Legal

General Terms of Service

The rules that apply when you use Udalist.

Effective date: 15 May 2026

1. Introductory provisions and definitions

1.1 Operator

The operator of the udalist.app web application available at https://udalist.app/ (hereinafter the "Service") is:

BHPS Labs s.r.o. Company ID (IČO): 29574668 Registered office: Klínová 620/1, Hulváky, 709 00 Ostrava Registered in the Commercial Register kept by the Regional Court in Ostrava, Section B, Insert 103978 E-mail: info@udalist.app. Single point of contact pursuant to Art. 11 and 12 of Regulation (EU) 2022/2065 (DSA): info@udalist.app

(hereinafter the "Operator")

1.2 Definitions of terms

For the purposes of these T&C, the terms listed below have the following meaning:

Event – a shared photo album created by the Organizer, to which a unique QR code is assigned.
User – a natural or legal person who has registered for the Service and creates Events.
Organizer – a User who has created a specific Event.
Guest – a person who accesses the Event by means of a QR code, without the need for registration.
QR code – a unique code generated by the Service for access to a specific Event.
Content – photographs and other materials uploaded to the Event by a User or a Guest.
Free Event – the free tier of the Service with limited storage, limited photo quality and a watermark.
Premium Event – the paid tier of the service with extended storage, full photo quality and without a watermark.
Consumer – a User who is a natural person and concludes the contract outside the scope of their business activity (§ 419 of the Civil Code).
Entrepreneur – a User acting within the scope of their business activity or the independent exercise of their profession.
T&C – these General Terms and Conditions.

By registering for the Service or accessing an Event via a QR code, the User or Guest expresses their consent to these T&C. If they do not agree with the T&C, they are not entitled to use the Service.

1.4 Age limit

The Service may be used independently by persons over 15 years of age (§ 7 of Act No. 110/2019 Coll., Art. 8 GDPR). Persons under 15 years of age may use the Service only with the consent of their legal representative. The Operator is entitled to request proof of such consent and, if it is not provided, to cancel the account.

2. Registration and user account

2.1 Registration

Registration for the Service is available to both natural and legal persons. A valid e-mail address and a password are required for registration. The User is obliged to provide truthful and up-to-date information.

2.2 Account security

The User is obliged to protect the login credentials against misuse and not to share them with third parties. The User bears full responsibility for all activity carried out under their account.

2.3 Free Event after registration

After successful registration, each User automatically receives one Free Event free of charge. The Free Event has the following limitations:

maximum storage of 250 MB,
limited quality and maximum size of uploaded photographs; the photographs are processed with a higher degree of compression than in the case of a Premium Event,
the photographs are marked with the Operator's watermark.

2.4 Account cancellation

The User may at any time request cancellation of the account through the Service settings or by e-mail at info@udalist.app.

If, at the time of submitting the request, the User has an active Premium Event (i.e. an Event whose validity has not yet expired), the account will remain functional for the entire period of validity of that Event, so that the Operator's obligation arising from the contractual relationship is fulfilled. After the validity of the last active paid Event ends, the account will be closed and all of the User's data deleted within 30 days.

If the User wishes for immediate deletion of the account even before the expiry of the validity of the Premium Event (exercising the right to erasure pursuant to Art. 17 GDPR), they may request this. In such a case, the User acknowledges that immediate deletion of the account results in early termination of the contractual relationship on their part and the User is not entitled to a refund of the fee already paid for the unused period.

If the User has no active paid Event, the account and all of its data will be deleted within 30 days of submitting the request.

3. Description of the Service

3.1 Basic functions

The Service enables:

creation of an Event and generation of a unique QR code,
uploading of photographs to the Event (by the Organizer as well as by Guests with the QR code),
viewing and downloading of individual photographs from the Event by anyone with a valid QR code,
export of photographs from the Event by the Organizer (the account owner) in ZIP format.

3.2 Free Event

The Free Event is free of charge and includes one Event with the limitations stated in Art. 2.3.

3.3 Premium Event

The Premium Event is available for a one-time fee according to the current price list. The Premium Event includes:

maximum storage of 5 GB,
full photo quality, by which is meant preservation of the original resolution of the uploaded file; the Operator is entitled to perform lossless or slightly lossy compression for the purpose of optimizing storage and transfer, while the resolution and visual quality remain preserved. Metadata (EXIF) may be partially removed for privacy protection reasons,
photographs without a watermark.

