Your GDPR Rights

If you are a resident of the European Union, UK, or another jurisdiction with similar data protection laws, you have the following rights. This page explains how to exercise them.

1. Right to Access (Data Portability)

You have the right to obtain a copy of all personal data Zovik holds about you in a machine-readable format.

How to exercise this right:

  1. Log in to your Zovik account
  2. Go to /settings/account → Account Settings
  3. Click Download My Data
  4. A JSON file will download with all your data

Response time: Within 30 days (we aim for 24 hours)

2. Right to Rectification

If your personal data is inaccurate or incomplete, you can request correction or update it yourself.

How to exercise this right:

  1. Log in to Zovik
  2. Go to /settings/profile
  3. Update your profile (name, email, bio, etc.)
  4. Changes are saved immediately

If you cannot self-correct or need Zovik's help, email privacy@zovik.com

3. Right to Erasure ("Right to Be Forgotten")

You can request deletion of all your personal data and account.

How to exercise this right:

  1. Log in to Zovik
  2. Go to /settings/account → Account Settings
  3. Click Request Account Deletion
  4. Confirm your request (cannot be undone)
  5. Our team will review and permanently delete your data within 24-48 hours

⚠️ Warning: This is irreversible. All tasks, goals, and personal data will be permanently deleted.

4. Right to Restrict Processing

You can request that Zovik limit how it processes your data (e.g., no AI analysis while under review).

How to exercise this right:

Email privacy@zovik.com with:

  • Your account email
  • Specific processing you want to restrict
  • Your reason (optional)

Response time: Within 30 days

5. Right to Data Portability

You have the right to receive your data in a structured, commonly-used format and transmit it to another service.

How to exercise this right:

  1. Use the Download My Data feature (same as Right to Access)
  2. Data is provided as JSON (machine-readable)
  3. You can import this into another service

Zovik will assist with format conversion if needed. Email privacy@zovik.com

6. Right to Object

You can object to processing of your data for certain purposes (e.g., marketing, profiling).

What applies to Zovik:

  • Marketing emails: Zovik does not send marketing emails
  • AI processing: You can opt out of AI features in /settings/privacy
  • Usage tracking: Non-essential event tracking can be disabled

To object to any processing, email privacy@zovik.com

7. Right to Withdraw Consent

If you consented to process your data, you can withdraw that consent at any time.

What you can control:

  • AI features: Disable in /settings/privacy
  • Error tracking: Disable Sentry in /settings/privacy
  • Usage analytics: Opt out in /settings/privacy

Withdrawal takes effect immediately.

8. Right to Lodge a Complaint

If you believe your rights are violated, you can file a complaint with your local data protection authority.

Before filing a complaint, please contact us first:

privacy@zovik.com

We aim to resolve issues within 30 days. If unsatisfied, you can file a complaint with your national data protection authority:

9. Exercising Your Rights

For any of the rights above, you can:

  1. Self-serve (fastest): Use the account settings in the app (download data, disable features, delete account)
  2. Contact us: Email privacy@zovik.com with your request
  3. Legal verification: We may ask for ID to verify your identity (standard GDPR practice)

Response time: 30 days maximum (we aim for 24 hours for data export requests)

10. Data Protection Officer

Zovik does not currently employ a dedicated DPO, but we take data protection seriously.

For data protection inquiries:

privacy@zovik.com

11. International Data Transfers

Your data is stored in Supabase (US servers). By using Zovik, you consent to data processing in the US, which may have different data protection laws than your home country.

We rely on Standard Contractual Clauses (SCCs) with our data processor (Supabase) to ensure adequate protection.

12. Data Retention After Deletion

When you delete your account:

  • Immediately: All tasks, goals, habits, notes deleted
  • Within 7 days: Profile data deleted
  • Within 30 days: Backup snapshots purged
  • Never: We do not keep deleted data for marketing or secondary purposes

Summary: Your Zovik Privacy Controls

RightHow to ExerciseTime
Access/settings → Download Data24h
Rectification/settings/profile → EditInstant
Erasure/settings → Delete Account24-48h
RestrictionEmail privacy@zovik.com30 days
Portability/settings → Download Data24h

Questions? Email privacy@zovik.com or see our Privacy Policy