in with that email by typing another date; then we delete it.

Online tables are not split by age: anyone who meets the minimum age sits with, finds and follows anyone, adults included. For people under 18:

there are no private messages in feelya., and at the table people speak only in turn, with the microphone opened by the server;
voices are not recorded, and the terms forbid recording or publishing a table with minors;
optional notifications don’t arrive after 22:00, whatever quiet time is set.

There is no advertising in feelya. Your date of birth must be your real one. If we find out that an account belongs to someone below the minimum age, we close it.

09In-person lobbies

In-person lobbies are for debating among friends or in class, in the same room. The person who creates one, the host, chooses the topic and the running order and gives the others a 6-character code. To create or join one you need to meet the minimum age and to have said yes to positions.

The phone records nothing. It shows who has the floor, the time left and the vote.
What we save: the lobby, who is there and who speaks, your position before and after the debate, who convinced you, and the Valid points.
Who sees what: in the lobby everyone sees each person’s name, username and side, never the number of dots. At the end of the debate the same rules as an online table apply.
The host runs the show: gives the floor, extends or pauses a turn, ends the debate and can remove someone from the lobby.

10Usage stats and errors

Usage stats are off until you turn them on: with the optional switch on the screen where you accept the terms and rules, or in Settings › Usage stats. You don’t need to turn them on to create your account. Before that yes the app sends nothing, not even a request. If you turn them on, they tell us which screens you open, what you tap (the type of element, never the text), whether you allow notifications, when you open one and when you share something. We never link them to your account: your phone has a random identifier. They don’t carry your positions, your answers to the question of the day, the compass or what you type, and we don’t work out your country from your IP address. You turn them off with the same switch. When you sign out of your account they turn off and the identifier changes.

Error reports are sent when the app or the server breaks. They contain the phone model, operating system, app version and the point in the code that broke. We strip out email, IP address, typed text and the content of requests.

11Who receives the data

We use some providers that process data on our behalf, as processors (Art. 28 GDPR), under a contract that requires them to use it only for the service they provide to us and never for their own purposes:

the cloud infrastructure where servers, database, backups and table audio run, in the European Union;
sending the emails with the sign-in code;
delivering push notifications, which reach your phone through Apple’s and Google’s services;
error reports, on servers in the European Union;
usage stats, only if you turn them on, on servers in the European Union.

If you sign in with Apple or Google, sign-in goes through their system and for that part their privacy notices apply. Apple and Google know you used their account to sign in to feelya., but they receive nothing of what you do in the app.

We will send you the up-to-date list of providers, with the country where they process data, if you ask at hello@feelya.it.

When a provider receives data in the United States, the transfer is based on the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework (Art. 45 GDPR) and, where the contract provides for them, on standard contractual clauses (Art. 46 GDPR). You can ask us for a copy of the safeguards.

We may disclose data to the authorities when the law requires it. If content suggests a criminal offence that threatens someone’s life or safety, we report it (Art. 18 DSA). We don’t disclose your data to anyone else.

12How long we keep them

Data	How long
Email, name, username, people you follow, blocks, style, answers to the question of the day, notifications, future bookings	As long as you have the account. When you close it, we delete them straight away.
Date of birth and country	As long as the account. If you are below the minimum age, we don’t save the date at all.
Compass, moves and recovery code	Until you delete it or close the account.
Tables, lobbies, past bookings, Valid points, votes, counters, reports and strikes	As long as you have the account. When you close it they stay linked only to an internal code, without email, name, username or date of birth, because they are part of the results and the moderation of other people’s tables.
“Your point in one line”	30 days after the evening of the table.
In-app notifications	90 days.
Phone push token	As long as the phone accepts it, or until the account is closed.
Sign-in codes	They are valid for 10 minutes and we delete them within 24 hours.
Email fingerprint of someone below the minimum age	30 days.
Database backups	14 days, encrypted.
Server logs, error reports, anti-abuse counters	Server logs at most 30 days, error reports at most 90 days, counters with the IP address at most one hour.

13Your rights

At any time you can:

access your data and get a copy of it (Art. 15 GDPR): from Settings › Download your data you immediately get a file with your profile, language, consents, style, compass and its moves, flame, bookings, tables, lobbies, answers to the question of the day, Valid points given and received, notifications, reports made and received (without saying who made them), votes, strikes and breaks, who you follow and who you block. For everything else, write to us;
have it rectified (Art. 16): you change your name and username from your profile. To correct your date of birth, write to us;
have it erased (Art. 17): close your account from Settings › Delete account, or write to us;
restrict its processing (Art. 18) and object to processing based on legitimate interest (Art. 21);
receive it in a machine-readable format (Art. 20, data portability): the file you download is in JSON;
withdraw a consent whenever you want (Art. 7.3), without affecting what was done before. You withdraw the compass and usage stats with one tap and everything else works the same. You withdraw the yes to positions in Settings › Consents: from that moment you can only watch.

Write to hello@feelya.it. We reply within one month, free of charge. We may ask you to confirm it’s you from the account’s email address.

If you think we process your data in a way that does not comply with the law, you can lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it), or with the authority of the EU country where you live.

14Security

Communications between the app and the server are encrypted. If you sign in with Apple or Google, on the server we check the signature of their sign-in and accept only verified emails. With email you need a 6-digit code that is valid for 10 minutes: we store it only in encrypted form, it dies after 5 wrong attempts, and there are limits on how many codes can be requested per email and per network. The access key stays in your phone’s protected keychain. Of the compass recovery code we keep only an encrypted fingerprint. Our team’s dashboard is separate from the app and every action on accounts is logged.

If a personal data breach happens that puts your rights at risk, we notify the Garante within 72 hours and, if the risk is high, you too.

15On your phone

The app saves on your phone, in the system’s protected keychain, only what it needs: the access key, a copy of your profile (with the compass and its code, if you took it), the language you chose and your choice on usage stats. It reads your phone’s language and region, not your location. We don’t use cookies or advertising tracking tools. The microphone is used only for voice tables and transmits only during your turn; you can withdraw the permission in your phone’s settings, and in that case you can’t speak at the table. We don’t use the camera or your photos. On iPhone the app keeps on your phone, for widgets and the Live Activity, a snapshot of tonight’s table (with your side, if you have booked), your flame and the question of the day (with the side of your answer); during a table the Live Activity shows the topic, the round and who is speaking. They stay on your phone and appear only if you add the widgets or leave Live Activities on: anyone looking at your screen can see them. When you share something, your phone passes the message to the app you choose.

16Changes

If we change this privacy notice substantially we tell you in the app and ask you to read it again before it applies to you. If something new needs a new consent, we ask for it when you use the feature that requires it.