Effective date: 23 October 2026
1. Who operates Sloway?
Sloway is operated by HEALTH NOW JOANNA DUBAJ, a sole proprietorship registered in Poland, Tax Identification Number (NIP): PL9690891397 (the “Controller”, “we”, “us”).
Business correspondence address: ul. Władysława Jagiełły 6/31, 32-020 Wieliczka, Poland
Privacy contact: support@sloway.app
2. What information do we process?
- Account and profile: your account email address, user identifier, display name, profile photo, account settings and authentication information processed through our login provider.
- Content you choose to save: journeys and locations you enter, dates, notes, inspirations, packing items, memories, photographs and other media, and files you upload to Wallet (which may contain personal or sensitive information).
- Messages and requests: your email address, correspondence and information needed to verify and process support, privacy or account-deletion requests.
- Technical information: information required for authentication, operation, security and troubleshooting, including service-generated technical records and website server logs.
Some Wallet documents and images may include identification details or information about other people. You choose what to upload. Please only store content you have the right to use and avoid including unnecessary sensitive details about yourself or others.
3. Why do we use this data?
- To create and maintain your account; authenticate you; save and display your journeys and other content; and provide features you request — performance of a contract, GDPR Article 6(1)(b).
- To maintain the security and reliability of Sloway, prevent misuse, troubleshoot problems, and respond to ordinary support enquiries — our legitimate interests, Article 6(1)(f), balanced against your rights.
- To respond to and fulfil applicable data-protection requests, accounting or other legal obligations — Article 6(1)(c), where applicable.
Where optional processing requires consent, we will request it separately and allow you to withdraw that consent. We do not use uploaded private journey content for public publication or advertising merely because you store it in Sloway.
Is this information required? An email address and the authentication data required by your chosen sign-in method are needed to create and access an account. Profile details and journey content are supplied at your discretion; without them the corresponding functions may be limited.
4. Who may receive the information?
We use service providers necessary to run Sloway, including Google Firebase (Authentication, Cloud Firestore and Cloud Storage) for account authentication, database and file storage, and LH.pl for our website and support email. These providers process relevant information to deliver their services under applicable contractual and legal terms. We may disclose information where required by law. We do not sell your private journey content.
If you choose Google Sign-In, Google processes information necessary for that sign-in under its own applicable terms; Sloway receives the account information needed to create or access your account. If we later activate payments, analytics or additional optional integrations, we will update this policy and provide any information or choices required by law before enabling them.
5. Where is information processed?
Our services are operated from Poland and use third-party infrastructure. Google and its authorised subprocessors may process information in countries outside the European Economic Area. Where required, international transfers are subject to lawful safeguards described in the applicable Google Firebase data-processing terms. You may contact us for information about these safeguards. More detail is available in the Firebase Data Processing and Security Terms.
6. How long do we retain it?
Account information and user content are ordinarily retained while your Sloway account exists or until you delete particular content. Following verification and processing of an account-deletion request, we delete the account and associated active user data, unless specific information must be retained for a lawful reason, such as a statutory obligation or establishing, exercising or defending legal claims. Limited technical or backup copies may remain temporarily according to provider retention and deletion cycles rather than disappearing instantly. Support and privacy-request correspondence is retained for the time necessary to resolve the matter, verify our response and meet applicable legal obligations, after which it is deleted or anonymised when no longer needed.
7. Your rights
Subject to applicable conditions under the GDPR, you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where consent is used, you may withdraw it without affecting earlier lawful processing. Email support@sloway.app. We may need to verify that a request concerns your own account. We will respond without undue delay and normally within one month of receiving your request; where the GDPR permits an extension, we will explain it to you.
You can also lodge a complaint with the Polish Personal Data Protection Office (UODO): uodo.gov.pl.
8. Delete your account
To request deletion, visit our public Delete Account page (even if you no longer have the app) or email support@sloway.app. The released app will also link to this request route from its Privacy & Security settings. Submitting a request does not instantly delete an account: we verify ownership before processing deletion and will confirm completion. We do not require your password or password-reset link. Any data we must retain for a lawful reason will be explained to you.
9. Security and privacy
Sloway is designed as a private place for your travel memories. We use account authentication, transport security such as HTTPS where applicable, and technical and organisational access safeguards appropriate to the service and its providers. No internet-based system can guarantee absolute security. Please protect your login credentials and device.
10. This website
Our simple website provides information about Sloway, contact details and a route to request deletion. The website hosting provider may process ordinary access and security logs needed to deliver the site and maintain its security. At the time of this policy, our static website does not intentionally deploy advertising or analytics cookies. If this changes, we will update the notice and seek consent where required.
11. Automated decisions
We do not use your saved journey content to make decisions producing legal or similarly significant effects about you by solely automated means.
12. Updates and questions
We may update this policy to reflect service or legal changes. The current version will be available at sloway.app/privacy-policy/. For questions, contact support@sloway.app.