Privacy Policy

Last updated: October 2026 (draft)

1. What this is about

This English version is a translation for your convenience. In case of differences, the German version prevails.

This privacy policy explains which personal data we process when you use the Longrove app (web and apps), why we do so and what rights you have. It follows the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to users in the EU or EEA, the rights provided there apply in addition (section 11).

2. Controller

The controller is: Renco GmbH, Bannstrasse 2, 6312 Steinhausen, Switzerland. Contact for privacy questions: info@longrove.ch.

3. Which data we process

Account data: first name, last name, email address, country of residence and password (the password is stored only in encrypted form; we never see it).

Profile details: year of birth and, optionally, sex. From this we derive the age group for suitable images and the statistical life clock.

Programme data: chosen packages and base habits, completed habits, progress, daily rhythm, own routines, journal entries, reflections and answers in the Mindset course.

Balance check: your self-assessment of how often you practise certain habits (e.g. exercise, bedtimes, breaks) and the habit compass for putting your habits into practice. We deliberately do not ask about your well-being or state of health.

Nutrition: if you book Nutrition, we store the chosen offer, start and pause dates, which days you tick off, which weeks you skip, which steps you adopt as “Your standard”, the score of your self-check and the confirmation of the notices. We do not ask about weight, allergies, illnesses or other health information.

Subscription and order data: chosen subscription, term, orders with date and time, consents given during the order process, and withdrawal and cancellation declarations with name and email address. We do not receive payment data (e.g. credit card); it is processed directly by the payment provider or app store.

Technical data: when you open the app, the hosting provider processes technically necessary data (e.g. IP address, time, browser/device). We do not use advertising or tracking cookies.

Visit measurement: On the website www.longrove.ch and in the web app app.longrove.ch we use the service Umami (Umami Software, Inc., USA; cloud service with data held in the EU region) to measure, in a data-minimising way, how many visits there are, which pages are opened, where visitors come from (referring page), from which country, in which language and with which browser and device type. In addition, we count individual events such as registration, order, withdrawal and cancellation, each only with product and term. No cookies are set, no personal profiles are created and no names, email addresses, free texts or health information are transmitted. Visits are grouped only by an anonymised value, not across several visits. The measurement respects the browser setting “Do Not Track”; if you enable it, we do not measure you. The measurement takes place on the web only, not in the store apps.

4. What we use the data for

To provide the app: to show your programme, habits and progress and to synchronise them across devices.

To manage your account and send you necessary emails (e.g. email confirmation, password reset).

To process subscriptions, confirm orders and handle withdrawals and cancellations.

To improve the app and fix errors.

To evaluate the use of the website and the web app statistically (visit measurement, see section 3).

We do not sell your data and do not use it for advertising.

5. No health data

Longrove supports you in building habits. We deliberately do not ask about your state of health, your well-being or measured values, and we do not evaluate such data.

In free-text fields (e.g. journal, reflection, notes) we ask you not to enter any health information. These texts stay on your device only anyway (see section 6).

6. Where your data is stored

Without an account, your data stays on your device only.

With an account, we additionally store it in a database of our provider Supabase in a data centre in Zurich (Switzerland). Only you have access to your data through your account.

All free texts stay on your device only and are never stored in the cloud: journal entries, weekly reflections, Mindset notes, answers in the evening check of the Mindset programme, notes on habits, if-then plans, “Your why”, your goal and your answers from the introduction, free answers in the interim review, and titles and texts of your own routines. The same applies to sleep and wake-up times and numbers such as steps or shower duration. For habits, we store in the cloud only whether they are done. If you change device, these local details are not available there.

Exception: feedback you send us via “Give feedback” is stored with your account so that we can read it.

7. Service providers and disclosure abroad

We work with carefully selected service providers who process data only on our behalf and according to our instructions:

• Supabase Inc. (USA) – account and database; storage location Zurich, Switzerland.

• Vercel Inc. (USA) – provision of the web app.

• Umami Software, Inc. (USA) – data-minimising visit measurement (Umami Cloud, EU region).

• Resend Inc. (USA) – sending of system emails via servers in the EU (Ireland).

• [Stripe Payments Europe Ltd. (Ireland) – payment processing, once payments are active.]

• Apple or Google – for purchases via the App Store or Google Play, their privacy terms apply in addition.

Some providers are based in the USA. Access from there cannot be ruled out. We ensure appropriate protection, in particular through the Swiss-U.S. Data Privacy Framework (where the provider is certified) or standard contractual clauses.

8. How long we keep data

We keep your data as long as you have an account. If you delete your account, your data is deleted, unless we are legally required to keep certain details longer (e.g. accounting records and order data for 10 years).

You can delete your account yourself at any time in the app under Profile → Legal → “Delete account”. Your account and programme data are deleted immediately; backups are overwritten within 30 days. Alternatively, you can request deletion by email to info@longrove.ch.

9. Your rights

You can at any time request information about your data, have incorrect data corrected or deleted, object to processing, withdraw consent and request your data in a common format.

Write to us at info@longrove.ch for this. We may ask for proof of identity.

You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). If you live in the EU, the EEA or the United Kingdom, you can also complain to the data protection authority of your country of residence.

10. Security

We protect your data with appropriate technical and organisational measures, including encrypted transmission (HTTPS), encrypted password storage and access rules that allow only you to access your data.

11. For users in the EU, the EEA and the United Kingdom

Legal bases (Art. 6 GDPR): Processing your account, programme, subscription and order data is necessary to perform the contract with you (Art. 6(1)(b)). Retention obligations are based on a legal obligation (point (c)). Security, troubleshooting and improving the app are based on our legitimate interests (point (f)).

Provision: Without account, programme and order data we cannot perform the contract. There is no automated decision-making, including profiling, with legal or similarly significant effects.

Transfers to third countries: From the EU’s perspective, Switzerland is a country with an adequate level of data protection. For providers in the USA we rely on the EU-U.S. Data Privacy Framework (where the provider is certified) or on standard contractual clauses. You can obtain a copy of the safeguards on request.

[Representative in the EU under Art. 27 GDPR: insert name and address of the representative before Longrove is offered in the EU.]

12. Changes

We may amend this privacy policy. The version currently published in the app applies. We will inform you in the app about material changes.