3.4 Upgrade of a Free Event to a Premium Event

The Organizer may at any time during the existence of the Free Event carry out its upgrade to a Premium Event. The upgrade is available for a one-time fee according to the price list and must be paid through the payment gateway pursuant to Art. 5.2.

After successful receipt of payment, the Free Event is automatically converted into a Premium Event. The Event retains its existing QR code, uploaded Content and settings; furthermore, the parameters of the Premium Event stated in Art. 3.3 apply to it, including extended storage, the uploading period and automatic deletion pursuant to Art. 9.1 and display of newly uploaded photographs without a watermark.

Newly uploaded photographs after the upgrade will be processed with quality corresponding to a Premium Event. The quality of previously uploaded photographs is subject to the conditions that were in effect at the moment of their uploading; the Operator does not perform retroactive reprocessing of Content uploaded in a Free Event to the full quality of a Premium Event.

3.5 Future expansion

The Operator reserves the right to expand the offering of the Service with additional plans, including a subscription for Organizers. It will inform about changes in accordance with Art. 13.

3.6 Termination of operation of the Service

The Operator reserves the right to terminate the operation of the Service. It will inform Users of its intention to terminate operation by e-mail or by notice in the Service interface at least 30 days in advance. During this period, Users have the opportunity to export their data pursuant to Art. 3.1. For already paid, as yet unused Premium Events, the Operator will refund a proportionate part of the payment.

4. Guest access via QR code

4.1 Access without registration

Guests access the Event by scanning the QR code without the need for registration. Before the first upload or viewing, the Guest is shown a continue button, beneath which it is stated that by clicking this button the Guest agrees to these T&C and the Privacy Policy.

4.2 Organizer's responsibility

The Organizer is solely responsible for the manner and extent of distribution of the QR code. The Operator is not liable for access by unauthorized persons to the Event as a result of loss, theft or unauthorized distribution of the QR code.

4.3 Uploading by Guests

Guests are entitled to upload photographs to the Event under the conditions stipulated by these T&C. The provisions on Content (Art. 6 and 7) apply mutatis mutandis to uploading by Guests.

5. Payment conditions

5.1 Prices

The current prices of Premium Events are stated on the price list page. Prices are stated including VAT. The Operator reserves the right to change prices; a change does not apply to Events already purchased.

5.2 Payment methods

Payment for a Premium Event or an upgrade of a Free Event to a Premium Event pursuant to Art. 3.4 can be made through the payment gateway https://paddle.com. The Operator does not accept cash payments. The Operator does not store payment details (payment card numbers); these are processed by the payment gateway provider.

The order process is conducted by the online reseller Paddle.com. Paddle.com acts as the Merchant of Record for all orders of a Premium Event and an upgrade of a Free Event to a Premium Event. Paddle handles all customer inquiries concerning these orders and refunds.

5.3 Digital content and withdrawal from the contract

The Premium Event constitutes the delivery of digital content that is not delivered on a tangible medium, within the meaning of § 1837 letter l) of the Civil Code.

When paying for a Premium Event or an upgrade of a Free Event to a Premium Event, the Consumer grants their express consent for performance (making the Premium Event available) to be commenced before the expiry of the 14-day period for withdrawal from the contract, and acknowledges that this extinguishes their right to withdraw from the contract. The Consumer grants the consent by actively ticking a separate (not pre-filled) box within the payment process.

Before activation of the Premium Event, the Consumer may withdraw from the contract within 14 days of its conclusion without giving a reason, by e-mail at info@udalist.app. In such a case, the payment will be refunded within 14 days to the original means of payment.

5.4 Non-refundability of payment after activation

After activation of the Premium Event and the granting of consent pursuant to Art. 5.3, the payment is non-refundable, unless generally binding legal regulations provide otherwise or unless the Operator agrees otherwise with the User.

5.5 Tax document

By accepting these T&C, the User agrees that a Tax document/invoice will be sent to them in electronic form. The Tax document / invoice will be sent to the User electronically to the e-mail address provided during registration.

