This Privacy Policy (“Policy”) explains how personal data is collected, used, stored, and protected when you use deekha.com and Deekha applications, including Deekha Strum, Deekha Bridge, Deekha Read, Deekha ZZZ, and related services (collectively, the “Services”).
The data controller is Dominik Malý, operating as Deekha (“Deekha”, “we”, “us”, or “our”). We build calm, human-first software and apply the same respect to your personal data.
This Policy is intended to meet the transparency requirements of the EU General Data Protection Regulation (GDPR), the Czech Act No. 110/2019 Coll. on Personal Data Processing, and other applicable data protection laws.
1. Who is responsible for your data
Data controller:
Dominik Malý, operating as Deekha
Country of operation: Czech Republic
Email: hello@deekha.com
Website: https://deekha.com
We do not currently appoint a separate Data Protection Officer. For all privacy matters, contact us at hello@deekha.com.
2. What data we collect and why
Account and authentication data
- Email address, display name, and password hash when you create an account or sign in.
- Authentication tokens and session identifiers needed to keep you logged in securely.
- Purpose: provide account access, sync your data across devices, and secure the Services.
- Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and, where applicable, legitimate interest in securing our systems (Art. 6(1)(f)).
App content and usage data
- Content you create in our apps — for example practice sessions (Deekha Strum), reading progress (Deekha Read), integration payloads (Deekha Bridge), or sleep routines (Deekha ZZZ).
- In-app settings, preferences, and feature usage needed to operate the product you use.
- Purpose: provide the core functionality of each app and sync your experience where enabled.
- Legal basis: performance of a contract (Art. 6(1)(b)) and, for optional features, your consent where required (Art. 6(1)(a)).
Subscription and purchase data
- Purchase confirmations, subscription status, product identifiers, and entitlement records.
- We do not store full payment card numbers. Payments are processed by Apple App Store, Google Play, or other authorized payment providers.
- Purpose: unlock paid features, manage subscriptions, handle billing support, and comply with tax or accounting obligations.
- Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation where applicable (Art. 6(1)(c)).
Support and communications
- Messages, feedback, and support requests you send to hello@deekha.com or through in-app support channels.
- Purpose: respond to you, improve the Services, and resolve issues.
- Legal basis: legitimate interest (Art. 6(1)(f)) and, where applicable, performance of a contract (Art. 6(1)(b)).
Website and technical data
- Essential cookies and local storage used to remember your cookie consent choice and keep the website secure.
- Optional analytics data (only if you accept analytics cookies), such as pages visited, referral source, device type, and aggregated performance metrics via Vercel Analytics and Speed Insights.
- Server logs, IP address, browser type, and security events needed to protect against abuse.
- Anonymous iOS interest counters when you vote for an iOS release on a download page (no account required).
- Purpose: operate the website, measure aggregated usage with consent, maintain security, and understand product interest.
- Legal basis: consent for non-essential cookies and analytics (Art. 6(1)(a)); legitimate interest for security and essential operation (Art. 6(1)(f)).
Third-party sign-in
If you sign in with Apple, Google, or another provider, we receive only the profile information that provider allows and that you authorize (typically name and email).
Legal basis: performance of a contract (Art. 6(1)(b)) and your initiation of the sign-in flow.
4. How we use personal data
We do not sell your personal data. We do not use your private app content for advertising profiling. We do not run social comparison feeds inside Deekha products.
- Provide, operate, maintain, and improve the Services.
- Create and manage user accounts, logins, and cloud sync.
- Process subscriptions, purchases, and freemium entitlements.
- Respond to support requests and communicate important service updates.
- Monitor security, prevent fraud, and enforce our Terms of Service.
- Understand aggregated usage patterns to improve product design.
- Comply with legal obligations and protect our rights and users.
5. App-specific notes
Deekha Strum
Practice session data may be stored locally on your device and, when you use account or sync features, on our database infrastructure (including Supabase). Data is used solely to provide practice tracking and related features.
Deekha Read
Reading progress, library entries, and account data may be stored locally and in our cloud database when sync or account features are enabled. Deekha Read is available on Google Play; iOS availability may be offered later.
Deekha Bridge
Bridge may process connection data, QR payloads, or shared canvas content you explicitly choose to transmit between devices or through our web fallback endpoints. We do not use this data for unrelated purposes.
Deekha ZZZ
When released, Deekha ZZZ will follow this Policy. Beta or preview releases may include additional in-app notices.
7. How long we keep your data
We retain personal data only for as long as necessary for the purposes described above, unless a longer period is required by law.
- Account data: for as long as your account is active, then deleted or anonymized within 30 days of confirmed account deletion, except where law requires longer retention.
- App content linked to an account: deleted with the account, subject to backup cycles of up to 30 days.
- Local-only app data on your device: remains until you delete it in the app or uninstall the application.
- Purchase and entitlement records: retained for the life of the subscription or entitlement, then up to 6 years where needed for accounting, tax, or dispute resolution.
- Support emails: up to 24 months after the request is resolved, unless needed longer for an open dispute.
- Security logs: typically up to 90 days.
- Cookie consent records: up to 12 months.
- Optional analytics data: in aggregated form, typically up to 24 months.
- Anonymous iOS interest counters: retained indefinitely in aggregate form only, without personal identifiers.
8. Security
We implement technical and organizational measures designed to protect personal data, including encryption in transit (TLS/HTTPS) and, where applicable, encryption at rest on our infrastructure. Access to production systems is limited to what is necessary to operate the Services.
No method of transmission or storage is completely secure. If you believe your account has been compromised, contact hello@deekha.com immediately.
9. Your rights
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data in certain circumstances.
- Restriction — ask us to limit processing in certain cases.
- Portability — receive your data in a structured, commonly used format where applicable.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
- Lodge a complaint with a supervisory authority.
To exercise your rights, email hello@deekha.com. We will respond within one month, or inform you if an extension is required under GDPR.
If you are in the Czech Republic, you may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ): https://www.uoou.cz
10. International transfers
Some of our service providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms required by applicable law.
11. Children’s privacy
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact hello@deekha.com and we will take steps to delete it.
12. Changes to this Policy
We may update this Policy from time to time. We will post the current version at deekha.com/privacy and revise the “Last updated” date. Material changes may be communicated through the Services or by email where appropriate.
13. Contact
Questions about this Privacy Policy or our data practices:
Dominik Malý · Deekha
Email: hello@deekha.com
Website: https://deekha.com