Privacy & cookies

1. What we collect and why

Account: your email address, and your name if Google shares it — to run your account and the service (GDPR art. 6(1)(b)).

Use of the app: the towns you scan and your in-app settings — to provide the service (art. 6(1)(b)).

Emails: your email address — to send account notices (art. 6(1)(b)) and reports and news you agreed to (art. 6(1)(a)); you can unsubscribe at any time.

Analytics and session replays: pages viewed, clicks and screen recordings with typed text masked — only if you accept analytics cookies (art. 6(1)(a)).

Bug reports: the text you write, a screenshot and the app state at that moment — to fix the problem (art. 6(1)(f), our interest in a working service).

AI questions: the questions you type and the answers — to answer you and improve answers (art. 6(1)(b) and (f)).

Payments, when offered: handled by Stripe; we receive the plan, amount and status, never your card number — to take payment (art. 6(1)(b)) and keep accounting records required by tax law (art. 6(1)(c)).

Server logs: IP address, time and page requested — for security and fixing errors (art. 6(1)(f)).

2. Who receives it

Only service providers who process it for us: Supabase (accounts and sign-in), Google (if you sign in with Google), PostHog in the EU (analytics, only with your consent), Railway and Vercel (hosting), Stripe (payments), MiniMax (AI answers) and our email delivery provider. We do not sell your data.

Some of these providers are outside the European Economic Area (for example in the USA or Asia). Where they are, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

3. How long we keep it

Account data: while you have an account, then deleted within 30 days. Analytics: up to 12 months. Bug reports: until the problem is fixed, at most 12 months. Payment and accounting records: 5 years, as tax law requires. Server logs: up to 90 days.

4. Your rights

You can ask for access to your data, a copy, correction, deletion, restriction, or object to processing based on our interests. Where we rely on your consent you can withdraw it at any time; this does not affect what was done before.

Write to bedandmarket@gmail.com. You can also complain to the Polish data-protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

Giving your email is needed to have an account; everything else is optional.

5. Cookies

Necessary: sign-in session and the record of your cookie choice. These are always on because the service cannot work without them.

Analytics (PostHog): statistics and session replays. Off until you press Accept on the cookie banner.

You can change your choice at any time with the Cookies link at the bottom of every page, or by clearing this site's cookies in your browser.