Privacy Policy

Last updated: 15 October 2026

1. Introduction

RainbowApp is an educational and community application developed as part of the RainbowUp Project, with the aim of promoting inclusion, diversity, awareness, wellbeing and meaningful community engagement. The application provides access to educational materials, useful resources, information about support services, an events calendar and an interactive discussion forum.

We respect the privacy of everyone who uses RainbowApp and recognise the importance of protecting personal information, particularly in an environment where users may explore sensitive subjects or share personal experiences. We are committed to handling personal data responsibly and in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation.

This Privacy Policy explains what personal information is required to use RainbowApp, what additional information users may voluntarily provide, how such information is processed and what rights users have regarding their personal data. It applies to RainbowApp on Android, distributed through Google Play, and to the iOS version installed as a Progressive Web App (PWA).

For questions concerning privacy or the processing of personal information, users may contact the RainbowUp team at team@rainbowup.eu.

2. Access to RainbowApp and Account Registration

RainbowApp is designed to make its educational and informational content freely accessible. Users can explore educational materials, resources, support information, events and publicly available forum discussions without creating an account or submitting personal registration information.

Registration is required only for users who wish to actively participate in the community forum. To create an account, users are asked to provide a username and an email address. The username identifies the account and may be displayed alongside forum contributions, while the email address is used for account administration and related communications.

Users are not required to provide their real name, postal address, telephone number or other additional personal details as part of the basic registration process. The same registration requirements apply regardless of whether RainbowApp is accessed through Android or iOS.

3. Optional Profile Information

Registered users may personalise their forum profiles using the optional fields available through the wpForo forum system. These fields allow users to provide additional information about themselves, but completing them is entirely voluntary and is not necessary for ordinary forum participation.

Users should be aware that certain profile details may be visible to other users or visitors, depending on the relevant forum settings. We therefore encourage everyone to consider carefully which information they choose to share and to avoid including personal details that they would prefer to keep private.

Users can manage their available account and profile information through the forum’s profile and account settings. Requests concerning personal information that cannot be managed directly may be submitted to team@rainbowup.eu.

4. Community Discussions and Public Information

RainbowApp includes a community forum where registered users may create discussion topics, publish replies, ask questions and exchange opinions or experiences. Contributions are associated with the relevant user account and may appear alongside the user’s username or publicly visible profile information.

Discussions published in public forum areas can be accessed by other users and visitors, including individuals who have not registered. Users should therefore treat information shared in these areas as publicly accessible and avoid publishing confidential details, unnecessary identifying information or personal data concerning other individuals without an appropriate legal basis.

We recognise that discussions about inclusion, identity and wellbeing may involve particularly personal experiences. RainbowApp does not require users to disclose sensitive information to register or participate, and users are encouraged to exercise discretion when deciding what to share publicly.

5. Purpose and Legal Basis of Personal Data Processing

Personal information collected through forum registration is used to create and manage user accounts, enable participation in discussions, associate contributions with registered users and provide necessary account-related communications. Information voluntarily added to a profile is used to provide the profile features chosen by the user, while information published in discussions is processed to make those discussions available through the forum.

Processing that is necessary to provide requested account and forum services may be based on Article 6(1)(b) GDPR. Other activities, including the administration and protection of the community, handling enquiries and complying with legal obligations, must rely on an appropriate legal basis under the GDPR, depending on their specific purpose and circumstances.

Where information falls within the special categories of personal data protected under Article 9 GDPR, an additional applicable legal condition is required. The voluntary publication of information does not automatically remove the protections established by data protection legislation.

6. Technical Information, Cookies and Local Storage

RainbowApp uses WordPress and wpForo to provide its content, account management and community forum functionality. Certain technical processes and storage mechanisms may be necessary to maintain login sessions, authenticate registered users and support the application’s normal operation.

The application may also use locally stored resources and caching mechanisms to support content delivery and improve the user experience. Technical connection information, such as IP addresses and session-related information, may be processed where necessary for delivering the application, maintaining its operation or addressing technical and security issues.

RainbowApp does not currently use Google Analytics, advertising trackers or other intentionally implemented analytics and behavioural tracking services.

Users may manage locally stored information through the settings available on their devices. Removing such information may affect saved sessions or require registered users to sign in again.

7. Events Calendar and External Resources

RainbowApp includes an Events Calendar containing information about activities, initiatives and events. Event entries may provide descriptions, dates, locations, organiser information and links to external pages or services where additional details or registration opportunities are available.

The application also provides links to educational resources, support organisations and other relevant information sources. These external services operate independently and may have their own terms, privacy policies and procedures for collecting personal information.