6. Copyright and license

6.1 Ownership of Content

All copyright and proprietary rights to the uploaded Content remain with the User or Guest who uploaded the Content. The Operator does not acquire any ownership rights to the Content.

6.2 License granted to the Operator

By uploading Content, the User or Guest grants the Operator a non-exclusive, royalty-free, territorially unlimited license to store, process, display and transmit the Content solely for the purpose of providing the Service. The Operator is not entitled to commercially exploit the Content, provide it to third parties or use it for marketing purposes without the express consent of the entitled person.

6.3 Termination of the license

The license terminates at the moment of deletion of the Content or Event, whether by the User or automatically pursuant to Art. 9.

6.4 Declaration of the uploading person

The User or Guest declares that:

they are entitled to upload the Content (they are the author or have the author's consent),
the Content does not infringe the rights of third parties, in particular copyright, protection of personality and the right to privacy,
they have the consents of persons captured in the photographs, if those persons are identifiable.

6.5 Compensation for damage

The User or Guest undertakes to compensate the Operator for all damage that arises and/or has arisen to it as a result of the declarations stated in point 6.4 proving to be untrue – in particular as a result of the assertion of rights of third parties against the Operator. The User or Guest also undertakes at the same time to provide cooperation to the Operator, including the provision of information and documents concerning the Content uploaded by them, for the purpose of refuting any claims of third parties concerning the Content.

7. Acceptable use rules

7.1 Prohibited content

It is prohibited to upload or share Content that:

depicts sexual abuse of children or other illegal content,
depicts or incites violence, hatred or discrimination,
infringes copyright or other rights of third parties,
captures identifiable persons without their consent,
is used for spam, phishing or other fraudulent activity,
or is in any other way contrary to applicable legal regulations.

7.2 Prohibition of misuse of the Service

Neither the User nor the Guest may:

circumvent the technical limitations of the Service,
automatically download Content without the Operator's consent,
attempt unauthorized access to Events of others.

8. Reporting of illegal and inappropriate content (Notice and Action)

8.1 Notification mechanism

In accordance with Act No. 480/2004 Coll., on certain information society services, and Art. 16 of Regulation (EU) 2022/2065 (DSA), any person may report Content that they consider illegal or in breach of these T&C, by means of the contact form or by e-mail at info@udalist.app. The notification should contain:

the reason why the Content is considered illegal or objectionable,
the precise identification of the Content (URL, Event identifier),
identification of the notifier and their contact details,
a declaration of the truthfulness of the assertions.

8.2 Deadlines for investigation

The Operator will assess the notification without undue delay:

for manifest breaches of the law (in particular content under Art. 7.1 paragraph 1) no later than within 48 hours,
for other notifications no later than within 15 working days.

If the Content breaches the T&C or legal regulations, the Operator will make it inaccessible or remove it.

8.3 Informing the affected parties

In accordance with Art. 17 DSA, the Operator will send a statement of reasons for its decision (Statement of Reasons), including instructions on the possibilities of filing a complaint:

to the notifier, if they provided contact details when notifying,
to the Organizer of the Event in which the Content was placed, to the e-mail associated with their account.
to the Guest who is registered, to the e-mail associated with their account.

A Guest who uploaded the Content without registration, who does not have a user account or contact details recorded with the Operator, is not informed directly by the Operator. The Organizer is entitled to inform the affected Guest themselves, if they consider it appropriate.

8.4 Internal complaints system

A person whose Content was removed or whose notification was rejected may file a complaint at info@udalist.app within 6 months of the decision. The Operator will review the complaint impartially without undue delay.

8.5 Repeated infringement

In the case of repeated or serious breach of these T&C, the Operator is entitled to restrict functions, suspend or cancel the User's account without entitlement to compensation, i.e. even in the case where the Organizer has an active Premium Event.

