Privacy notice

Last updated: 2026-11-11

Who is responsible

Contenza K/S, Holmgade 8, 6430 Nordborg, Denmark (CVR 43349023) is the data controller for the personal data described here. You can contact us through the help form in your account after you log in, or by post to the address above.

What we never ask

We never ask who the person you support is, what illness they have or how they are. The app can ask, if you like, who you are to them (partner, child, parent, brother or sister, friend) to put the right situations first; that choice is stored on your device only and never sent to us.

Which guide you buy or read can still say something about the health of someone close to you. We treat purchase and reading data as sensitive: we use it only to give you the guide, we don't use it for marketing, our emails name only the guide you bought, and our visitor statistics are anonymous and never linked to your account.

What we store

• Your email address, to log you in and send login links, receipts and answers to your messages.
• Your language and, if you opt in, your choice to receive a weekly email with that week's "try this". That email names the guide's topic; you can stop it at any time.
• What you have opened and marked as done in a guide, so you can pick up where you left off.
• Purchases: which guide and tier, when, the amount and your billing country (for VAT). Card details go to Stripe and never reach us.
• Family logins: the login codes are stored in a form we can't read back. If you send an invitation from the app, the relative's email address is used only to send it; we don't store it (our email provider keeps a short delivery log). Gift codes are stored so that you can see yours in your account.
• Share links: the link, the note you gave it (for example "for Mum") and whether it is still active. People who open a share link don't need an account, and we store nothing about them.
• Messages you send through the help form and errors you report. The error form asks for no personal or health details.

Why, and on what legal basis

To provide the guides you use and buy (contract), to keep accounting records (legal obligation), to keep the service secure and prevent abuse, for example by limiting how many login links can be requested (legitimate interests), and to send the weekly email if you asked for it (consent, which you can withdraw at any time). We do not sell your data and we do not use advertising trackers. We make no decisions about you based solely on automated processing.

Which guide you buy or read can reveal something about someone's health, so we treat it as health data (GDPR article 9) and process it only with your explicit consent. We ask for it separately when you create an account and at checkout; without it we can't give you a guide. You can withdraw it at any time in your account: we then delete your reading progress and close the account. The purchase record we must keep for accounting is kept for that purpose only, for as long as the law requires.

Who processes data for us

• Hetzner Online (Germany): servers in the EU for the website, the guides and the database.
• Stripe: payments. For some payment data Stripe is itself responsible under its own privacy policy.
• Resend (EU region), with Mailgun (EU) as a backup: sending emails.

Our visitor statistics run on a server we control. Where a provider may access data from outside the EU/EEA (Stripe, Resend), the transfer is covered by the EU–US Data Privacy Framework or the EU standard contractual clauses.

Cookies and statistics

We use one essential cookie that keeps you logged in, and one that holds the language you chose in the menu (two letters, nothing else). Your browser also remembers your language and the personal choices described above. To count visits we use Plausible Analytics on our own server in the EU: it uses no cookies, does not follow you across websites and stores no personal data, only anonymous totals. That is why there is no cookie banner.

How long we keep data

Account data, including your progress and messages, for as long as your account exists; you can ask us to delete it at any time. Purchase records for 5 years from the end of the financial year, as the Danish Bookkeeping Act requires. Login links expire after 30 minutes, and a login lasts 60 days.

Your rights

You can ask for a copy of your data, and for it to be corrected, deleted or restricted; you can object to processing based on legitimate interests and ask for your data in a portable format. Write to us through the help form in your account after you log in, or by post to the address above. We answer within one month. You can also complain to a data protection authority: in Denmark, Datatilsynet (datatilsynet.dk), or the authority in the country where you live.