When users follow an external link or voluntarily provide information directly to another organisation, that organisation is responsible for its own processing activities. RainbowApp does not automatically receive the information submitted directly to independent event organisers or external service providers.

We encourage users to review the privacy information provided by third parties before sharing personal information, particularly where a service involves sensitive or confidential matters.

8. Access to Personal Information

Information voluntarily made public through forum discussions or publicly visible profile fields may be accessed by other users and visitors. By contrast, registration information that is not intended for public display, including the email address provided for account administration, is handled as account-related information rather than as public forum content.

Authorised personnel involved in administering the forum may require access to information relevant to account management, moderation or the handling of user requests. Technical service providers involved in operating the application may also process information where necessary for the services they provide, subject to applicable data protection requirements.

Personal information must not be disclosed without an appropriate purpose and lawful basis. Publicly available contributions, however, may be viewed by others and should not be treated as confidential communications.

9. Sensitive Personal Information and Young Users

RainbowApp addresses topics that may be particularly relevant to young people, including inclusion, diversity, personal identity, wellbeing and individual experiences. We recognise that users may wish to explore these subjects privately and that additional care is necessary when information could reveal sensitive personal characteristics.

The application does not require users to disclose their sexual orientation, health information or other sensitive personal attributes when accessing educational resources or registering for the forum. Nevertheless, users may voluntarily include such information in their public discussions or optional profile fields.

Users are encouraged to protect their own privacy and that of others, particularly minors, by avoiding the publication of unnecessary personal details or information that could identify individuals without their knowledge or permission. Where the processing of children’s personal data requires specific safeguards or authorisation under applicable law, those requirements must be respected.

10. Data Retention

Personal information is retained only for as long as necessary for the purposes for which it is processed, taking into account applicable legal obligations and legitimate requirements associated with account administration and community participation.

Registration and optional profile information may remain associated with an account while it is maintained. Forum contributions may continue to form part of existing discussions, although requests concerning personal information contained in those contributions will be considered in accordance with applicable data protection rights.

When personal information is no longer required and no lawful basis for retaining it remains, it should be deleted or appropriately anonymised. Requests for deletion or clarification concerning the retention of personal information may be submitted to the RainbowUp team.

11. Account Management and Deletion

Registered users can manage their account and available profile information through the forum’s account settings, including the available account deletion functionality. Users may also request assistance with account deletion or the removal of personal information by contacting team@rainbowup.eu.

To submit a deletion request by email, users should identify the username or email address associated with their account. Additional verification may be requested where reasonably necessary to ensure that the request is legitimate and that personal information is not disclosed or deleted without authorisation.

Account deletion requests will be handled in accordance with applicable data protection legislation. Where forum contributions contain personal information, any related request for removal or anonymisation will be assessed according to the relevant legal requirements.

Uninstalling RainbowApp from a device does not automatically delete a registered forum account or information associated with that account.

12. Your Rights Under the GDPR

Under the GDPR, individuals have several rights regarding the processing of their personal data, subject to the applicable legal conditions. These include the right to request access to their information, correction of inaccurate data, deletion where legally applicable, restriction of processing and data portability in qualifying circumstances.

Individuals may also have the right to object to certain processing activities, withdraw consent where consent is the applicable legal basis and exercise the protections concerning automated decision-making provided by the GDPR. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Requests concerning these rights may be submitted to team@rainbowup.eu. Such requests will be handled within the applicable legal time limits, generally within one month, subject to any extensions permitted by law.

Individuals also retain the right to lodge a complaint with their competent data protection supervisory authority if they believe their personal information has been processed in violation of applicable legislation.

13. Protection of Personal Information

We recognise the importance of protecting personal information associated with registered accounts and community participation. Information must be handled using appropriate technical and organisational safeguards, taking into account the nature of the data and the potential risks associated with its processing.

Users also play an important role in protecting their accounts. They are encouraged to keep their login credentials confidential, maintain secure passwords and exercise care when publishing information or following links to external services.

Concerns regarding unauthorised account access, disclosure of personal information or other privacy-related matters should be reported to team@rainbowup.eu.

14. Changes to This Privacy Policy

This Privacy Policy may be revised when changes to RainbowApp’s functionality, data processing practices or applicable legal requirements make an update necessary. The revision date will be displayed at the beginning of the document so that users can identify the latest version.

Where changes require additional notification or consent under applicable law, the relevant requirements will be followed. Users are encouraged to review this policy periodically to remain informed about how their personal information is handled.

15. Contact Information

For questions about this Privacy Policy, account information, personal data, privacy rights or deletion requests, users may contact the RainbowUp team at team@rainbowup.eu.

Application: RainbowApp
Project: RainbowUp
Contact Email: team@rainbowup.eu
Data Controller: RainbowUp Consortium