Privacy Policy

In short

• We store your account (email address and user ID) and your subscription status on our server.
• Your training data stays on your phone. It is never sent to us.
• We don't sell data, don't show ads and don't track you.

Who is responsible

Stian Karlsen is the data controller for the personal data described in this policy.

Stian Karlsen
Solstien 27, 9350 Sjøvegan, Norway
Privacy contact: lumilinkstudio@gmail.com

Data we collect and why

Your account

You sign in to Driv with your Google account. Sign-in is handled by Supabase Auth. When you sign in, our server stores your email address and a user ID. We use this to identify you and to link your subscription to you.

Your subscription

When you subscribe through Google Play, our server stores a subscription record with your user ID, the purchase token from Google Play, the subscription status and the expiry date. We use it to check that you have access to the app. We never see or store your payment details. Payments are handled entirely by Google.

Your training data

Your plans, logged sets, weights, RIR, comments and settings are stored only on your phone, in a local database. They are never sent to our server, and we can't see them. Because we don't have a copy, we can't restore your training data if it is deleted from your phone, for example when you uninstall the app, clear its data or delete your account.

When you visit this website

This website is hosted by Vercel. Like most web hosts, it automatically logs technical information about each visit, such as your IP address, browser type and the page you asked for. The logs are used to deliver the site and keep it secure, and are deleted after a short period. We don't use them to identify or track you.

What we don't do

• We don't sell or rent your data to anyone.
• We don't show ads.
• We don't use analytics, advertising IDs or tracking beyond what is described above.
• This website doesn't use cookies, analytics or tracking.

Legal basis

We process your account and subscription data because it is necessary to provide the service you signed up for (performance of a contract, GDPR Article 6(1)(b)).

The technical logs from this website are processed because we have a legitimate interest in running a secure, working website (GDPR Article 6(1)(f)).

Who we share data with

We only share data with the service providers we need to run Driv. They process it on our behalf:

Transfers outside the EU/EEA

Your account and subscription record are stored in the United Kingdom, which is outside the EU/EEA. The European Commission has decided that the UK protects personal data to the same level as the EU (adequacy decision of 19 December 2025, valid until 27 December 2031), so the data can be stored there without further safeguards.

Supabase is run by Supabase Pte. Ltd. in Singapore. If Supabase or any of our other providers access or process data outside the EU/EEA and the UK, the transfer is protected by the European Commission's Standard Contractual Clauses or, for the USA, the EU–US Data Privacy Framework. Contact us if you want a copy of these safeguards.

We don't share your data with anyone else, unless we are required to by law.

How we protect your data

• All data sent between the app and our server is encrypted (HTTPS/TLS).
• Access to the server data is restricted to the people who run Driv.
• We collect as little data as possible. Your training data never leaves your phone.

How long we keep data

We keep your account and subscription record for as long as you have an account. When you delete your account, both are deleted and nothing is kept. Technical logs from this website are deleted automatically by our host after a short period.

Deleting your account and data

You can delete your account in the app under Settings → Delete account (also available on the subscription screen if you don't subscribe), or by emailing us at lumilinkstudio@gmail.com. This deletes your account and subscription record from our server. Deleting in the app also erases all training data from your phone. Read more on the Delete your account page.

Deleting your account does not cancel your subscription. See how to cancel in Google Play.

Your rights

You have the right to:

• see what data we hold about you,
• have incorrect data corrected,
• have your data deleted,
• receive your data in a portable format,
• object to or restrict how we process it.

To use any of these rights, email lumilinkstudio@gmail.com. You can also complain to the data protection authority in your country. In Norway, that is Datatilsynet.

Children

Driv is not meant for children under 16, and we don't knowingly collect data about them. If you believe a child under 16 has created an account, contact us at lumilinkstudio@gmail.com and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If the changes are significant, we'll tell you before they take effect.

Contact

Questions about privacy? Email lumilinkstudio@gmail.com.