Privacy policy

1. Who is responsible

Fredrik Schröder is the data controller for the processing of personal data on ziran.app.

For questions about your data, contact: ziran@pm.me

2. Without an account, nothing is collected

You can use all of Ziran Dao without registering. In that case your progress, journal entries, check-ins and saved quotes are stored solely in your own browser's local storage.

The data is never sent to any server. Neither we nor anyone else has access to it, and if you clear your browser data it is gone for good.

3. What is collected if you create an account

If you choose to sign in with Google, the following is retrieved from your Google account:

• your email address
• your name
• the address of your profile picture

In addition, what you create in the app is stored: which lessons you have completed and when, which exercises you have done, your journal entries, your balance check-ins, your saved quotes and your language choice.

If you tick the box for the monthly letter, the fact that you gave consent and the time you gave it are also stored.

4. Technical logs

Our providers keep automatic operational logs that may contain IP address, timestamp and browser type. This happens for operational and security reasons and is not used to map you or your behaviour.

5. Why the data is processed

The processing rests on the following legal bases under the General Data Protection Regulation (GDPR):

• Account and syncing between devices – to deliver the service you have requested (Article 6(1)(b)).
• The monthly letter by email – your explicit consent (Article 6(1)(a)). Consent can be withdrawn at any time.
• Operation, security and troubleshooting – legitimate interest in keeping the service working and protected (Article 6(1)(f)).

6. Where the data is stored

The database is operated by Supabase on servers in Ireland, that is, within the EU/EEA. The website itself is delivered via Vercel. No processing routinely takes place outside the EU/EEA.

7. Who else has access

The following providers process data on our behalf as data processors:

• Supabase – database and authentication (Ireland)
• Google – the sign-in. Google's sign-in script loads only when a sign-in box is shown to you, never on ordinary visits
• Vercel – hosting and delivery of the site

Your data is never sold, rented or traded. It is not passed to any other third party, except where we would be legally obliged to do so.

8. How long the data is kept

For as long as you have an account. If you delete your account, all data – journal, progress, check-ins and email address – disappears immediately and irreversibly. You delete the account yourself from inside the app, without having to ask anyone's permission.

9. Your rights

Under the GDPR you have the right to:

• find out what data is held about you and receive a copy of it
• have inaccurate data corrected
• have your data erased
• receive your data in a machine-readable format and move it elsewhere
• object to processing based on legitimate interest
• withdraw your consent to the monthly letter at any time

Get in touch at the address in section 1 and we will help you. If you are unhappy with how your data is handled, you have the right to complain to your national data protection authority — in Sweden, the Swedish Authority for Privacy Protection (IMY).

10. Cookies and local storage

Ziran Dao uses no tracking cookies, no web analytics and no advertising networks. That is why there is no cookie banner here to click away.

Local storage in your browser is used only to make the app work: your language choice, your progress if you are not signed in, and – if you have signed in – the session data that keeps you signed in.

11. Automated decision-making

No profiling and no automated decision-making with legal consequences for you takes place.

12. Changes to this policy

If anything material changes, this page and the date at the top are updated. If the change concerns processing based on your consent, we will ask for that consent anew.