Privacy Policy

Controller Information

The controller of your personal data is Darteer.ai, s.r.o., registered at Korunní 2569/108, Vinohrady, 101 00 Prague 10, Company ID: 21801142, listed in the Commercial Register maintained by the Municipal Court in Prague under file no. C 405862, established and existing under the laws of the Czech Republic (the "Controller"), which operates the mobile application Darteer (the "Darteer"). Darteer enables its users (the "Users") to perform digital evaluation of dart throws using algorithms and artificial intelligence. Darteer can be used in a free local mode without creating a user account (the "Free Local Mode"), in which game data is stored only locally on the User's device, or in a mode with a user account (the "Darteer Account"), which allows the use of cloud synchronization, online play, leaderboards, friends, the portal, and other online features (the "Online Features"). In Darteer, the Controller therefore processes and oversees the processing of personal data of you as data subjects.

The Controller processes your personal data and decides how they will be processed, for what purpose, and for how long. The Controller may also select additional personal data processors that assist with processing, listed in these Personal Data Processing Principles.

Exercise of Rights, Contact Details

You may contact the Controller regarding all matters related to personal data processing via email at support@darteer.ai or by post at: Darteer.ai, s.r.o., Korunní 2569/108, Vinohrady, 101 00 Prague 10. Requests are handled without undue delay, but no later than within one month. In exceptional cases, especially due to the complexity of the request, this period may be extended by an additional two months. The Controller will inform data subjects of any such extension and the reasons for it in due time.

Statement of the Controller

The Controller declares that, as a controller of Users' personal data, it meets all legal obligations required by applicable legislation, in particular Act No. 110/2019 Coll., on Personal Data Processing, as amended, and Regulation (EU) No. 2016/679 (GDPR), and thus that it:

will process Users' personal data only on the basis of a valid legal ground, especially legitimate interest, performance of a contract, legal obligation, or granted consent,
fulfills the information obligations under Article 13 GDPR prior to commencing personal data processing,
enables Users to exercise their rights under the Personal Data Processing Act and the GDPR and supports them in doing so.

What Personal Data Are Processed and for What Purpose?

In connection with providing Darteer services, the Controller processes the following personal data. The scope of the processed data depends on the chosen usage mode (Free Local Mode or the mode with a Darteer Account) and on the consents granted by the User.

Identification and Contact Data

The Controller processes primarily nickname, first and last name, and email address, for the purposes of accessing Darteer, creating and managing a Darteer Account, and ensuring proper provision of the Online Features. In the Free Local Mode without a Darteer Account, the Controller does not process this data.

Throw Data

By default, throws are evaluated by local evaluation directly on the device aimed at the dartboard, where the User's results are derived from image and telemetry data (the "Local Evaluation"). In this mode, the Controller does not receive photographs or video recordings of the dartboard for the purpose of evaluating throws. Throw results and statistical data about throws are, in the Free Local Mode, stored only locally on the User's device.

Training Photos

Based on separate voluntary consent (opt-in), the User may provide the Controller with photographs or images of the dartboard (the "Training Photos") for the purpose of developing, training, testing, validating, and improving Darteer's detection model. Providing Training Photos is entirely voluntary and does not affect the functionality of Local Evaluation. Consent may be withdrawn at any time in Darteer settings or by sending an email to support@darteer.ai.

Diagnostic Data

The Controller processes technical data on the operation of Darteer necessary to ensure security, stability, error correction, and performance improvement (the "Diagnostic Data"). Diagnostic Data includes in particular error and crash reports, performance data, device type, operating system version, Darteer version, and technical data related to the operation of the detection model. The Controller configures the diagnostic tools so as to minimize the processing of personal data to a reasonable extent; the diagnostic tools do not, by default, include photographs, video recordings, or audio recordings of the User. The legal basis for processing Diagnostic Data is the Controller's legitimate interest in ensuring the functionality, security, and stability of Darteer.

Product Analytics

The Controller may measure the use of Darteer, in particular interactions with features, screens, and settings (the "Product Analytics"), and only on the basis of the User's separate voluntary consent (opt-in) granted at the first launch of Darteer. Consent to Product Analytics may be withdrawn at any time in Darteer settings.

Cloud Data

When using a Darteer Account and the Online Features, the Controller processes data stored or synchronized through the Controller's server infrastructure (the "Cloud Data"), in particular nickname, email address, subscription or purchase data, game and statistical data, and data about friends, leaderboards, and online play.

Online Audiovisual Transmission

Within the Online Features, a temporary real-time transmission of an audio/video stream between participants of an online game may take place for the purpose of playing or watching a match (the "Online Audiovisual Transmission"). During the Online Audiovisual Transmission, IP addresses, network metadata, the identity of the participant in the online room, and the access token to the room may be processed. The Controller does not, by default, record, store long-term, or use these audio/video streams for training the detection model.

