Privacy Policy

This Privacy Policy explains how DailyMindStep processes your personal data, in line with the EU General Data Protection Regulation (GDPR).

1. Data controller

RENTOS s.r.o., Ulica Jána Hollého 376/2, 917 01 Trnava, Slovak Republic (IČO 52397726). Contact: hello@dailymindstep.com.

2. What we collect

Account data (name, email, hashed password); your preferences (chosen language, timezone, morning/evening send times); your activity (daily ratings, moods, notes, streak and history); billing data (a Stripe customer and subscription ID, country, plan) — we never receive or store your full card number, Stripe handles all payment details; and basic technical data (IP-derived country for regional pricing, and security logs).

3. Why we use it & legal bases

To provide the Service and send your daily emails (performance of our contract); to process payments and comply with tax/accounting law (contract and legal obligation); to keep the Service secure and prevent abuse (legitimate interest); and to send the daily emails you signed up for (consent, which you can withdraw anytime).

4. Processors we use

We share data only with providers that process it on our behalf to run the Service: Stripe (payments), Resend (email delivery), Vercel (hosting), and Supabase (database). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses.

5. How long we keep it

We keep your data while your account is active. If you delete your account, your personal data is removed promptly, except records we must retain for legal reasons (e.g. invoices for statutory accounting periods).

6. Your rights

You can export all your data and delete your account anytime from your account settings. Under the GDPR you also have the right to access, rectify, restrict, or object to processing, to data portability, and to withdraw consent. To exercise these, email hello@dailymindstep.com.

7. Email & consent

You consent to daily emails at signup. Every email has a one-click unsubscribe that stops delivery immediately, and you can pause or unsubscribe anytime from your account.

8. Cookies

We use only essential cookies: to keep you signed in, to remember your app language, and to detect your country for fair regional pricing. We do not use advertising cookies.

9. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

10. Complaints

If you believe we handle your data unlawfully you can complain to the Slovak supervisory authority, the Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk), or your local authority.

11. Contact

Privacy questions? Email hello@dailymindstep.com.