envyu

Legal

Privacy Policy

Controller

The controller for this website is Stefan Radic, operating Envyu and Envyu Wellbeing. Contact: support@envyu.app

What data we collect

Waitlist and newsletter signups. If you submit your email address through a waitlist or signup form on this site, we collect your email address, the page path or source where you signed up (if captured by the form), and the time of submission. You can withdraw your consent at any time by contacting us at the email above.

Email correspondence. If you contact us by email, we process the information you include in that message, including your email address and any content you share.

Technical log data. Our hosting provider may automatically record standard server logs such as IP addresses, browser user-agent strings, requested URLs, and timestamps. This data is processed for security and operational purposes only.

Editorial admin workflow (internal only). Our protected editorial tool may process uploaded notes and images to generate draft blog content using an AI provider. This is an internal drafting workflow not accessible to the public. Drafts are reviewed by a human before publication.

Legal basis (GDPR)

We process your data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Art. 6(1)(a) — Consent: when you voluntarily submit your email address through the waitlist or newsletter form.
  • Art. 6(1)(f) — Legitimate interests: for technical operation, security, and server log processing necessary to run the website safely.

Third-party service providers

We use the following service providers to operate this website:

  • Vercel Inc. — website hosting and delivery infrastructure. Vercel may process technical request data through its global network.
  • Supabase Inc. — database provider used to store waitlist email submissions and blog content. Data is stored in Supabase-managed infrastructure.
  • Resend Inc. — email delivery provider used to send confirmation or early access emails to waitlist subscribers.

Each provider has their own privacy policies and data processing terms. Where providers are based outside the EU/EEA, data transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms under applicable law.

Analytics and cookies

We do not intentionally use non-essential analytics or advertising tracking cookies on this website. No Google Analytics, Meta Pixel, Hotjar, or similar tools are currently implemented.

If this changes in the future, we will update this policy and request consent where required under applicable law before loading any tracking tools.

Our website may use browser session storage for internal operational purposes only (such as keeping the editorial admin session active). This does not involve tracking or advertising.

Retention

Waitlist email addresses are retained until you unsubscribe, request deletion, or until the waitlist programme is concluded, whichever comes first. Technical server logs are retained only as long as necessary for security and operational purposes, subject to provider settings. Editorial draft data is retained for internal use only and removed when no longer needed.

Your rights

Under GDPR and applicable data protection law, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — ask us to delete your personal data where applicable.
  • Restriction — request restriction of processing in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdrawal of consent — withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
  • Complaint — lodge a complaint with your national data protection supervisory authority. In Germany: Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), or the relevant state authority (Landesbeauftragter).

To exercise any of these rights, contact support@envyu.app.

No sale of personal data

We do not sell personal data to third parties.

Health data

The public Envyu website does not ask you to submit health data. The site provides editorial wellbeing content and an app preview waitlist only.

Future app features may involve body rhythm, training load, nutrition, or wellness signals. Those features will require separate in-app privacy information and explicit user control before they are introduced.

Wellbeing content disclaimer

Envyu Wellbeing content is for general informational and wellbeing purposes only. It is not medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical questions or personal health decisions.

Contact

For privacy questions, data access requests, or deletion requests, contact support@envyu.app.