Privacy Policy

Current version of the privacy policy is effective from 19.09.2025

1. General Information

1.1. This policy applies to the website operating at the URL: litcoach.pl and the Litcoach mobile application (hereinafter collectively referred to as the 'Service').

1.2. The operator of the service and the Data Controller is: Mikołaj Nogieć Development Bociana 4D/22, 31-231 Kraków

1.3. Contact email address of the operator: nogiecmikolaj@litcoach.pl

1.4. The Operator is the Controller of your personal data with respect to data voluntarily provided in the Service.

1.5. The Service uses personal data for the following purposes:

1.5.1. Newsletter management,

1.5.2. Online chat conversations,

1.5.3. Displaying user profiles to other users,

1.5.4. Booking management,

1.5.5. Handling inquiries via forms,

1.5.6. Presenting offers or information,

1.5.7. Posting ratings and reviews,

1.5.8. Sending email and push notifications,

1.5.9. Statistical analysis and reporting,

1.5.10. Personalization of content displayed to users,

1.5.11. Payment and billing processing,

1.5.12. Storing user booking history.

1.6. The Service collects information about users and their behavior in the following ways:

1.6.1. Through voluntarily entered data in forms, which are entered into the Operator’s systems,

1.6.2. Through saving cookies on end devices,

1.6.3. Through collecting location data of users, if they consent, to facilitate finding trainers nearby,

1.6.4. Through analyzing user activity in the service, such as viewing trainer profiles, making bookings, or leaving reviews, to tailor the application to their preferences,

1.6.5. Through server logs that store technical information such as user IP address, browser type, visit time, and visited subpages, for security and service quality improvement,

1.6.6. Through integration with external analytical and marketing tools that enable traffic analysis and adjustment of advertising content.

2. Selected Data Protection Methods Used by the Operator

2.1. Login and data entry areas are protected at the transmission layer (SSL certificate). Thanks to this, personal data and login details entered on the site are encrypted on the user's computer and can only be read on the target server.

2.2. Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. This protects the data in case the database is stolen from the server.

2.3. User passwords are stored in hashed form. Hashing functions are one-way – they cannot be reversed, which is the current standard for storing user passwords.

2.4. To protect data, the Operator regularly makes backups.

2.5. An important element of data protection is the regular updating of all software used by the Operator to process personal data, in particular regular updates of development components.

3. Hosting

3.1. The Service is hosted (technically maintained) on Railway servers

3.2. The hosting company ensures technical reliability by keeping server-level logs. These may include:

3.2.1. resources specified by a URL identifier (requested resources - pages, files),

3.2.2. time of the request,

3.2.3. time of the response,

3.2.4. client station name - identification via HTTP protocol,

3.2.5. information about errors that occurred during the HTTP transaction,

3.2.6. URL of the referring page if the Service was accessed via a link,

3.2.7. information about the user’s browser,

3.2.8. IP address information,

3.2.9. diagnostic information related to self-service ordering via forms on the website,

3.2.10. information related to email services directed to or sent by the Operator.

4. Your Rights and Additional Information on Data Usage

4.1. In some situations, the Controller has the right to transfer your personal data to other recipients if necessary to fulfill a contract with you or to meet legal obligations of the Controller. This applies to the following groups of recipients:

4.1.1. payment operators

4.2. Your personal data is processed by the Controller no longer than necessary to perform tasks specified by law (e.g., accounting). For marketing data, processing will not exceed 3 years.

4.3. You have the right to request from the Controller:

4.3.1. access to your personal data,

4.3.2. correction,

4.3.3. deletion,

4.3.4. restriction of processing,

4.3.5. and data portability.

4.4. You have the right to object to processing described in section 3.2 with respect to personal data processing for the Controller’s legitimate interests, including profiling. However, the right to object cannot be exercised if there are valid legal grounds for processing that override your interests, rights, and freedoms, in particular for establishing, pursuing, or defending claims.

4.5. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

4.6. Providing personal data is voluntary, but necessary to use the Service.

4.7. Automated decision-making, including profiling, may be carried out to provide services under the contract and for direct marketing by the Controller.

4.8. Personal data is not transferred to third countries outside the EU.

5. Processing Data for Marketing and Newsletter Purposes

5.1. User’s personal data may be processed for sending commercial and marketing information about Litcoach sp. z o.o., including newsletters, emails, and notifications in the app and on the website.

5.2. The legal basis for processing in this regard is the User’s consent (Art. 6(1)(a) GDPR).

5.3. Providing consent is voluntary and not a condition for using the Service.

5.4. Personal data will be processed until the User withdraws consent, but no longer than 3 years from the last marketing-related activity.

