Data Processing & Your Rights

This page adds GDPR detail to our privacy policy. Nümia is the legal business name and registered seller of the service, operates from Spain, and is the data controller. Contact: contact.numiaplanner@gmail.com.

Legal bases

Contract (Art. 6(1)(b)). Creating your account, storing and syncing your planner content, delivering paid features.

Legitimate interests (Art. 6(1)(f)). Keeping the service secure, preventing fraud and abuse, diagnosing faults, and improving the product.

Legal obligation (Art. 6(1)(c)). Tax, accounting and invoicing records for purchases.

Consent (Art. 6(1)(a)). Optional product update emails, and any optional feature you switch on. Withdraw at any time in Settings.

Retention

· Account and planner content: kept while your account is active.
· After account deletion: erased or anonymised within 30 days.
· Billing and tax records: kept as long as Spanish law requires.
· Security and error logs: typically up to 90 days.
· Support emails: up to 24 months after the conversation closes.

Sub-processors

· Hosting, database and authentication — stores your account and planner content.
· Transactional email — sends sign-in, verification, welcome and reminder emails from noreply@app.numiaplanner.com.
· Paddle.com — Merchant of Record; processes payment, billing, tax and invoicing data.
· AI provider — processes only the planner content you choose to send to Vera, solely to generate your answer. Your content is not used to train models.
· Push notification delivery — delivers reminders and alarms to devices you have opted in on.

Each sub-processor acts under contract and may process data only on our instructions.

International transfers

Some providers process data outside the EEA. Where they do, transfers are covered by an adequacy decision or by EU Standard Contractual Clauses with additional safeguards.

Automated decision-making

Vera makes suggestions; it never makes a decision with legal or similarly significant effects about you. You always confirm before a change is applied to your planner.

Exercising your rights

You may request access, rectification, erasure, restriction, objection, portability, or withdrawal of consent. Email contact.numiaplanner@gmail.com from your account address and we respond within one month. We may ask you to confirm your identity first.

Complaints

If you are in Spain you may complain to the Agencia Española de Protección de Datos (aepd.es). Elsewhere in the EEA or UK, contact your local supervisory authority.

Security

Encryption in transit and at rest, strict access controls, and row-level isolation so only you can read your planner. If a breach affects your data we notify the authority within 72 hours and you without undue delay where required.