Privacy policy

1. Controller

The data controller is budevolno.cz s.r.o., company ID 29810701, Bílov 159, 743 01 Bílov. Contact for anything about your data: hello@suiso.app.

2. What data we process

Account data: email, name (if you fill it in or Google sends it), your Google account identifier when signing in with Google, the date and version of your consent to the terms, app language.

Journal content: tanks and their parameters, entries, water tests, tasks, routines, equipment, plants and livestock, notes, photos and captions, questions to the Advisor and its answers.

Technical data: the sign-in cookie and server request logs (IP address, time, browser) at the hosting provider for the time necessary for security and operation.

Optionally: a push notification address (only when you turn reminders on), an Instagram access token (only when you connect the account – stored encrypted).

We collect no analytics or advertising data and use no tracking cookies.

3. Why and on what basis

Running the account and journal – performance of a contract (Art. 6(1)(b) GDPR).

Security, abuse prevention, server logs – the operator’s legitimate interest (Art. 6(1)(f)).

Push reminders, Instagram connection, the public tank page – your consent expressed by turning the feature on (Art. 6(1)(a)); you can turn it off at any time.

Advisor (AI) – performance of the contract for accounts it is enabled for; tank data and photos are sent to the model provider only when you ask a question or have the daily insight and weekly summary enabled.

4. Who processes data on our behalf

• Supabase, Inc. – database, sign-in and photo storage (servers in the European Union).
• Vercel, Inc. – hosting and operation of the app.
• Anthropic, PBC – the Advisor’s language model; receives tank context and photos only for accounts with the Advisor enabled and only while processing a request.
• Google LLC – sign-in with Google, if you use it.
• Meta Platforms – Instagram, only if you connect the account and share a post.
• Push notification providers (Apple, Google, Mozilla) – delivery of reminders, if you turn them on.

Vercel and Anthropic are based in the USA; transfers are covered by the EU standard contractual clauses or the EU–US Data Privacy Framework. We never sell data.

5. How long

For as long as the account exists. After deletion the data is removed immediately and from provider backups within 30 days. Server logs are deleted automatically within days.

The public tank page disappears as soon as you turn it off or delete the account. Posts you have already shared to Instagram are managed by Instagram.

6. Your rights

• access to your data and a copy of it – the CSV and photo ZIP export is in Profile,
• rectification – you edit everything directly in the app,
• erasure – delete the account in Profile or on request,
• restriction of processing, portability and objection to processing based on legitimate interest,
• withdrawal of consent – by turning the feature off,
• a complaint to the Czech Office for Personal Data Protection (uoou.gov.cz).

Send requests to hello@suiso.app; we reply within 30 days.

7. Cookies and security

We use only essential cookies: sign-in (session) and the chosen language. No marketing or analytics cookies, hence no cookie banner.

The connection is encrypted (HTTPS), photos are stored in private storage and accessed with signed links of limited validity. Database data is protected by row-level permissions – each account sees only its own.

8. Changes

When processing changes we update this policy and the effective date above. We announce material changes in the app.