← Zpět na hlavní stránku

Zásady ochrany osobních údajů

Poslední aktualizace: August 27, 2026

1. Introduction

Welcome to EnergyForge (“we,” “our,” or “us”). We operate the website energyforge.app (the “Service”). This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

m2lisa trade s.r.o. (trading as EnergyForge)
ID No. 17664331
Karlovo náměstí 313/8, Nové Město, 120 00 Prague 2, Czech Republic
Email: support@energyforge.app
Website: https://energyforge.app

3. Information We Collect

We collect the following types of personal data:

a) Information you provide directly:

  • Answers to our 10-question energy diagnostic questionnaire (sleep patterns, lifestyle, nutrition, stress levels, etc.)
  • Email address (if you register or subscribe)
  • Payment information (processed securely via Stripe — we never store your card details)
  • Name and billing information (for the PRO plan)

b) Information collected automatically:

  • IP address, browser type, device information
  • Usage data (pages visited, time spent, clicks)
  • Cookies and similar tracking technologies

4. How We Use Your Data

We use your personal data to:

  • Generate personalized 30-day energy plans using AI (Anthropic Claude API)
  • Process payments via Stripe
  • Send you your personalized plan and related communications
  • Improve our Service and user experience
  • Comply with legal obligations
  • Prevent fraud and ensure security

5. Legal Basis for Processing (GDPR)

We process your data based on:

  • Consent — when you submit the diagnostic questionnaire
  • Contract performance — to deliver the service you purchased
  • Legitimate interest — to improve our Service and prevent fraud
  • Legal obligation — for accounting, tax, and legal compliance

6. AI Processing

Your questionnaire answers are processed by Anthropic's Claude AI to generate personalized recommendations. Anthropic processes this data according to their own privacy policy: https://www.anthropic.com/legal/privacy

We do not use your data to train AI models.

7. Data Sharing

We share your data only with:

  • Stripe — for payment processing (https://stripe.com/privacy)
  • Anthropic — for AI-generated recommendations
  • Vercel — our hosting provider (https://vercel.com/legal/privacy-policy)
  • Meta, Pinterest, PostHog, Sentry — analytics, advertising and error monitoring, as detailed in Section 10 (the first three only with your cookie consent)
  • Legal authorities — when required by law

We never sell your personal data.

8. Data Retention

We retain your data for as long as necessary to provide our Service and comply with legal obligations:

  • Questionnaire responses and generated plans: up to 2 years
  • Payment records: 7 years (required by EU tax law)
  • Email communications: until you unsubscribe + 2 years

9. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict processing of your data
  • Data portability — receive your data in a structured format
  • Object to processing
  • Withdraw consent at any time
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at: support@energyforge.app

10. Cookies, Analytics and Advertising Tools

Essential cookies (session/login, payment) are needed to run the Service and are always on. Everything below is optional: none of these tools is loaded, and no cookie is set by them, until you click "Accept" in the cookie banner. If you click "Decline" they stay off. You can change your choice at any time by clearing this site's data in your browser, which brings the banner back.

  • Meta Pixel (Meta Platforms Ireland Ltd.) — advertising: measures whether our Facebook/Instagram ads lead to quiz completions and purchases and helps us reach similar audiences. Sets the _fbp cookie (3 months) and may read _fbc. Data recipient: Meta, EU/US (EU–US Data Privacy Framework). Meta may use this data for its own purposes as described in https://www.facebook.com/privacy/policy.
  • Pinterest Tag (Pinterest Europe Ltd.) — advertising: measures Pinterest ad performance. Cookie _pin_unauth (1 year). Recipient: Pinterest, EU/US. https://policy.pinterest.com/privacy-policy
  • PostHog (PostHog Inc., EU cloud hosted in Frankfurt) — product analytics: which pages and quiz steps are used, where people drop off, whether a purchase completed. Cookie ph_*_posthog (1 year). We do not record session replays. Recipient: PostHog, EU. https://posthog.com/privacy
  • Vercel Analytics (Vercel Inc.) — anonymous page-view statistics from our hosting provider. Sets no cookies and stores no personal data; visitors are counted via a daily-rotating hash. Retention: aggregated statistics only. https://vercel.com/docs/analytics/privacy-policy
  • Sentry (Functional Software Inc.) — error monitoring: when something breaks we receive a technical report (page, browser, stack trace, truncated IP). Sets no cookies; this is a legitimate interest in keeping the Service working (Art. 6(1)(f) GDPR) and is not subject to the banner. Reports are kept for 90 days. Recipient: Sentry, EU/US. https://sentry.io/privacy/

Legal basis for Meta Pixel, Pinterest Tag and PostHog is your consent (Art. 6(1)(a) GDPR, § 89(3) of Czech Act No. 127/2005 Coll.). Withdrawing consent does not affect processing that happened before withdrawal.

11. Data Security

We implement industry-standard security measures to protect your data, including encryption (HTTPS), secure payment processing (Stripe), and limited access controls. However, no method of transmission over the Internet is 100% secure.

12. International Transfers

Your data may be transferred to and processed in countries outside the EU (e.g., United States, where Anthropic and Stripe operate). We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) and data processing agreements.

13. Children's Privacy

Our Service is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

14. Changes to This Policy

We may update this Privacy Policy. The latest version will always be posted on this page with an updated date.

15. Contact Us

For any questions about this Privacy Policy, contact: support@energyforge.app