Data Protection Policy
This data protection policy explains which personal data are processed when you use the VERIN app, and for what purposes. VERIN helps you plan daily commitments, track progress, and calculate a discipline score.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Nils Pachaly
Email:
getverin@gmail.com
2. What data are processed?
Depending on how you use the app, the following data may be processed:
- Account data: email address and password (passwords are not stored in plain text; authentication is handled by the auth service).
- App content: commitments you create (titles, categories, goals, deadlines, recurrence), progress and check-in entries, and the resulting daily and score history.
- Technical session data: authentication tokens used to keep you signed in on the device.
VERIN does not request contacts, location, camera/microphone permissions, or advertising IDs for tracking. No third-party analytics or advertising SDKs are used in the described version of the app.
3. Purposes of processing
- Providing and operating the app’s features
- Registration, sign-in, and account security
- Storing and syncing your commitments and history across devices
- Handling support and data protection requests
4. Legal bases
- Art. 6(1)(b) GDPR (contract / pre-contractual measures) – for use of the account and app features
- Art. 6(1)(f) GDPR (legitimate interests) – e.g. secure operation and abuse prevention, where necessary
- Art. 6(1)(a) GDPR (consent) – if you voluntarily provide additional information or give consent
5. Storage on the device
App data may be cached locally on your device (e.g. a commitments cache), and session information may be stored in a protected area of the operating system so you remain signed in.
6. Cloud storage / processors
When cloud sync is enabled, account data and app content are processed via Supabase (authentication and database). Data are stored in a record scoped to your user account.
Provider: Supabase Inc. or affiliated entities. Details on the provider’s data protection practices are available in its documentation and privacy policy. Where required, a data processing agreement is or will be in place with the provider.
7. Sharing with third parties
Personal data are shared with third parties only where necessary to perform the contract (e.g. hosting/auth via Supabase), where you have consented, or where we are legally obliged to do so. User data are not sold.
8. Retention
- Account data and synced app content are stored for as long as your account exists and the data are needed to provide the app.
- Commitment and daily history are generally kept in the app on an ongoing basis so progress remains visible over time, until you delete data or the account.
- After account deletion or upon request, we delete or anonymize the related personal data unless legal retention obligations require otherwise.
9. Delete account
VERIN – Delete account
You can delete your VERIN account and all associated synced data at any time here:
Sign in with your VERIN email and password, confirm, and your account, commitments, check-ins, and score history stored in the cloud are permanently removed.
If you cannot sign in, email getverin@gmail.com from the email address of your VERIN account and we will help.
10. Your rights
Under the GDPR you have, in particular, the following rights:
- Access to the personal data we process
- Rectification of inaccurate data
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent with effect for the future
To exercise your rights, email the contact address above. You also have the right to lodge a complaint with a data protection supervisory authority.
11. Children
VERIN is not directed at children under 16. If you are a parent or guardian and believe a child has submitted personal data without consent, please contact us.
12. Security
We take appropriate technical and organisational measures (e.g. encrypted transmission via HTTPS, protected session storage on the device, access-restricted cloud data). Absolute security cannot be guaranteed.
13. Changes to this policy
We may update this data protection policy if the app, the law, or our processing changes. The current version is always available at this URL; the “Last updated” date is revised when changes are made.
14. Contact
Questions about data protection at VERIN:
getverin@gmail.com