Privacy Policy & GDPR

Last updated: February 21, 2026

Data Controller

Yann GUTTER
16 rue Dietterlin, 67100 Strasbourg, France
designmoiunmouton@gmail.com

Data We Collect

Disciply.me collects the following data when you use the service:

Identity data: first name, email address
Usage data: disciplines defined, task completion history, streaks, points score
Billing data: payment information managed entirely by Stripe — Disciply.me does not store any card data
Connection data: login timestamps, IP address (Vercel server logs)

Purposes of Processing

Data is collected for the following purposes:

Providing and operating the Disciply.me service;
Calculating the personalized monthly price;
Managing your subscription and billing via Stripe;
Sending daily reminders (if enabled by you);
Displaying the leaderboard (based on anonymized rank data);
Improving the service.

Legal Basis

Processing is based on the performance of the subscription contract (Article 6.1.b GDPR), and for optional communications, on your consent.

Data Retention

Personal data is retained for the duration of your active subscription, then for a maximum of 2 years from cancellation, unless you exercise your right to erasure. Billing data is retained in accordance with legal accounting obligations (10 years).

Sub-processors and Data Transfers

Disciply.me uses the following sub-processors:

Vercel Inc. (hosting) — United States — appropriate safeguards in place (Standard Contractual Clauses)
Stripe, Inc. (payment processing) — United States — appropriate safeguards in place
Google (OAuth authentication, optional) — United States — appropriate safeguards in place

No data is sold or shared for commercial purposes.

Cookies

Disciply.me only uses technical cookies strictly necessary for the service (NextAuth authentication session token). No advertising, tracking, or behavioral analytics cookies are deposited.

Your Rights (GDPR)

Under Regulation (EU) 2016/679 (GDPR), you have the following rights:

Right of access: obtain a copy of your personal data
Right of rectification: correct inaccurate data
Right to erasure (“right to be forgotten”): request deletion of your account and data
Right to data portability: receive your data in a structured format
Right to object: object to certain types of processing
Right to restriction: limit the processing of your data

To exercise these rights, contact us at: designmoiunmouton@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.

Contact

For any question regarding this policy or your personal data: designmoiunmouton@gmail.com