Privacy Policy

Last updated: June 2026

Data Controller

Data Processed

This platform processes the following personal and technical data:

• Email address for authentication
• Session and local storage data required for dashboard functionality
• Personal productivity data you enter (tasks, notes, journal, projects, etc.)
• Technical request and server logs
• Data submitted to connected third-party services you enable

Tools and Infrastructure

• Supabase — authentication, database and session management
• Self-hosted VPS infrastructure — all core services run on privately operated servers
• Anthropic / OpenAI — AI features, only for content you explicitly submit
• Third-party connectors — only when you connect them (e.g. calendar, GitHub)

Purpose of Processing

• User authentication and access control
• Dashboard functionality and session management
• Storing and organizing your personal productivity data
• AI-assisted features you explicitly trigger
• Technical stability, security, and error diagnosis

Cookies and Tracking

This platform does not use advertising cookies, analytics services, or marketing tracking. Only technically necessary session data is stored. If analytics or tracking tools are added in the future, this policy will be updated accordingly.

Legal Basis

Processing is based on legitimate interests in providing and securing this internal platform under Art. 6(1)(f) GDPR. Where processing is directly required to deliver a requested service, Art. 6(1)(b) GDPR applies.

Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request rectification of inaccurate data
• Request erasure of your data
• Request restriction of processing
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at contact@nfcosmetics.de.

Data Retention

Data is retained only as long as necessary for its stated purpose or as required by applicable law. Technical logs are deleted on a rolling basis.

Changes to This Policy

This policy may be updated to reflect changes in our infrastructure or legal obligations. Continued use of the platform constitutes acceptance of the current version.