1. Who is responsible for your data
The data controller is Michał Kolaczek, an individual based in Poland.
Reach us at [email protected] for any privacy question, to exercise your rights, or to make a complaint.
We are a solo operator and do not have a Data Protection Officer, which the law does not require of us. The address above reaches the person responsible directly.
2. The short version
- You can read this entire website without giving us anything.
- If you join the waitlist, we store your email address and nothing else about you.
- If you use the AI coach demo, we store your messages and a scrambled version of your IP address. Your messages are sent to OpenAI in the United States.
- We use Google Analytics, but only if you accept it. Decline and it never loads.
- We do not sell your data, show you ads, or build advertising profiles.
- Because of what this site is about, we treat what you type into the demo as sensitive data and handle it accordingly.
3. What the website collects
3.1 The waitlist
When you submit the "notify me" form, we store:
| What | Why |
|---|---|
| Email address | So we can tell you once, when the app launches |
| Signup source | Which part of the page you signed up from, to understand which sections work |
| Date | Housekeeping and retention |
That is the whole record. No name, no IP address, no profile.
The form also contains a hidden field that people never see. Automated bots fill it in; anything that arrives with it filled is discarded without being stored.
We will email you once, at launch. This is not a newsletter and we do not have any other mailing.
3.2 The AI coach demo
The chat widget on the home page is a live demo of the app's coach. When you use it, we store:
| What | Why |
|---|---|
| Your messages | Along with the replies, so we can read back what people ask and improve the product |
| Hashed IP | A one-way salted scramble, to stop one person flooding the demo. We cannot turn it back into your IP address |
| Counts and times | Rate limiting |
| Your rating | If you give one — feedback on reply quality |
Your messages are sent to OpenAI in the United States to generate the reply. That is stated next to the widget as well.
We ask you not to put personal details into the demo. Given what this site is about, we assume what you write may reveal information about your health or sexual behaviour, and we treat it as special-category data under the GDPR — processed only with your explicit consent, which you give by choosing to type into the demo.
The demo is not therapy and not a crisis service. If you are in crisis, contact your local emergency number.
3.3 Analytics
We use Google Analytics 4 to understand which pages people read and where they came from — how many visitors, which articles, which referrers.
It only runs if you accept it. When you first arrive you are asked. Until you accept, no analytics cookies are set and nothing is sent to Google. If you decline, that stays true for the whole visit, and we simply have less data.
Alongside page views, we record a small number of events: that a waitlist signup succeeded, that someone started a conversation with the demo coach, and that an app-store link was clicked. These record only that the action happened. Your email address is never sent to Google, and neither is anything you type into the demo chat.
We have deliberately turned off the features that would make this invasive:
- Google Signals is off — your visit is never linked to a Google advertising profile.
- Ad personalisation is off, and no remarketing audiences are built.
- IP addresses are anonymised before processing.
- We cannot see your age, gender, or interests, and we have not asked for them.
3.4 Hosting
The site is served by Cloudflare. Like any web host, Cloudflare processes your IP address and basic request information in order to deliver pages to you and to block attacks. This happens for every visitor and is not something we can switch off — it is how the site reaches you at all.
4. Our legal bases
Under the GDPR:
| What | Legal basis |
|---|---|
| Waitlist email | Consent — you asked to be told at launch |
| Demo messages | Explicit consent for special-category data — you chose to type into the demo |
| Hashed IP | Legitimate interest — keeping the demo usable and paid for |
| Analytics | Consent — nothing loads until you accept |
| Hosting | Legitimate interest — the site cannot be delivered otherwise |
You can withdraw consent at any time by emailing [email protected]. Withdrawing does not undo processing that already happened.
5. Who your data reaches
| Who | What they get | Where |
|---|---|---|
| Supabase | Waitlist emails, demo conversations | European Union (eu-west-1) |
| OpenAI | The text of your demo messages | United States |
| Analytics data, if you accepted | United States | |
| Cloudflare | IP and request data, as your connection is served | Global network |
We do not sell data to anyone, and there is no advertising network in this list.
International transfers
Supabase stores your data in the EU. OpenAI, Google and Cloudflare are in or route through the United States, which the EU does not consider to offer equivalent protection by default. Those transfers rely on the European Commission's Standard Contractual Clauses, and Google and Cloudflare are additionally certified under the EU–US Data Privacy Framework.
6. How long we keep things
| What | How long |
|---|---|
| Waitlist email | Until the app launches and we have told you, and no longer than 24 months from signup |
| Demo chats | 12 months, including the hashed IP |
| Analytics | 14 months — Google's retention setting for this property |
You can ask us to delete your data sooner. Email [email protected] and we will remove it and confirm.
7. Cookies
Until you accept analytics, this website sets no cookies at all. There is no tracking pixel, no advertising tag, and no social media widget.
If you accept, Google Analytics sets the following:
| Cookie | Purpose | Lifetime |
|---|---|---|
_ga | Distinguishes one browser from another | 2 years |
_ga_5KZ7M5EBGY | Keeps analytics session state | 2 years |
We also remember your cookie choice itself, so you are not asked on every page. That preference is stored in your own browser and never sent to us.
You can change or withdraw your choice at any time from the Cookie settings link in the footer, and you can clear these cookies from your browser settings whenever you like.
8. Your rights
Under the GDPR you can ask us to:
- Access the data we hold about you
- Correct it if it is wrong
- Delete it
- Restrict or object to how we use it
- Port it to somewhere else in a machine-readable form
- Withdraw consent you previously gave
Email [email protected]. We will answer within one month.
If you think we have handled your data badly, you can complain to the Polish data protection authority, the Prezes Urzędu Ochrony Danych Osobowych (UODO), at uodo.gov.pl, or to the authority where you live.
9. Children
This website and the app are for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have, email us and we will delete it.
10. Changes to this notice
If we change what the website collects, we will update this notice and change the date at the top. If the change is significant — a new processor, a new purpose — we will ask for your consent again rather than rely on the old one.