Privacy policy

Your name and email address when you create an account; your responses in wellbeing assessments (the hexagon's six dimensions); daily check-ins (mood, energy, sleep, optional notes); journal entries; habits and streaks; goals; completed exercises and program progress; chosen skin. Also: your answers in exercises (free-text reflections, lists and ratings you enter when doing an exercise); your logs on life areas (what works, what weighs on you, what you wish for, next steps, and answers to the area's questions); ratings you give exercises; exercises you save as favorites; and what you add to the weekly planner. If you enable reminders, your push subscription is also saved (the browser's push address and encryption keys, chosen reminder time and timezone). Some of this — mood, sleep, and what you write in the journal, exercises and area logs — is classified as sensitive health-related data under GDPR Article 9.

Only to run the service you ask for: show your hexagon and progress, maintain your streak, give recommendations based on your lowest dimension, and save what you write. No data is sold or used for advertising.

The Wellbeing Hexagon is a measurement instrument under development. When you complete the full assessment, you are asked whether your answers can also be used to develop and validate the instrument — along with optional background information (age group, gender, occupation, sick leave). The question is a separate checkbox you answer per measurement, it is always voluntary, and if you answer no, the assessment is saved exactly as normal in your account — it is just not used for anything else.

Your answers are stored in your account, so linked to you, just like the rest of your data. Only when the material is extracted for analysis is it disconnected: the research material contains no information that identifies who you are — neither name, email, nor account ID comes with it. As long as you keep the measurement, you can change your mind; if you delete it, consent to use it is also deleted. The legal basis is your explicit consent (Article 9(2)(a)), which is separate from consent at registration.

No results are published in a way that makes individuals identifiable, and the material is not shared with third parties without this page being updated first.

Your consent at registration (particularly for health-related data under Article 9(2)(a)) and performance of the contract to provide the service (Article 6(1)(b)) — the contract is the terms of use. You can withdraw your consent at any time by deleting your account.

The app selects today's practice and today's nudge for you based on your own information: which dimension you have rated lowest, what kinds of exercises you usually complete and upvote, and how you answered in today's check-in — low energy gives a shorter suggestion. This is a form of profiling, but it has no legal consequences for you and only affects which content is shown first. All content is always accessible through the library, and you can disregard the suggestion. When a suggestion has been shaped by what the app has learned about you, the reason is written on the card.

In a Supabase project (Postgres database) at Supabase, Inc. in the eu-north-1 region (Stockholm), within the EU — that is where all your data is stored. Static pages and images are served via Cloudflare Pages (Cloudflare, Inc.), and two Cloudflare Workers functions act as data processors: one performs account deletion at your request, one sends check-in reminders (reading your reminder time and whether you have checked in today). Cloudflare may process data temporarily outside the EU/EEA as it passes through their global network; such transfer is covered by the EU's standard contractual clauses. The database and its backups are located within the EU/EEA.

One exception you initiate yourself: in the calendar there is a link called "Add to Google Calendar". If you click it, the post's title and time are sent to Google LLC as a regular link in your browser. Your note on the post does not go with it. If you don't click the link, nothing is sent — and if you instead download the calendar file (.ics), everything stays, including your note, on your own device.

As long as your account exists. If you delete your account, all data is removed permanently and immediately (see below) — the deletion happens in the database, not as a marking.

Two exceptions, both time-limited. Supabase maintains its own copies at the platform level that we neither access nor can restore from; they are deleted according to their routines. And before database changes, we take a manual backup — it is stored encrypted, not shared with anyone, and deleted at most 14 days after it is taken. If you delete your account shortly after such a backup is taken, your information may remain in it until it is deleted. Technical logs at Cloudflare and Supabase are deleted according to their own routines.

In addition to what you enter yourself, technical information is logged automatically: Supabase records IP address, timestamp and browser user agent when you sign in and make account changes (security measure, Article 6(1)(f)), and Cloudflare logs requests to the site. We use no analytics tools and set no tracking cookies.

Everything below is necessary for the app to work — which is why no cookie notice is needed. None of it is shared with anyone, and none of it is tracking cookies.

• Your sign-in session, so you don't have to sign in again. When you sign out it is deleted.
• Your skin choice and your theme choice (light/dark, saved per device). Stays until you clear your browser data.
• Responses started in the wellbeing assessment and in onboarding's baseline. The assessment is 66 questions, and most people do it in multiple sessions — which is why responses are saved in the browser while you fill them in, so a closed tab doesn't force a restart. This is health-related information, the same sensitive kind described above. It stays on that specific device, marked with your account so a shared computer never shows it to anyone else, and is deleted when you sign out or submit the assessment. The same goes for a check-in or journal entry you have started: it is saved on the device while you write, marked with your account, and deleted once the entry is saved, when the field is emptied, or when you sign out.

You must be at least 16 years old to create an account — processing of health-related information relies on your own explicit consent, and 16 is the limit we set for such consent to be meaningful. If we learn an account belongs to someone younger, we delete it. For payment services, the age is 18, since a subscription is a contract; see the terms of use.

• Right of access (Article 15) — you have the right to know what information we process about you, why, for how long, and who has access to it. All of this is in this text, and you download the actual data under Me → Your data.
• Data portability (Article 20) — the same button gives you a JSON file in machine-readable format that you can take to another service. It contains what you provided yourself: account information, profile, check-in answers, journal, goals, habits, assessments and calendar posts — with question text printed out so answers are understandable without our database.
• Deletion — delete your account and all associated data permanently under Me → Delete account.
• Rectification — change your name and skin under Me → Settings; contact us for other corrections.
• Objection and restriction — you can object to processing or request it be restricted (Articles 18 and 21). In practice: turn off reminders under Me → Reminders, or contact us and we'll pause processing instead of deleting.
• Withdraw consent — processing of health-related information relies on your explicit consent (Article 9(2)(a)). You can withdraw it at any time by deleting your account. This does not affect processing that has already occurred.
• Lodge a complaint — you have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY, the Swedish Authority for Privacy Protection).

Comdira is operated by Mikael Glännström, sole proprietorship (Glänne & Söner) (org. no. 771110-5655), Kompassvägen 10, 711 35 Lindesberg, Sweden. We are the data controller for the processing described here and can be reached at the address under Contact. The data processors are Supabase, Inc. (storage) and Cloudflare, Inc. (delivery and the two worker functions above).

Privacy or data questions: glannstrom@gmail.com.