Legal
Privacy policy
Last updated 1 August 2026
What we collect, why, how long we keep it, and how to get it back or get rid of it. Your quiz answers include health-related information, so we have been specific about how that is handled.
What we collect
Account data: your email address, and your password or sign-in provider. Payment data: handled by Stripe — we never see or store your card number.
Quiz answers: what is stiff, how long you sit, how you rate your energy. Some of this is health-related information, which gets stricter treatment under GDPR. We ask for your explicit consent before you submit it, we use it only to build and adjust your plan, and we do not sell it or share it with advertisers.
Usage data: which sessions you complete, and — only if you accept analytics cookies — aggregated information about which pages help people and which do not.
Why we are allowed to hold it
For your account and your subscription: performance of the contract you entered into with us.
For quiz answers, including health-related information: your explicit consent, which you can withdraw at any time from Account → Data. Withdrawing it means we can no longer personalise your plan.
For analytics: your consent, given through the cookie banner. Nothing analytics-related loads before you choose, and rejecting is a single click of equal prominence to accepting.
How long we keep it
Account and quiz data: while your account is active, and for 12 months after your last subscription ends, after which it is deleted. You can delete it sooner yourself.
Payment records: retained for as long as tax and accounting law requires, which is typically six years and is not something we can shorten on request.
Support emails: 24 months.
Who else touches it
Stripe (payments), our email provider (transactional email and reminders), our hosting provider, our content platform, and our analytics providers if you consented. Each is a processor bound by contract to use the data only to provide their service to us.
We do not sell personal data, and we do not run advertising on Osvela.
Your rights
You can request a copy of your data, correct it, delete it, restrict how we use it, or object to processing. Most of this is self-service in Account → Data; anything else, email support@osvela.com and we will action it within 30 days.
If you think we have handled your data badly, you can complain to your national data protection authority. We would prefer you told us first so we can fix it.