RollPlanner ("we", "us", "our") operates the website rollplanner.com and the RollPlanner mobile application. This policy describes how we collect, use and protect your personal data.
1. Data We Collect
We collect the following information when you use our service:
- Account data: email address, display name/alias, belt rank, gym (optional)
- Training data: training logs, techniques, game plans, nodes and connections you create
- Usage data: app interactions, device type, language preference
- Payment data: processed securely by LemonSqueezy (we do not store card numbers)
- Referral data: if you invite a friend from the Collaborate page, we store the email address you enter in order to send that single invitation and to keep count of your referrals. We do not use it for anything else and we do not share it.
- Session data: if you accept analytics cookies, we record how you move through the app (clicks and navigation) to see where people get stuck. What you type into form fields is masked and never recorded.
2. How We Use Your Data
- Provide and maintain the service (plans, training logs, profile)
- Process subscriptions and payments via LemonSqueezy
- Personalize your experience (language, belt theme, recommendations)
- Send transactional emails (account verification, password reset, invitations you send from Collaborate)
- Improve the service: aggregate usage metrics and, with your consent, session recordings to spot where the interface fails
3. Third-Party Services
We use the following third-party providers:
- Supabase — Database hosting and authentication (EU/US servers)
- LemonSqueezy — Payment processing (PCI DSS compliant)
- Google OAuth — Optional sign-in method (only email and name are accessed)
- Cloudflare — CDN and web hosting
- PostHog — Product analytics and session recording, EU servers (only with your consent)
- Sentry — Application error logging, servers in Germany (no personal data is sent)
- Resend — Transactional email delivery
4. Data Storage and Security
Your data is stored in Supabase cloud infrastructure with Row Level Security (RLS) enabled on all tables. All connections use HTTPS/TLS encryption.
We do not sell, rent or share your personal data with third parties for marketing purposes.
5. Your Rights
Under GDPR, LOPD and LGPD, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Export your data (portability)
- Withdraw consent at any time
To exercise any of these rights, contact us at admin@rollplanner.com.
6. Cookies
RollPlanner uses essential cookies to keep you signed in and, if you accept them in the initial notice, PostHog analytics cookies to understand how the app is used. We do not use advertising cookies and we do not share data with advertisers. You can decline analytics without losing any functionality.
7. Children's Privacy
Our service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us for removal.
8. Changes to This Policy
We may update this policy periodically. Changes will be posted on this page with an updated revision date. Continued use of the service constitutes acceptance.
9. Contact
For questions about this privacy policy: admin@rollplanner.com