9. Data retention and deletion

9.1 Automatic deletion

The Event and all Content stored in it will be automatically deleted after the expiry of the period stated below. The period for automatic deletion does not begin to run from the creation of the Event, but only after the last day on which the Event is open for uploading photographs (hereinafter "locking of uploading"):

Free Event: the Event is open for uploading for 2 calendar days – the day of creation of the Event and the following entire calendar day. After the locking of uploading, the Event will be retained for a period of 30 days; within 7 days after the locking of uploading, the Organizer has the option to upgrade to a Premium Event pursuant to Art. 3.4. The Event will be automatically deleted no later than 37 days after the locking of uploading (30 days + 7 days).
Premium Event: the Event is open for uploading for a period of 7 calendar days (including the day of creation of the Event). After the locking of uploading, the Event will be retained for a period of 90 days and then automatically deleted no later than after a further 30 days (in total no later than 120 days after the locking of uploading).

Example: A Free Event created on 1 June 2026 is open for uploading until 2 June 2026 inclusive; after the locking of uploading, the Organizer may carry out an upgrade until 9 June 2026 and the Event will be deleted no later than 9 July 2026.

Example: A Premium Event created on 1 June 2026 is open for uploading until 7 June 2026 inclusive; after the locking of uploading, the Event will be deleted no later than 5 October 2026.

9.2 Notice before deletion

The Operator will send the Organizer a notice of the planned automatic deletion by e-mail at least 3 days in advance. Before deletion, the Organizer has the option to export the data pursuant to Art. 3.1.

9.3 Manual deletion

The Organizer may delete the Event at any time through their account. The User may cancel the account pursuant to Art. 2.4.

9.4 Account deletion

The procedure for deleting the account and data depends on whether the User has an active Premium Event at the time of submitting the request:

Without an active Premium Event: all of the User's data, including Events and uploaded Content, will be permanently deleted within 30 days of submitting the request.
With an active Premium Event: the account will remain functional until the validity of the last active Premium Event ends; after it ends, all data will be permanently deleted within 30 days. The User may request immediate deletion even before this date, whereby they waive the entitlement to a refund of the proportionate part of the paid fee for the unused period (see Art. 2.4).

This does not affect the Operator's obligation to retain data that it is obliged to retain under generally binding legal regulations (e.g. accounting and tax documents).

10. Protection of personal data

10.1 Privacy Policy

The processing of personal data of Users and Guests is governed by a separate Privacy Policy. Information about cookies is stated in the document Policy on the use of cookies and similar technologies.

10.2 Photographs as personal data

Photographic records capturing identifiable persons constitute personal data within the meaning of Regulation (EU) 2016/679 (GDPR).

10.3 Roles within the processing of personal data

In relation to the personal data contained in the Content uploaded to Events (in particular in photographs capturing identifiable persons), the Organizer is always and exclusively the controller of personal data and the Operator is the processor. The Operator is not the controller of the Content in the Events.

The Organizer is obliged to ensure a legal basis for the processing (in particular the consent of the photographed persons or another basis pursuant to Art. 6 GDPR) and to handle requests of data subjects. The Operator processes this data exclusively according to the Organizer's instructions and to the extent necessary for the provision of the Service. The conditions of this processing are governed by these T&C and the Privacy Policy; by consenting to the T&C, the Organizer instructs the Operator to process to the extent of the Service. The Operator does not conclude a separate personal data processing agreement with the Organizer.

10.4 Rights of data subjects

A data subject has the right of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to lodge a complaint with the Office for Personal Data Protection (<www.uoou.cz>). Requests are directed primarily to the Organizer; if it is more appropriate, the request can also be addressed to the Operator at info@udalist.app.

11. Availability, liability and limitation of warranty

11.1 Availability

The Operator makes reasonable efforts to ensure the availability of the Service, but does not guarantee uninterrupted operation. The Operator reserves the right to carry out maintenance outages.

11.2 Force majeure

The Operator is not liable for the unavailability of the Service or for damage caused by events outside its reasonable control, in particular outages of third-party internet networks, outages of hosting providers, cyber attacks, natural disasters, military conflicts or interventions by public authorities.

11.3 Liability for user Content (hosting exemption)

The Operator is a provider of hosting services within the meaning of § 5 of Act No. 480/2004 Coll. and Art. 6 of Regulation (EU) 2022/2065. The Operator does not actively monitor the Content and is not liable for Content uploaded by Users or Guests, provided that:

it does not have actual knowledge of the unlawful nature of the Content, and
after receiving a notification pursuant to Art. 8, it acts without undue delay to remove it or make it inaccessible.

