Privacy policy

01Who is responsible?

Laurenz Harmony is the controller responsible for processing your personal data. Contact details are provided below.

02Your account and app content

Kompass stores your email address and login information, Goals, Milestones, Steps, progress and Journey images. We process these details to provide your account, save your plans and show your progress. Account information is needed to provide account-based features; you choose the content and images you add.

Processing necessary to provide the service is based on Article 6(1)(b) GDPR. Please avoid uploading sensitive information or images of other people without an appropriate legal basis. Goals and images can reveal sensitive information, including health details; additional safeguards and a valid basis under Article 9 GDPR are required where such information is processed.

03Supabase and the Frankfurt region

We use Supabase for the app’s backend. The database is hosted in Frankfurt, Germany. Supabase Pte. Ltd., Singapore, provides the platform, with affiliates and subprocessors involved in operating it.

The database region does not mean that every processing activity takes place in Germany. Supabase describes possible international processing for support, operations and content delivery, and standard contractual clauses in its data processing addendum. The applicable arrangements must be verified against the actual project configuration.

04This website and analytics

Kompass does not use analytics. This website does not include analytics scripts, tracking cookies or externally loaded fonts. Its fonts and screenshots are served with the website.

When the website is hosted, technical request data such as IP addresses, requested pages, browser information and timestamps may be processed to deliver and secure it. The hosting provider and actual logging and retention settings must be documented before publication. Necessary delivery and security processing is based on the legitimate interest in operating a reliable website under Article 6(1)(f) GDPR.

05When you contact us

If you email or call us, we process the contact details and information you provide to respond to your request. Requests concerning your use of Kompass are processed under Article 6(1)(b) GDPR; other enquiries are handled under Article 6(1)(f) GDPR based on our legitimate interest in responding. Email correspondence is received at the email address listed below.

06Retention and deletion

You can delete your data and your account directly in the app. Account and app content are retained while needed to provide your account, unless you delete them earlier. Information may need to be retained where a legal obligation or the establishment, exercise or defence of legal claims requires it.

Deleting an account is separate from the expiry of backup copies. The actual backup retention, technical log retention and image deletion process must be confirmed for the Supabase project before publication. Contact messages are retained only as long as needed to resolve the enquiry and meet applicable legal requirements.

07Your rights

Subject to the applicable legal conditions, you may request access, correction, erasure, restriction of processing and a portable copy of your data. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

You may object, on grounds relating to your particular situation, to processing based on legitimate interests under Article 6(1)(f) GDPR. Contact us using the details below to exercise your rights.

You may also complain to a supervisory authority, including the Hessian Commissioner for Data Protection and Freedom of Information, or the authority where you live, work or believe an infringement occurred.

08Children and young people

Kompass does not set its own minimum age. Applicable rules on legal capacity and parental authorisation still apply. Where processing relies on a child’s consent, the applicable data protection requirements must be met; in Germany, Article 8 GDPR generally requires parental authorisation for children under 16 in that situation.