5.5. The Controller may use provided data for profiling to adjust marketing content to the User’s preferences, but no automated decisions with legal effects will be made.

5.6. Data recipients may include entities providing technical, IT, and marketing services to the Controller (e.g., mailing systems, analytics tools).

5.7. The User may withdraw consent for receiving marketing information at any time without affecting the lawfulness of prior processing. Consent can be withdrawn via the unsubscribe link in an email or by contacting the Controller at: nogiecmikolaj@litcoach.pl.

6. Voluntary Data Provision and Editing

6.1. Providing your personal data is voluntary but necessary for concluding and performing the contract, using the Litcoach service, and fulfilling the other purposes stated in this Privacy Policy.

6.2. You may check or edit your personal data at any time by logging into your Litcoach account, going to the 'Profile' tab, and then selecting the 'My Data' section.

7. Information in Forms

7.1. The Service collects information provided voluntarily by the user, including personal data if given.

7.2. The Service may save connection parameters (timestamp, IP address).

7.3. In some cases, the Service may save information linking form data with the user’s email address. In such cases, the user’s email may appear in the URL of the page containing the form.

7.4. Data provided in a form is processed for the function of that form, e.g., service request handling, business contact, or service registration. The context and description of each form clearly inform what it is used for.

8. Administrator Logs

8.1. Information on user activity in the service may be logged. This data is used for service administration, customizing content, layout, and system parameters to a specific device and user preferences, as well as collecting general demographic statistics such as connection region.

9. Important Marketing Techniques

9.1. The Operator uses statistical traffic analysis via Google Analytics (Google Inc., USA). The Operator does not provide personal data to Google, only anonymized information. The service uses cookies on the user’s device. Users can view and edit preferences collected by Google’s advertising network via: https://www.google.com/ads/preferences/

9.2. The Operator uses Facebook Pixel. This technology lets Facebook (Facebook Inc., USA) know that a registered person is using the Service. Facebook bases this on its own data, for which it is the controller. The Operator does not provide any additional personal data to Facebook. The service uses cookies on the user’s device.

10. Information on Cookies

10.1. The Service uses cookies.

10.2. Cookies are data files, usually text, stored on the User’s device, used for browsing the Service’s websites. Cookies typically contain the name of the website, the storage duration, and a unique identifier.

10.3. The entity placing and accessing cookies on the User’s device is the Service operator.

10.4. Cookies are used for the following purposes:

10.4.1. maintaining the Service user’s session (after login), so the user does not need to re-enter login and password on every page,

10.4.2. better tailoring services to users’ needs,

10.4.3. generating traffic statistics to ensure proper portal functioning,

10.4.4. achieving goals described above in the 'Important Marketing Techniques' section,

10.4.5. customizing content, layout, and system parameters to the user’s device and preferences,

10.4.6. collecting general demographic information such as connection region.

10.5. The Service uses four main types of cookies: 'session' and 'persistent'. Session cookies are temporary files stored until logout, leaving the site, or closing the browser. Persistent cookies remain stored on the user’s device for a defined period or until deleted. 'First-party cookies' are set by the Litcoach Service. 'Third-party cookies' are set by external companies (e.g., advertisers, analytics providers) cooperating with the site and app owner.

10.6. Most web browsers by default allow cookies storage. Service users can change their browser settings. Browsers also allow deleting cookies or automatically blocking them. More details can be found in browser help/documentation.

10.7. Cookie restrictions may affect some functionalities of the Service.

10.8. Cookies placed on the User’s device may also be used by third parties cooperating with the Service operator, in particular Google (USA), Facebook (USA), and X Corp. (USA).

11. Managing Cookies – How to Give and Withdraw Consent?

11.1. If a user does not wish to receive cookies, they can change their browser settings. Note that disabling cookies required for authentication, security, and user preference storage may hinder or, in extreme cases, prevent the use of websites.

11.2. Users can delete or block cookies by changing their browser settings. More details on changing settings, blocking, and filtering cookies are available at: http://www.aboutcookies.org/.

12. Final Provisions

12.1. The Administrator reserves the right to change the Privacy Policy. Users will be informed in advance of any such changes via notifications.

12.2. In matters not regulated by this Privacy Policy, applicable laws shall apply. In case of conflicts between this Privacy Policy and such laws, the laws shall prevail.

12.3. The Administrator will make every effort to promptly fulfill requests for changes, completion, or deletion of User data.

12.4. Any doubts or requests related to the Privacy Policy, including access to, deletion, or modification of User data, may be submitted to the Administrator via the contact details provided on the website and in the mobile application.