What happens to the address
This page is about two things: the e-mail address left on the waiting list, and what happens to entries once an account is active. The address first, the entries below.
Where it goes
The address goes into Ondela's database (a server in the Netherlands) as an account that is waiting. The data controller is Damian Malinowski. Contact: kontakt@ondela.me.
Resend operates in the USA. The transfer rests on Resend's certification under the EU-U.S. Data Privacy Framework and, in the contract, on the standard contractual clauses as well. Write to me for a copy of the safeguards.
What it is used for
The address is used for two messages now, the confirmation and the invitation, and, once the account is active, to sign in: a one-time link comes only when you ask for it. They are sent by Resend (a company in the USA).
The IP address the request comes from is kept for a quarter of an hour to limit how much mail goes out. Then it is gone.
On what basis, and for how long
Legal basis: your request for a place (GDPR art. 6(1)(b), steps prior to a contract); the IP-based send limit rests on legitimate interest (art. 6(1)(f)). I keep it for as long as the account is waiting or in use; write to me and I will delete it.
By leaving the address you confirm that you are 18 or older.
What I record about how you use the site
When somebody arrives here, I record what happened: which page they opened, how far down they got, which of the two calls they took, their language and theme. Along with the IP address, the browser, and where they came from: the domain only, never the full address of the page.
I do this myself, on my own server in the EU. There is no Google Analytics and no other company, there are no cookies, and nothing is written to your device, which is why no consent box appears.
Visits are grouped on the server: from the IP address and the browser I compute a hash with a salt that changes daily. So I can see that somebody moved through three pages, but yesterday's visit cannot be linked to today's.
Legal basis: my legitimate interest (GDPR art. 6(1)(f)). I want to know which parts of the site and the app are used at all. I keep it for 12 months, then the rows are gone.
You have the right to object: write to me and I will delete your rows from that record. Inside the app I record only which screens you open, with no IP address; the text of an entry, the title of a meditation and any part of a conversation never go there. The crisis screen and this page are not recorded at all.
Your rights
You have the right to access, correct and erase it, to restrict its processing, to take it with you and to object, and to lodge a complaint with the Polish supervisory authority (the President of UODO).
The basis is not consent, so there is nothing to withdraw. There is deletion on request instead: write to me and the address is gone at once. What happened before stays lawful.
No newsletter: two mails and that is all.
And the entries?
Once the account is active, entries follow, and that is a different story. Below are the same sentences the app shows on its own data page; the full text, including what isn't there yet, is there.
- Your entries are encrypted with a separate key for each account and sit on a server in the Netherlands.
- The recording is not kept after transcription — unless you turn that on.
- To do anything with them, the app sends the content — and, for a recording, the voice itself, to turn it into text — to three US companies: Anthropic, OpenAI and ElevenLabs. Outside the EU. Their own retention rules are beyond the operator's control.
- Only the content goes there, without your e-mail address and without the account id — so if you say your name, it travels too.
- The person running the app has access to the server and does not look into entries. If they ever had to — because you ask for help with a specific entry — they will tell you before doing so.
- The app also records which screens you open — the screen's name only, never the text of an entry or part of a conversation, and no IP address. The crisis screen is not recorded at all. That record stays for a year, and deleting the account removes it with everything else.
- Delete an entry and it is gone from the Journal, the Portrait, the day's Echo and the weekly summary, together with the quotes taken from it. A conversation or a meditation that has already grown from it stays until you delete it.
- You delete your account yourself, in Account. Everything you wrote is gone and it cannot be undone — only the cost records stay, no longer tied to you.