Privacy policy

Data controller

The data controller is:

• Entreprise individuelle
• SIRET: 82812471900034
• Email: combozen@combozen.app

What we collect

Nothing is collected that does not directly serve the running of the service.

• Your email address and a password, which we never store in clear text.
• What you record: goals, steps, moments of the day, dates checked off, rating scales.
• Strictly technical usage data: date of last sign-in, and the counters that feed your own indicators.
• If you turn on reminders: your browser’s notification subscription, or the ntfy channel you choose.
• For the subscription: a customer and subscription identifier at Stripe, the status and the renewal date. No bank details: they never reach us.

Why, and on what basis

• To provide the service and perform the subscription — performance of the contract (article 6.1.b GDPR).
• To send you reminders — your consent, withdrawable at any time in the settings (article 6.1.a).
• To produce aggregated usage statistics, so as to know whether the tool is of use — legitimate interest (article 6.1.f). Those statistics cover volumes and rates only, never the content of your goals.
• To keep accounting records — legal obligation (article 6.1.c).

You keep control of your data, and you may choose to share it with your practitioner (psychologist, speech therapist, coach, and so on)

You alone, and the practitioner you name if you name one. Goals and steps are protected by the access rules of the database, which reserve reading them to their author. That barrier applies to the publisher as to any other account: the administration console shows volumes and rates only — how many goals, what share of steps checked off — never a wording.

Reminders sent by notification carry a count and nothing else, never the wording of a step, precisely so that the service delivering them learns nothing from it.

Sharing with a practitioner

From Settings → Account, you can open your goals, your steps and your statistics to a practitioner listed on the service, along with the email address of your account. This sharing happens only if you ask for it: nothing is passed on by default, and no practitioner can link themselves to you on their own initiative.

Its basis is your consent (article 6.1.a GDPR). You withdraw it with one button, in the same place, without having to justify yourself; access closes at once. The date on which you gave it, and the date on which you withdrew it, are kept — that is what makes it possible to establish later what was consented to, and when.

The practitioner reads, and does nothing else: they can neither change, nor check off, nor delete anything. They see only the people who have named them. Their access ends by itself if their professional subscription comes to an end.

From the moment they are reading your data, that practitioner is responsible for what they do with it, under their own professional obligations. For any question about that use, address it to them.

Transfers outside the European Union

The pages are hosted by a company established in the United States. That transfer is framed by the European Commission’s standard contractual clauses. The database, which holds your goals, is hosted in the European Union.

For how long

• Your account data and your content: as long as the account exists. Deletion, which you trigger from Settings → Account, is immediate and final.
• Subscription data needed for invoicing: ten years, in accordance with accounting obligations.
• The record of your consents to share with a practitioner, withdrawn ones included: as long as the account exists. It disappears with it.
• Technical server logs: twelve months at most.
• A notification subscription that has become invalid is deleted as soon as its service tells us so.

Trackers and local storage

The service sets no advertising cookie and installs no advertising tracker. It does count its visits: Vercel Web Analytics records page views, without a cookie and without following you from one site to another.

The identifier that tells two visits apart is computed from the technical parts of the request and changes every day: nothing links your visits from one day to the next, and nothing ties them to your account. We read totals only — how many pages, from which countries — never what you do on them. The basis is the legitimate interest in knowing whether the service is used (6.1 f). The measurement is carried out by Vercel Inc., in the United States, which already hosts the pages: the transfer falls under the same standard contractual clauses.

Your browser keeps your session and your display preferences locally — font, text size, reminder settings. Those never leave your device and are strictly necessary to the service you are asking for.

Your rights

You have a right of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions on what becomes of your data after your death.

To exercise them, write to combozen@combozen.app. We reply within one month. Deleting the account requires no request at all: it is triggered from Settings → Account and erases your content immediately. On the paid version, it cancels the subscription in the same movement.

If you consider that your rights are not being respected, you may lodge a complaint with the data protection authority of the country where you live, or where you work.

Security

Exchanges are encrypted in transit. Access to data is partitioned account by account at the level of the database itself, and not only in the interface: a barrier placed in the display can be walked around, this one decides what may be read. The only opening provided for is the one you grant a practitioner, and it obeys the same rule: it is written into the database, read-only, and ends as soon as you withdraw it.

In the event of a data breach likely to result in a high risk to your rights, you will be informed as soon as possible, in accordance with article 34 GDPR.

Changes

This policy may change. Any substantial change will be notified to you by email before it takes effect.