Who the app talks to
The app is for beach club staff. It connects only to the beach club’s own Arenile instance (its own server, managed hosting or the desktop software on the local network) by scanning the QR code of the admin panel. It has no default server and sends nothing to Coste360.
The data the app shows and records (bookings, guests’ names, emails and phone numbers, payments) live in the beach club’s instance. The data controller is the beach club, which decides how to handle them and publishes its own notice: to exercise your rights over these data, contact the beach club.
The demo
Only the “Try the demo” button, when you tap it, connects the app to Coste360’s demo server (demo.arenile.app). It holds a sample beach club with made-up data, reset every night. Like any web server, it records the IP address, the request and the date and time in its technical logs, for security and to prevent abuse, and keeps them for a limited time. Legal basis: Coste360.it’s legitimate interest in the security of the service (art. 6(1)(f) GDPR).
What it does not do
The app uses no analytics, telemetry, automatic crash reporting, advertising or tracking, contains no third-party libraries that collect data, receives no push notifications and downloads no updates from the web: it is updated only through the app stores.
What stays on the phone
The device code, in the system’s protected key store (Keychain on iOS, protected storage on Android); the preferences, such as language and theme; a copy of today’s and tomorrow’s data and the operations recorded without a connection (check-ins, cash payments, notes, day releases) waiting to be sent. Everything is deleted when you sign out (Settings → Disconnect this device) or uninstall the app. The home screen widget shows only counts, never names or amounts.
Permissions
Camera: only to scan the pairing QR code and the QR codes of bookings and tickets; images are neither stored nor sent. Local network: only to reach the Arenile software on the beach club’s computer, on the same Wi-Fi. The app does not use the microphone, location, contacts or photos.
The Call, WhatsApp and Email buttons of the booking sheet open the phone’s own apps with the guest’s number or address, shown only to the roles allowed to see them; the app sends these data nowhere else.
Data controller and your rights
For the app and the demo the data controller is Coste360 SRL, Via Corrado Capece 14/A, 73100 Lecce, Italy, VAT no. IT05346790750. You can ask for access to your data, rectification, erasure, restriction of processing, and object to processing by writing to info@coste360.it.
If you believe the processing breaks the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Last updated: 30 October 2026