Privacy Policy (Datenschutzerklärung)

Last updated: August 2026

1. Data Controller (Verantwortlicher)

The controller responsible for data processing on this website according to Art. 4(7) of the General Data Protection Regulation (GDPR / DSGVO) is:

2. Lawful Basis for Processing

We process your personal data strictly in compliance with the GDPR:

• Art. 6(1)(b) GDPR (Contractual fulfillment): Processing required to provide our daily book summary and retention services, including account registration, authentication, and billing.
• Art. 6(1)(f) GDPR (Legitimate interests): For ensuring network security, preventing fraud, and optimizing the technical delivery of our service.

3. Automated Daily Transactional Emails (Sub-Processors)

To deliver our core service—sending you daily knowledge retention emails—we share your email address securely with our transactional email delivery provider (Resend). This data transfer is strictly necessary for fulfilling our contract with you (Art. 6(1)(b) GDPR).

Every automated email contains a direct unsubscribe link, allowing you to instantly revoke consent and stop deliveries.

4. Payment Processing

We use Stripe Payments Europe, Ltd. to securely process subscriptions for our "Limitless" tier. When you upgrade, your payment details (e.g., credit card info) are processed directly by Stripe on their secure servers. We do not store your full payment information.

The processing is based on Art. 6(1)(b) GDPR for the fulfillment of the subscription contract. Data transfers to Stripe in the USA are safeguarded by Standard Contractual Clauses (SCCs).

5. AI Features and Data Processing

Our platform offers AI-driven formatting features (e.g., fixing grammar, rewriting notes) using API providers like DeepSeek or Groq. When you explicitly trigger an AI action, the text you submit is sent securely via API to the respective provider. It is not used to train global AI models. This processing is based on your explicit request to perform the action (Art. 6(1)(b) GDPR).

6. Your Rights under the GDPR

As a data subject located in the EU, you have the following rights regarding your personal data:

• Right to Access (Art. 15): You can request information about your processed data.
• Right to Rectification (Art. 16): You can demand correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten" - Art. 17): You can delete your account and all associated data at any time via the "Delete Account" button in your settings.
• Right to Restriction of Processing (Art. 18): You can request limited processing under certain conditions.
• Right to Data Portability (Art. 20): You have the right to receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): You may object to the processing of your data based on legitimate interests.

To exercise any of these rights, simply email us at [email protected].

7. Additional Information for US Residents (CCPA)

California Residents: We do not sell or share personal information with third parties for cross-context behavioral advertising. We collect and process data solely to provide the StayLimitless subscription service as requested by you.

8. Data Retention

We only retain your personal data for as long as necessary to provide the service. If you delete your account, all your personal notes, summaries, and email addresses are irreversibly wiped from our active databases immediately.