Data protection

Controller

The controller for processing on this website is:

[Name / company]
[Street, postcode, city]
Email: info@failfee.app

Purposes of processing

We process data to:

• Create and maintain your account (email sign-in or social login).
• Run accountability contracts: title, description, deadline, stake, and status.
• Authorize, release, or capture a Stripe card hold for the stake you choose.
• Receive and review proof (photo evidence and, if you connect it, Strava activity for a goal).
• Send essential email (sign-in links and contract outcomes).
• Answer support requests sent to us.

Optional product-update email is only sent if you have not opted out in settings.

Legal bases

• Art. 6(1)(b) GDPR — processing needed to perform the contract you request (account, contract, hold, proof, outcome email).
• Art. 6(1)(f) GDPR — legitimate interests such as securing the service, preventing abuse, and reviewing ambiguous proof.
• Payment processing with Stripe is necessary to place and settle the authorization hold you request.

Recipients and processors

We use service providers who process data on our behalf or as independent controllers where the law treats them that way:

• Stripe — authorization holds and capture or release of the stake.
• Resend — transactional email.
• Prisma Postgres — account, session, and contract data.
• Amazon S3 — stored proof photos.
• OpenAI — automated vision review of proof photos, when that feature is enabled.
• Google / Apple — sign-in, only if you use that provider.
• Strava — activity data for a Strava-backed goal, only if you connect Strava.

We do not sell your personal data. Public board rows, if you opt in, are anonymized (category, stake band, time left) and do not show your title, email, or photo.

Retention

We keep account and contract records for as long as needed to operate the service, resolve holds, and meet legal obligations (for example payment records). Proof photos are stored to review and document a contract. You can ask us to delete your account; some records may be retained where we must keep them for tax, dispute, or security reasons.

Cookies and sessions

We use a session cookie (and short-lived cookies for social login state) so you stay signed in and complete OAuth securely. We do not run advertising pixels or extra analytics trackers on the product beyond what is required to run the site.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, data portability, and objection to processing based on legitimate interests. To exercise these rights, email info@failfee.app.

You may lodge a complaint with a supervisory authority. In Germany that includes the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your state data-protection authority.