Privacy policy
Which data Gotu uses, why, for how long and what you can do about it.
This is a translation. If the English and the Dutch text differ, the Dutch version prevails.
Who we are
Gotu app (Gotu), located at Beethovenstraat 25-3, 1077 HM Amsterdam, Chamber of Commerce (KvK) 91569087, is responsible for processing your personal data in the Gotu app, on gotu.world and in the Gotu portal for venues. Questions about privacy? Email privacy@gotu.world.
Gotu is meant for people aged 18 and over. We do not knowingly collect data from minors.
Which data we use and why
| Purpose | Data | Legal basis |
|---|---|---|
| Your account: signing in, linking your deals and rewards to you | Name, email address, the chosen sign-in method (email code, Apple or Google), the language you use in the app (Dutch or English, so that messages arrive in your language), a secure session, your date of birth and the version of the terms you accepted, with date and time | Performance of the contract; legitimate interest in protecting 18+ access, age-appropriate deals and the legal drinking age. Venues never see your date of birth. |
| Reserving and redeeming | Reservations, redemptions and the confirmation by staff (PIN version), party size, no-show and dispute reports, favourites, preferences | Performance of the contract; legal retention obligation for the accounts |
| Inviting and Gotu credit | Who invited whom, progress towards the credit, earned and spent credit and the related payments at venues | Performance of the contract |
| Preventing misuse and fraud | A random installation code that is kept in your device's secure storage (keychain) and sent along when signing in, inviting and redeeming; signals at a redemption: outside opening hours, far from the venue (only if you already share your location with the app; we do not keep the location itself) and multiple accounts on one device | Legitimate interest: protecting Gotu credit and deals against misuse, including to protect venues. The installation code is not a hardware ID and is not used for anything else. |
| Usage measurement (limited analytics) | Which screens and actions are used (for example a place viewed, a deal opened). Only with a random code that changes at least every 30 days: never linked to your account, your name or your email address. No search text, no location. If you allow this, venues can see an age distribution only as a group from ten participants; never names or dates of birth. | Legitimate interest: improving the app and showing venues counts. The individual measurements are erased after 30 days; venues only receive aggregate counts. You can switch the measurement off under Account, Usage measurement. |
| Location | Your device location, only if you give permission, to show places nearby | Consent (through your device). You can withdraw it in your device settings. |
| Notifications | A device code for push messages and your choices for reminders, new deals and rewards | Consent (through your device) |
| Crash reports | Technical data when the app crashes: device type, operating system, app version and the error message. No content of your account. | Legitimate interest: keeping the app reliable |
| Help and questions | Your message, your email address and what is needed to help you | Performance of the contract; legitimate interest |
| Waitlist on gotu.world | Your email address, the moment of signing up and confirming. Every email contains an unsubscribe link. | Consent. You can unsubscribe at any time. |
| Venues and their staff (portal) | Name, email address, role and access per venue; company details for invoicing | Performance of the contract; legal retention obligation |
We do not sell your data and do not use it for third-party advertising.
What a venue sees of you
A venue only sees what is needed to welcome you: your first name, the size of your party, your reservation and your redemption code. Never your email address. About groups of guests a venue only sees totals and counts, such as how many guests came for the first time or again.
Who we share data with
We work with processors who only act on our instructions. With each of them a data processing agreement or the supplier's standard terms have been concluded.
- Cloudflare: hosting, database and file storage for the app, the portal and this website.
- Resend: sending and receiving email (login codes, confirmations, help).
- Google (Firebase): push messages to Android and iOS, crash reports and, if you choose it, signing in with Google.
- Apple: signing in with Apple and push messages to iOS.
- Emby: AI help in the venue portal, and the English translation of the offer texts that venues write themselves. Only business data and the text of the offer go there, never guest data.
- Google Maps Platform (Places): filling in venue address and opening data. No guest data goes there.
- Invoicing: we make and keep the invoices to venues ourselves, in the same storage (Cloudflare). They contain company details of venues, no guest data.
Some of these parties are (partly) outside the European Economic Area, for example in the United States. In that case we use a mechanism approved by the European Commission, such as the EU-US Data Privacy Framework or standard contractual clauses. We only pass data on if the law requires it, for example to investigating authorities on a valid demand.
How long we keep data
| Data | Retention period |
|---|---|
| Account (name, email address, sign-in methods, favourites, settings) | Until you delete your account. An account without activity for 24 months is deleted after a warning by email. |
| Reservations, redemptions, Gotu payments and invoicing data | 7 years (tax retention obligation). Once your account is gone, without any link to you. |
| Usage measurement (individual measurements) | 30 days. After that only daily counts per place remain, without codes or accounts. |
| Login codes and expired sessions | Deleted within 30 days |
| Installation codes and fraud signals | 12 months |
| Help messages | 24 months after closing |
| Waitlist | Until you unsubscribe or the launch is completed |
Your rights
You have the right of access, correction, erasure, restriction of processing, objection and to take your data with you. You can withdraw permission for location and notifications at any time in your device settings; switch usage measurement off under Account, Usage measurement. In the app you can find a copy of your data and delete your account (Account, Privacy and data); that is also possible on the deletion web page. When you delete, we erase your name, email address, sign-in methods, favourites and notification settings. We keep reservations, redemptions and Gotu payments without any link to you, because venues, invoices and invited friends depend on them.
You make a request via privacy@gotu.world; we respond within a month. Do you disagree with how we handle your data? Please contact us first. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
We protect data with encrypted connections, access control per role and a log of administrative actions. Do you see a security problem? Report it via security@gotu.world.
This policy is version 2, valid from 1 november 2026. For an important change we let you know in the app.