Payment & Accounting Data

This includes transaction details, i.e. what was purchased, transaction date, price. The remaining personal data needed to carry out the transaction is processed by an external platform such as Google Pay as an independent data controller.

Communication Data

This includes both the content of messages exchanged between Users and Darteer and metadata on the sending and delivery of those messages.

Darteer Usage Data

The Controller processes in particular the type of device used, its operating system, order data, or behavior in Darteer. By using Darteer, certain data is automatically sent from the data subject's device. From the logs, which also record information about the data subject's activity in Darteer for security reasons, it is possible to determine the duration of a single login and the actions the data subject performed in the Darteer application.

The Controller Processes Personal Data on the Following Legal Grounds:

Providing and Operating Darteer

In order for you to create a Darteer Account and fully use the Online Features, we will process all of the above categories of personal data. In the Free Local Mode without a Darteer Account, the Controller processes only a limited scope of data necessary for the operation of Darteer, in particular Diagnostic Data, and possibly Training Photos and Product Analytics, if the User has granted separate consent. This processing also includes sharing your personal data with other users, according to your choices made in Darteer. The legal ground for this processing is the performance of the contract you enter into with us in the manner described in the Terms. For this purpose, we process your data for the duration of your use of Darteer. This purpose includes in particular the creation and management of a Darteer Account, evaluation of throws, synchronization of Cloud Data, and management of payments.

Improving Darteer

To enable further improvement of Darteer's functionalities, we will process Diagnostic Data on the basis of the Controller's legitimate interest in the continuous improvement of the functionality, stability, and performance of Darteer. Training Photos are processed solely on the basis of the User's separate voluntary consent. As soon as possible, we pseudonymize or anonymize the data. For this purpose, we process your data for the duration of your use or provision of Darteer services and for a further period of 5 years after its termination. You may also raise an objection to the processing of Diagnostic Data on the basis of legitimate interest within the Darteer application itself. Consent to providing Training Photos may be withdrawn at any time in Darteer settings.

Protection of the Controller's Legal Interests and Internal Records

The Controller further processes the personal data of data subjects listed above to protect its rights and maintain internal records of data subjects, for any need to enforce rights or mount an effective defense in a potential dispute. For this purpose, the Controller may process all categories of data listed above. The legal basis for processing here is the Controller's legitimate interest in protecting rights and legal claims and in maintaining records of provided performance. Personal data is generally retained for the duration of the statutory limitation period, but usually no longer than sixteen (16) years after the provision of the service or after the termination of the contract, including deletion of the user account.

Brand Promotion and Marketing Communication

The Controller uses your personal data for the purpose of promoting its brand, including information about offers and news about the services provided within Darteer, all in a manner that avoids unnecessarily disturbing you. The legal basis for processing is the Controller's legitimate interest in promoting Darteer and related services. At the same time, in some cases you may grant your consent to the processing of personal data. If the Controller processes your personal data on the basis of legitimate interest, it does so for the duration of the account's existence, which you can delete at any time. You have the right to raise an objection to such processing. If the Controller processes your personal data on the basis of your consent, it does so until you withdraw that consent.

Sources of Personal Data

The Controller processes personal data that it receives from its data subjects when accessing Darteer or on the basis of tracking individual throws. The Controller obtains further personal data by derivation from other processed data. The Controller may also obtain further personal data from other users of the Services and from its partners. Such partners are controllers of your personal data who transfer it to the Controller according to their own instructions and their own purposes, and where the Controller is only a processor of your personal data, meaning that it processes personal data according to the instructions of its partners. There may also be partners with respect to which the Controller will be in joint controllership with its partners, which means that responsibility for processing your personal data will lie with the Controller who decides about the processing of your personal data in the given case.

Data Security and Protection

The Controller protects personal data to the maximum possible extent using modern technologies that correspond to the level of technical development. The Controller has adopted and maintains all possible (currently known) technical and organizational measures that prevent misuse, damage, or destruction of users' personal data.

Protecting your data is a priority. For this reason, the Controller has adopted, maintains, and continuously improves technical and organizational measures to protect against leakage, loss, deletion, or misuse of personal data. These are in particular the following measures:

encryption of data during transmission, both communication between the Controller's servers and your device and communication during technical transfers within the operation of the services;
ensuring the ongoing confidentiality, integrity, availability, and resilience of systems and services that process personal data;
ensuring the ability to restore the availability of and access to personal data in the event of any incidents;
regular testing, assessment, and evaluation of the effectiveness of the implemented measures for ensuring the security of processing;
control and recording of access to personal data and any handling of it;
regular backup of personal data to independent locations.

Sharing Personal Data with Third Parties

Access to users' personal data is granted to employees and collaborators of the Controller who are bound by confidentiality and are trained in the area of personal data processing security.

