Privacy Policy
Last updated: May 11, 2026
Evremas ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Cyprus law.
1. Data Controller
Evremas is the data controller for personal data collected through evremas.com. Contact us at: Email: info@evremas.com Phone: +357 97 525800 Location: Limassol, Cyprus Website: evremas.com
2. Data We Collect
We collect the following categories of personal data: Account Data: Email address, display name, username, profile avatar Optional Data: Mobile phone number (for SMS notifications), city preference, service category preferences Activity Data: Reviews written, points earned, achievements unlocked, businesses visited, QR codes scanned Leaderboard Data: Your username, points total and level are displayed publicly on the Evremas leaderboard unless you opt out via Settings. Referral Data: When you share your referral link, we track referral completions linked to your account to award bonus points. Business Data (for business owners): Business name, address, phone, email, services, photos, opening hours Technical Data: Device type, browser type, IP address (for security purposes), session data
3. Legal Basis for Processing
We process your data under the following legal bases: Contract: To provide you with the Evremas service you signed up for Legitimate Interests: To improve our platform, prevent fraud and ensure security Consent: For optional features like SMS notifications and marketing emails (you can withdraw consent at any time) Legal Obligation: To comply with applicable Cyprus and EU laws and regulations
4. How We Use Your Data
We collect only the minimum data necessary for the purposes described in this policy (data minimization principle, GDPR Article 5(1)(c)). We use your personal data to: • Provide and maintain the Evremas platform • Manage your account, points and rewards • Send notifications about your account (if enabled) • Display your reviews and activity on the platform • Improve our services and user experience • Prevent fraud and ensure platform security • Comply with legal obligations • Contact you about important platform updates
5. Data Sharing
We do NOT sell your personal data to third parties. We may share data with: Service providers: • Base44 - cloud hosting and platform infrastructure • WebSMS Cyprus - SMS notifications • Datadog - performance monitoring (anonymous data only) All under strict GDPR-compliant data processing agreements. ClientDriven (clientdriven.me): Only if you subscribe to the BUSINESS plan. Your booking data, customer information and calendar data is processed by ClientDriven. They maintain their own Privacy Policy at clientdriven.me/privacy Payment processors: • Stripe Inc. - international card payments • JCC Payment Systems - local Cyprus card payments Transaction data is shared only for payment processing. Neither Stripe nor JCC store your full card details on our systems. Business owners: When you write a review or interact with a listing, your username and review are visible to that business owner. Law enforcement: Only when legally required under Cyprus or EU law.
6. Data Retention
We retain your data as follows: User data: • Active account: Retained while account is active • Deleted account: Permanently deleted within 30 days of request Business data: • Active listing: Retained while listing is active • Removed listing: Retained for 12 months then deleted Payment data (when billing is active): • Transaction records: 7 years (Cyprus tax law requirement) • Payment method details: Never stored on our systems Technical logs: • Security and error logs: 90 days • Analytics data: 13 months • Performance monitoring: 30 days
7. Your Rights (GDPR)
Under GDPR you have the following rights: ✓ Right of Access - Request a copy of your personal data ✓ Right to Rectification - Correct inaccurate data ✓ Right to Erasure - Request deletion ("right to be forgotten"). Upon account deletion, all associated data is permanently deleted including: reward history, experience points, achievements, QR scan records, reviews, game history, referral records and all personal preferences. ✓ Right to Restriction - Restrict how we process your data ✓ Right to Portability - Receive your data in machine-readable format ✓ Right to Object - Object to certain types of processing ✓ Right to Withdraw Consent - Withdraw consent at any time ✓ Right to Opt Out of SMS Marketing - Toggle SMS off in Settings at any time To exercise your rights contact us at info@evremas.com We will respond within 30 days. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection: www.dataprotection.gov.cy
7a. How to Delete Your Account
You can permanently delete your Evremas account and all associated data at any time: Step-by-step: 1. Open the Evremas app 2. Tap the Me tab (bottom navigation) 3. Go to Settings (gear icon) 4. Scroll to the Danger Zone section 5. Tap "Delete My Account" 6. Confirm when prompted What happens when you delete: • All your personal data is permanently and immediately deleted • Your reward points, XP, achievements, reviews, QR scan history, and game history are erased • Your referral records and preferences are removed • Your account cannot be recovered after deletion This satisfies your right to erasure under GDPR Article 17 and Apple App Store Guideline 5.1.1(v). Alternatively, email us at info@evremas.com and we will delete your account within 30 days.
8. Cookies
We use the following types of cookies: 🔒 Essential - Required for the platform to function (login session, dark mode, language). Cannot be disabled. 📊 Analytics - Help us understand usage patterns (anonymous data only). Optional. ⚙️ Preferences - Remember your city and category preferences. Optional. 💳 Payment Cookies (Coming Soon) - Will be activated when Stripe/JCC billing launches. Currently inactive. 📅 ClientDriven Booking - Only set if you use a BUSINESS plan booking page. Manage your preferences via the Cookie Settings panel.
9. Security
We implement industry-standard security measures: • HTTPS encryption for all data transmission • Secure authentication system • Row-level security on all database entities • Regular security audits • Access controls and admin role management However, no method of internet transmission is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
Evremas is not directed at persons under 16 years of age. If you are between 14 and 15 years old, you must have parental or guardian consent to use Evremas, in accordance with Cyprus law implementing GDPR Article 8. If you are under 14, you may not use this platform. We do not knowingly collect personal data from persons under 14. If you believe a minor has provided us with personal data without appropriate consent, contact us immediately at info@evremas.com and we will delete it promptly.
11. International Transfers
Your data is processed within the European Union (EU). Our cloud hosting provider Base44 operates within EU data protection standards. Any transfers outside the EU are conducted under appropriate safeguards in compliance with GDPR Article 46.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 14 days before changes take effect. The current version is always available at evremas.com/privacy
13. Contact & Complaints
For privacy-related queries: Email: info@evremas.com Phone: +357 97 525800 WhatsApp: +357 97 525800 You have the right to lodge a complaint with: Cyprus Commissioner for Personal Data Protection www.dataprotection.gov.cy
14. Automated Processing & Profiling
We use automated processing for the following purposes: Review moderation: Reviews are automatically checked for prohibited content (profanity, spam, suspicious links) using our content filter. A review may be automatically rejected or flagged for human review based on this check. You have the right to request human review of any automated moderation decision by contacting info@evremas.com. Points & level calculation: Your reward points, experience points (XP) and level are calculated automatically based on your platform activity (reviews, scans, referrals etc.). The calculation formula is consistent and applied equally to all users. Leaderboard ranking: Your position on the leaderboard is automatically calculated based on your accumulated points. This constitutes profiling under GDPR Article 4(4) but produces no legal or similarly significant effects. None of these automated processes produce decisions with legal effects on your rights. You may contact us at info@evremas.com to request human review of any automated decision affecting your account.