Last updated: 20 July 2026 · Version 1.0
The controller of your personal data is Sky Technologies Ibrahim Abdelmoneim, Warszawa, Poland, NIP: 8992829986, operating the website lvvap.com (“Lvvap”, “we”, “us”). Sky Technologies, sky-technologies.org.
Privacy contact: contactlvvap@gmail.com.
| Purpose | Legal basis (GDPR) |
|---|---|
| Generate your report, plans and coaching from your health data | Your explicit consent for special-category data, Art. 9(2)(a); performance of our contract with you, Art. 6(1)(b) |
| Create and manage your account; save and re-download your reports | Performance of a contract, Art. 6(1)(b) |
| Process payments and memberships | Performance of a contract, Art. 6(1)(b); legal obligation (accounting/tax), Art. 6(1)(c) |
| Keep the service secure and prevent abuse | Our legitimate interests, Art. 6(1)(f) |
| Respond to your requests and complaints | Contract / legitimate interests, Art. 6(1)(b)/(f) |
You can withdraw your consent to health-data processing at any time (this does not affect processing already carried out). Withdrawing consent means we can no longer generate reports from your data.
We use a small number of vetted service providers who process data on our behalf under data-processing agreements:
The in-app coach is built in and runs on our own servers, your messages and report data are not sent to any third-party AI provider.
Some providers (e.g. Stripe, Render, Supabase) may process data outside the European Economic Area, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
We keep your account and report data for as long as your account is active, and delete it within 30 days of account deletion. Raw uploaded files are processed to extract daily metrics and are discarded after parsing. Payment and invoice records are kept for the period required by Polish tax law (generally 5 years).
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time. To exercise these, email contactlvvap@gmail.com; we will respond within one month.
You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Lvvap uses only essential storage: a signed session cookie to keep you logged in, and browser local storage to remember your language and light/dark theme. We do not use advertising or third-party tracking cookies, so no cookie-consent banner is required for these.
Your report and plans are generated automatically from your data. This does not produce legal or similarly significant effects on you within the meaning of Art. 22 GDPR, and no solely-automated decisions of that kind are made about you.
We protect your data with encryption in transit (HTTPS), hashed passwords, signed session tokens, access controls and reputable infrastructure providers. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of the data.
Lvvap is not intended for children. You must be at least 16 to use it (or older where required by local law).
We may update this policy; we will change the “Last updated” date and, for material changes, notify you by email or in the app.
Lvvap provides wellness and fitness guidance based on your own data, not medical diagnosis or treatment. Always consult a qualified clinician for medical concerns.