Privacy Policy

1. Who is responsible for your data

The data controller is Elevate Hubert Krzan, Gorliczyna 281, 37-200 Przeworsk, Poland, Tax ID (NIP) 7941846218. For anything related to your data, write to support@credobible.com.

2. What we collect

Account: your email address and a securely hashed password (or your Google / Apple sign-in identifier, if you use those).

Purchases: your subscription status, purchase history, and a customer identifier from our payment processor. Card numbers go directly to Stripe or Apple — we never see or store them.

Listening: your progress through chapters and app settings, so you can pick up where you left off on any device.

Messages: emails you send us and your in-app support conversations, so we can help you.

Technical data: basic logs (IP address, browser or device type, timestamps) needed to run the service securely, and aggregate usage statistics.

3. Why we process it

To provide the service you pay for (contract), to keep it secure and improve it (legitimate interest), to meet tax and accounting obligations (legal duty), and — only if you opt in — to send you news and offers (consent, withdrawable anytime via the unsubscribe link in every such email). Receipts and messages about your access are part of the service itself and arrive regardless of marketing consent.

4. Who processes data for us

Supabase (accounts and database), Stripe (web payments), Apple (in-app purchases), Resend (email delivery), Vercel (website hosting), Cloudflare (audio delivery), and Google Analytics (aggregate site-usage measurement). Each processes data only on our instructions. Some of these providers operate in the United States; transfers rely on recognized safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

5. How long we keep it

Account data lives as long as your account. Purchase records are kept for as long as tax law requires. Logs are short-lived. When you delete your account, we remove your personal data except what the law requires us to retain.

6. Your rights

You can access, correct, export, or delete your data, object to or restrict processing, and withdraw consent at any time. You can delete your account yourself in the app, or email us and we will do it for you. If you are in the EU, you may also lodge a complaint with a data protection authority; residents of US states with privacy laws (including California) have corresponding rights of access, deletion, and non-discrimination. We do not sell your personal data.

7. Children

Accounts are created and managed by adults. The children’s section of the app is used under a parent’s account; we do not knowingly collect personal data directly from children.

8. Changes

If we change this policy in a way that matters, we will note the new date here and, for material changes, let you know by email. Questions about any of this? Write to support@credobible.com.