All liability for the Content lies with the person who uploaded it.

11.4 Data loss

The Operator recommends that Users keep backups of photographs outside the Service. The Operator is not liable for data loss caused by a technical failure, deletion pursuant to these T&C, conduct of the User or Guest, or another reason outside the Operator's intent or gross negligence.

11.5 Limitation of compensation for damage

Towards Consumers, the Operator's liability is governed by the provisions of the Civil Code and related regulations; this article does not affect the rights of Consumers arising from defective performance, nor liability for damage that cannot be validly waived under the law.

Towards Entrepreneurs, the total amount of compensation for damage is limited to the amount paid by the User for the Service in the last 12 months preceding the occurrence of the damage. The Operator is not liable to an Entrepreneur for lost profit, indirect or consequential damage.

The limitations under this article do not apply to damage caused intentionally or by gross negligence, nor to damage to the natural rights of a person.

12. Complaints and handling of Consumer complaints

12.1 Rights from defective performance

In the event that the Service does not have the characteristics under these T&C, the Consumer has rights from defective performance pursuant to § 1914 et seq. and § 2389a et seq. of the Civil Code (in particular the right to removal of the defect or to a reasonable discount).

12.2 Filing a complaint

A complaint can be filed by e-mail at info@udalist.app. The Operator will confirm receipt of the complaint without undue delay and will handle it no later than within 30 days of its filing, unless it agrees with the Consumer on a longer period.

13. Termination of access to the Service

13.1 Termination by the User

The User may cancel their account at any time pursuant to Art. 2.4.

13.2 Termination by the Operator

The Operator is entitled to restrict, suspend or cancel the User's access to the Service in the event of:

breach of these T&C,
suspicion of fraudulent conduct,
failure to fulfil payment obligations,
on the basis of a final decision of a public authority.

The Operator will inform the User of the measure and justify it in accordance with Art. 8.3 (where relevant).

14. Changes to the T&C

The Operator is entitled to change these T&C. The following rules apply to changes to the T&C depending on the type of Service used:

One-time purchases: One-time purchases are governed by the version of the T&C that was valid and in effect at the time the respective purchase was made. Subsequent changes to the T&C do not affect one-time purchases that have already been completed.
Subscription: For long-term services or subscriptions, the User will be informed of changes to the T&C by e-mail to the address provided during registration, at least 30 days before such changes take effect. If the User does not agree with the changes, they are entitled to cancel their subscription and account without penalty with effect as of the day preceding the day on which the changes take effect. Continued use of the Service under the subscription after the changes take effect is considered consent to the new wording of the T&C.

15. Final provisions

15.1 Governing law

These T&C and all relationships arising from them are governed by the legal order of the Czech Republic, in particular Act No. 89/2012 Coll., the Civil Code. Towards Consumers with their habitual residence in another EU Member State, the mandatory provisions of the law of that state apply, if they are more favorable for the Consumer.

15.2 Competent court

Disputes arising from these T&C will be resolved before the court with subject-matter jurisdiction in the place of the Operator's registered office, unless legal regulations provide otherwise. Towards Consumers, the rules of international jurisdiction under Regulation (EU) No. 1215/2012 of the European Parliament and of the Council of 12 December 2012 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters (the so-called Brussels I bis Regulation) apply.

15.3 Out-of-court dispute resolution

Consumers have the right to out-of-court resolution of consumer disputes through the Czech Trade Inspection Authority (ČOI), Štěpánská 567/15, 120 00 Prague 2, www.coi.cz. Consumers may also use the online dispute resolution platform operated by the European Commission at ec.europa.eu/consumers/odr.

15.4 Supervision

Supervision over the Operator's compliance with its obligations is exercised in particular by the Czech Trade Inspection Authority and the Office for Personal Data Protection, each within the scope of its competence.

15.5 Severability

If any provision of these T&C is or becomes invalid or unenforceable, this does not affect the validity of the other provisions. The invalid provision will be replaced by a provision whose meaning is as close as possible to the invalid provision.

15.6 Contact

Send all inquiries and suggestions concerning these T&C to: info@udalist.app

These T&C take effect on 15 May 2026.

Document content