To ensure certain specific processing operations that the Controller cannot perform on its own, it uses the services and applications of processors who specialize in the given processing and proceed in accordance with the GDPR.

The Controller further, with your permission, makes your personal data available to other Darteer users.

The Controller may also transfer your personal data, on the basis of your consent, to other entities acting in the role of controller.

For the processing of personal data, the Controller uses the following categories of personal data processors:

External accounting firm for the purpose of processing accounting
IT support for the purpose of ensuring the smooth operation of information systems
Providers of cloud infrastructure and hosting services (in particular the Convex service)
Providers of authentication services
Providers of analytics and product improvement services (in particular the PostHog service)
Providers of error monitoring and diagnostics services (in particular the Sentry service, with limited collection of personal data)
Providers of real-time communication services

The Controller reserves the right to decide in the future to use additional applications or processors to facilitate and improve processing, while applying at least the same requirements for security and quality of processing when selecting a processor.

Data Transfers Outside the European Union

Data is processed predominantly within the European Union or in countries that ensure an adequate level of protection on the basis of a decision of the European Commission. Some services used by the Controller, in particular the cloud infrastructure of the Convex service, are operated in the USA.

Equivalent protection of personal data is ensured. The Controller continuously and repeatedly evaluates this fact, and if equivalent protection were to cease to be ensured, it will adopt measures in accordance with the GDPR so that personal data continues to be duly protected.

Any transfer of data outside the EU will only be carried out if the relevant processor or controller undertakes to comply with the standard contractual clauses issued by the European Commission, available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en.

Users' Rights in Connection with Personal Data Protection

In connection with the protection of personal data, the Controller respects a number of rights. To exercise their rights, data subjects may contact the Controller through the contact details provided above.

The right to information, which is fulfilled already by this information page with the principles of personal data processing.
The right of access. A data subject may at any time call upon the Controller to provide information about what personal data is processed about them and obtain access to that personal data, including a copy of it, whereby these materials will be made available to users free of charge; a fee will be charged for making such materials available on the basis of repeated or vexatious requests.
The right to restriction of processing may be used by users if they believe that the Controller is processing inaccurate data, in the event of a belief that the Controller is carrying out processing without a sufficient legal basis but the user does not wish to delete all data, or if an objection to processing has been raised. The user may limit the scope of personal data or the purposes of processing (e.g. by unsubscribing from the newsletter, they limit the purpose of processing for sending commercial communications).
The right to portability. The user has the right to obtain the personal data they provided to the Controller and which is processed by automated means on the basis of a contract or consent. The Controller will provide such data to the user in a structured, commonly used format within 30 days of receiving the request for transfer of personal data from the data subject.
The right to rectification. If a user finds that the personal data the Controller processes about them is inaccurate or incomplete, they have the right to have the Controller correct it without undue delay, or supplement it as the case may be.
The right to erasure (to be forgotten). Users have the right to erasure (to be forgotten), whereby the Controller points out that this right does not apply where the processing of personal data is still necessary for compliance with other legal obligations. The user has the right to erasure of personal data if (i) they withdraw consent to the processing of personal data, where this concerns data for whose processing consent is necessary and there is no other legal ground for processing, (ii) they raise an objection to the processing of personal data that the Controller processes on the basis of its legitimate interest and either the Controller does not demonstrate that there are serious legitimate grounds for processing which override the interests, rights, and freedoms of the User, or the objection concerns direct marketing, (iii) the processing of personal data carried out has ceased to be in accordance with generally binding regulations.
The right to withdraw consent. If you grant the Controller consent to the processing of personal data, this is entirely voluntary consent that you may withdraw at any time by sending an email to support@darteer.ai. The Controller points out that withdrawal of consent does not affect the lawfulness of processing before such withdrawal, or the possibility of maintaining the processing of personal data on the basis of other legal titles.
The right to object to processing. Users always have the right to object to the processing of personal data that takes place on the basis of the Controller's legitimate interest. The Controller will always comply with such an objection in the event that it processes personal data for marketing purposes; on other grounds the Controller will cease processing personal data unless it has serious legitimate grounds to continue processing the personal data.
The right to lodge a complaint with a supervisory authority. In accordance with Article 77 GDPR, users have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place where the alleged infringement occurred. The Controller's lead supervisory authority within the meaning of Article 56 GDPR is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic (https://www.uoou.cz). A list of the supervisory authorities of the Member States is available on the website of the European Data Protection Board (https://edpb.europa.eu/about-edpb/about-edpb/members_en).

Protection of Children's Personal Data

The Darteer service is not intended for persons under 16 years of age. The Controller does not knowingly process the personal data of persons under 16. If you find that a person under 16 has provided the Controller with personal data without the consent of a parent or legal guardian, please contact us at support@darteer.ai and this data will be deleted without delay.

Effectiveness

These principles of personal data processing and protection are effective as of 1 July 2026.