Privacy Policy - Konst

1. Data Controller

The controller of personal data collected through Konst is Gautier Colasse, reachable at contact@konst.app.

2. Data Collected

We collect the following data:

Account data: email address, name (optional)
Usage data: habits, tasks, notes, mood, energy, focus
Technical data: IP address, browser type (for security purposes)
Consents: date and version of terms acceptance, email preferences

3. Processing Purposes

Your data is used to:

Provide and improve the Konst service
Back up and sync your data across devices
Send you communications (only if you have given your consent)
Ensure security and prevent fraud

4. Legal Basis for Processing

The processing of your data is based on:

Contract performance: to provide the service you requested
Consent: for sending marketing communications (revocable at any time)
Legitimate interest: for security and service improvement

5. Communications and Emails

If you have consented to receive our communications, we may send you emails about Konst news, including announcements for our future mobile app. You can unsubscribe at any time by clicking the unsubscribe link in each email or through your account settings.

6. Retention Period

Your data is retained:

Account data: as long as your account is active, then 3 years after deletion
Usage data: as long as your account is active
Consent proof: 5 years for legal compliance purposes

7. Data Sharing

Your data may be shared with:

Supabase: hosting and authentication (EU servers)
Vercel: application hosting
Paddle: payment processing (if applicable)

We never sell your personal data to third parties.

8. International Transfers

Some data may be transferred to countries outside the European Union (notably via Vercel). These transfers are governed by standard contractual clauses approved by the European Commission.

9. Your Rights (GDPR)

In accordance with GDPR, you have the following rights:

Access: obtain a copy of your data
Rectification: correct your inaccurate data
Erasure: request deletion of your data
Portability: receive your data in a structured format
Objection: object to the processing of your data
Withdrawal of consent: withdraw your consent at any time

To exercise these rights, contact us at contact@konst.app.

10. Security

We implement appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS), secure authentication, restricted data access.

11. Cookies

Konst only uses cookies essential for the service to function (authentication session). We do not use tracking or advertising cookies.

12. Modifications

We may update this privacy policy. In case of significant changes, we will notify you by email or through the application.

13. Complaint

If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.

14. Contact

For any questions regarding this policy, contact us at: contact@konst.app.