Privacy policy

Data controller

The data controller is Appitect Digital s.r.o., Company ID: 295 41 280, with registered office at Příčná 1892/4, Nové Město, 110 00 Prague 1, Czech Republic, registered with the Municipal Court in Prague, file no. C 446922. We process data in accordance with GDPR (EU) 2016/679 and the Czech Personal Data Processing Act (110/2019 Coll.).

What data we process

We process only the data necessary for the service to function:

• Identification data (name, email)
• Data about your clients that you enter (you, the trainer, are their controller; we are the processor)
• Operational data (login times, IP address, browser type) for security purposes
• Payment data is processed by Stripe; we do not have access to card numbers

Legal basis for processing

We process data based on contract performance (providing the service) and legitimate interest (security and abuse prevention).

Processors

We use the following subprocessors:

• Supabase – database, authentication (EU region, Frankfurt)
• Stripe – payment and subscription processing (Ireland, EU)
• Resend – transactional email delivery (EU region)
• Vercel – web app hosting

Retention period

We retain data for the duration of the contractual relationship. After an account deletion request, personal data is anonymized within 30 days. Billing documents are retained for the legally mandated period (10 years per the Czech Accounting Act).

Your rights

As a data subject, you have the following rights:

• Right of access to your data
• Right to correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with the Czech supervisory authority (www.uoou.cz)

Cookies

We use only necessary technical cookies (login, language preference). We do not use third-party tracking cookies or marketing pixels.

Contact

For privacy-related questions, contact hello@pocketcoach.cz