osiedlo.app privacy policy

Who is responsible for your data

The controller of your data is the entity that runs osiedlo.app:

Binitive Karol Binkowski, jednoosobowa działalność gospodarcza (JDG), ul. Władysława Jagiełły 14 lok. 40, 32-020 Wieliczka, NIP 6832143687, kontakt: hello@osiedlo.app

What we collect and why

• Email address - to sign you in and contact you about the service. Basis: performance of the contract (art. 6(1)(b) GDPR).
• Name and Google id - if you sign in with Google. Used to run your account and sign you in.
• Session IP address and browser info (user-agent) - for security and to run the service. Basis: our legitimate interest (art. 6(1)(f) GDPR).
• Your interview answers - the free text you type or the options you pick, used to build your report. Basis: performance of the contract. Please do not enter personal data we do not need.
• Your own checklist notes - the items you add to the viewing checklist on your report. Basis: performance of the contract. Erased when you delete your account.
• Your words about the report - the sentences you type after rating your report, the signature you choose (first name and city, or city only) and the date of your consent. We may publish them on osiedlo.app. Basis: your consent (art. 6(1)(a) GDPR). You can withdraw it at any time on your report, in the same place where you give it. We then delete the words and the name and stop publishing them.
• Purchase data - needed to grant access and settle the purchase. Basis: performance of the contract and legal obligations (art. 6(1)(b) and (c) GDPR).
• Waitlist email - if you sign up to get one notification when we launch your city. Basis: your consent (art. 6(1)(a) GDPR). We keep it until that city launches or you withdraw your consent, then delete it. The controller is the entity named at the top of this page.
• City vote - the city name you type when you vote for the city we should add next. We save it with the vote even without your analytics consent: by casting the vote you agree to that name being saved. Without analytics consent we store only the city name, the page language and the time of the vote - no IP address, no cookie and no identifier of any kind, so that vote cannot be linked to you. With analytics consent the vote and the city name go to PostHog like the rest of the analytics data.

Who processes your data

We work with trusted providers who process data only on our instructions:

• Anthropic (USA) - the artificial intelligence provider that analyses your conversation and writes the report. This involves a transfer of data to the United States.
• Polar - handles payments and issues receipts and invoices.
• Resend - sends emails, such as your sign-in link.
• Cloudflare - hosting and protection of the service, plus Cloudflare Zaraz, which loads the analytics tools and asks you for cookie consent.
• Google (USA) - Google Analytics 4 (GA4): usage statistics for the service. This involves a transfer of data to the United States.
• Google Ads (USA) - measuring how our ads perform, plus audience lists. It runs only after your consent. This involves a transfer of data to the United States.
• PostHog - product analytics: how you use the service.
• Sentry (Functional Software, USA) - application error monitoring, so we catch failures quickly. It runs without consent under our legitimate interest (GDPR Art. 6(1)(f)): we report errors only, with data that could identify you stripped out (tokens in URLs, query parameters, form content) and no session recording. Session replay (with text, inputs and media masked) and performance monitoring are switched on only after you accept analytics. This involves a transfer of data to the United States.

Analytics and ad measurement (Google Analytics 4, PostHog and Google Ads) only run after your consent. We collect it through a cookie banner; your choice is remembered and applied to all analytics and advertising tools. You can change it at any time: the "Cookie settings" button in the site footer reopens the choice. Until you consent, PostHog runs in browser memory only and stores no durable cookie or identifier on your device - it starts remembering data across visits only once you accept.

When data leaves the European Economic Area (for example to the USA), we rely on the safeguards required by the GDPR, such as standard contractual clauses or an adequacy decision.

Cookies and similar technologies

Below we list every cookie and browser-storage entry we use. We write no cookie or entry of the analytics and advertising tools (Google Analytics 4, PostHog and Google Ads) until you consent; on refusal we run none of them. The other entries are written without asking for consent, but only when you use the feature they serve - the table says when for each one. A first visit already stores a copy of the site files in the browser cache and, when you arrive through a referral link, the osiedlo_ref cookie too, so that your discount can be applied at payment.

How long we keep data

• Account and session report - until you delete your account.
• Your own checklist notes - kept until you delete your account.
• Your words about the report - until you withdraw consent or delete your account. After a withdrawal only the dates of the consent and of the withdrawal stay, until you delete your account.
• Purchase data - for as long as the law, including tax law, requires.
• Technical data (IP address, user-agent) - briefly, for security.

Your rights

You have the right to access your data, and to its rectification, erasure, restriction, portability, and to object. You can withdraw any consent you gave at any time.

You can download a copy of your data and delete your account yourself on the Accountpage. You also have the right to complain to the Polish data protection authority (UODO).

Decisions and profiling

The report helps you decide - it does not decide for you. We do not make decisions that produce legal effects about you solely by automated means.

Contact

For any data-protection matter, write to the contact address in the controller details at the top of this page.