Back to Capsule
Capsule — Privacy Policy
Last updated: 27 October 2026 · Terms of Service
1. Controller
JAT App Ventures UG (haftungsbeschränkt), Zur Börse 26, 10247 Berlin, Germany. Managing director: Jens Thenakara. Email: info@jatappventures.xyz.
This policy applies to the Capsule mobile app ("the App"). Our website has its own privacy notice.
2. What data we process
- Account data: name, email address, profile picture and login information.
- Your content: photos, videos, voice recordings, text, captions and Future Memory messages you create or upload.
- Recipient and sharing data: names and contact details (such as email address or phone number) of people you share Capsules with or name as recipients of Future Memories.
- Photo library data: if you allow access to your photo library, the App screens your photos and their metadata (such as the date taken) to suggest Capsules automatically.
- Subscription data: your subscription status and purchase history as reported by Apple or Google. We do not receive your payment card details.
- Usage data: features used, interactions, session duration and in-app events.
- Device and diagnostic data: IP address, device type, operating system, app version, crash reports and performance data.
- Support data: the content of messages you send us.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the App: account, storage, sharing, Future Memories, subscriptions | Art. 6(1)(b), performance of contract |
| AI features you choose to use (overlays and other creative tools) | Art. 6(1)(b), performance of contract |
| Automatic Capsule suggestions from your photo library | Art. 6(1)(b), performance of contract; you control photo access in your device settings |
| Analytics to improve the App | Art. 6(1)(a), consent where required (§ 25 TDDDG); otherwise Art. 6(1)(f), our legitimate interest in improving the App |
| Crash reports, security, fraud and abuse prevention | Art. 6(1)(f), our legitimate interest in a secure, stable App |
| Service messages (security notices, changes to terms) | Art. 6(1)(b) and (f) |
| Marketing emails | Art. 6(1)(a), consent |
| Legal obligations (record keeping, requests from authorities) | Art. 6(1)(c), legal obligation |
Providing account data is necessary to use the App. Everything else is optional or depends on the features you use.
4. AI processing
Capsule uses Google machine learning and Google Cloud services on our behalf for its AI features: to screen the photos you give the App access to and suggest Capsules automatically, and to generate overlays and other results from the photos, videos or recordings you select. Processing may take place in data centres in the European Union and the United States. Your content is not used to train AI models, neither by us nor by the AI services we use, and the processed content is used only to provide the feature to you. AI features do not make decisions that have legal or similarly significant effects on you.
5. Who receives data
- Google (Google Ireland Limited and Google LLC) as our processor for hosting, storage, authentication, AI processing, analytics (Google Analytics for Firebase) and crash reporting, under a data processing agreement.
- Apple and Google as independent controllers when you download the App or purchase a subscription in their stores.
- People you share content with, who can see what you share with them.
- Authorities, where we are legally required to disclose data.
We do not sell or rent personal data.
6. International transfers
Some data is processed in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, on the basis of the European Commission's adequacy decision. In addition, the EU Standard Contractual Clauses apply. You can request a copy of the relevant safeguards from us.
7. Storage and security
Your data is stored on Google Cloud infrastructure and encrypted in transit and at rest. Access is restricted to what is needed to operate the App. No system is perfectly secure, but we follow industry-standard technical and organisational measures and review them regularly.
8. Retention
We keep your data for as long as your account exists. Content you delete is removed promptly. When you delete your account, we delete your personal data within 30 days; copies in backups are overwritten in the normal backup cycle. Analytics data is kept for a maximum of 14 months. Where statutory retention obligations apply, we restrict the data to that purpose and delete it once the obligation ends.
9. Deleting your account
You can delete your account and all associated data directly in the App under Settings, on both iOS and Android, or by emailing info@jatappventures.xyz. We complete deletion within 30 days.
10. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests (Arts. 15–21 GDPR). You can withdraw consent at any time with effect for the future, for example in the App or in your device settings. To exercise your rights, contact info@jatappventures.xyz; we respond within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
11. Children
Where we rely on consent (for example, for analytics or marketing emails) and the user is under 16, or under the lower age set by the law of their country, consent must be given or authorised by a parent or guardian. If we learn that we have processed a child's data on the basis of consent without such authorisation, we will delete it.
12. Changes to this policy
We update this policy when our processing changes, and will inform you of material changes in the App or by email.
13. Contact
JAT App Ventures UG (haftungsbeschränkt), Zur Börse 26, 10247 Berlin, Germany
info@jatappventures.xyz