The application collects information about users' racial or ethnic origin, but the privacy policy does not disclose this. Racial or ethnic origin is considered a special category of personal data under regulations like GDPR. Failure to inform users about this collection is a significant issue and likely violates legal requirements for explicit consent and stringent data protection measures.