Privacy Policy

1. Who we are

Volentu operates the Volentu habit- and discipline-tracking application and the website at www.volentu.com. For the purposes of the GDPR, Volentu is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at info@volentu.com.

2. Data we collect

We collect only the data we need to provide and improve the Service. Depending on how you use Volentu, this may include:

Account and contact data

• Registration details — your name (or display name) and email address when you request beta access or create an account.
• Communications — messages you send us, and support or feedback correspondence.

Habit and goal data

• Goals and commitments — the habits, goals, and disciplines you choose to track (for example a daily run, a page read, or a day kept clean).
• Crossings and journal entries — the moments you log, along with any notes, reflections, or context you add.
• Progress data — completion records, streaks, and derived statistics.

Health-related data

• Wellbeing signals — where you choose to enable them, metrics such as sleep duration, heart-rate variability (HRV), and similar readiness indicators, which may be imported from Apple Health, Google Fit / Health Connect, or entered manually.

Health-related data is treated as a special category of personal data under the GDPR. We only process it where you have given your explicit consent, and you can withdraw that consent and disconnect these sources at any time.

Technical and usage data

• Device and log data — app version, device type, operating system, IP address, and diagnostic or crash information.
• Usage data — how you interact with features, to help us understand and improve the Service.

3. How we use your data

We use your personal data to:

• provide, operate, and maintain the Service, including tracking your goals and crossings;
• create and manage your account and, during the beta, administer access to it;
• generate the insights, patterns, and progress views that are the core of Volentu;
• communicate with you about your account, beta invitations, updates, and support requests;
• keep the Service secure, prevent abuse, and debug and improve performance;
• comply with our legal obligations.

4. Legal bases for processing

Under the GDPR, we rely on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for.
• Consent — for health-related data and for optional communications; you may withdraw consent at any time.
• Legitimate interests — to secure, maintain, and improve the Service, provided your rights do not override those interests.
• Legal obligation — where we are required to process data by law.

5. How we share your data

We do not sell your personal data. We share it only in limited circumstances:

• Service providers — trusted vendors who host our infrastructure, deliver email, or provide analytics and crash reporting, acting as our processors under contract.
• Legal requirements — where disclosure is required by law, regulation, or valid legal process.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Data retention

We keep your personal data only for as long as necessary to provide the Service and for legitimate business or legal purposes. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain it by law.

7. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at info@volentu.com.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and hardened infrastructure — to protect your data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

9. Children

Volentu is not directed to children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the app or by email. Your continued use of the Service after an update means you accept the revised policy.

11. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at info@volentu.com.