Legal
Privacy policy
Last updated June 5, 2026
This policy explains what Tymbre collects, why, who processes it, and the control you have over it. Tymbre is an iOS app operated by salecki.digital.
01 Who we are
The data controller is salecki.digital (Sole trader registered in Poland), owned by Mikołaj Salecki.
- ul. Gen. Jasińskiego 11/51, 05-500 Piaseczno, Poland
- NIP 1231052003 · REGON 361948200
- Email hi@salecki.digital
- Phone +48 780 607 707
02 Scope and consent
This policy covers the Tymbre iOS app and the tymbre.app website. By creating an account and using Tymbre, you acknowledge this policy. Where we rely on your consent, you can withdraw it at any time without affecting processing that already took place.
03 Data we collect
- Account data. Your email, display name, and an optional profile photo. If you use Sign in with Apple, the identifier Apple gives us and the email you choose to share, which may be Apple’s private relay address.
- Content you submit. The audio and video recordings of your practice sessions, and any slide PDFs you upload.
- Analysis we generate. Transcripts, CLEAR scores, somatic suggestions, strengths, and other metrics derived from your recordings.
- Subscription data. Your tier and purchase or renewal status, through Apple and RevenueCat. We never see or store your card details.
- Usage and diagnostics. How the app is used, plus crash and performance data, to keep it working.
We do not use advertising identifiers and we do not track you across other apps or websites.
04 How we use it
We process your data for the purposes below, each on the legal basis stated under the GDPR.
| Purpose | Legal basis |
|---|---|
| Deliver the coaching analysis and run your account | Performance of our contract (Art. 6(1)(b)) |
| Manage subscriptions and meet tax and accounting duties | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Keep the app secure, reliable, and free of abuse | Legitimate interest (Art. 6(1)(f)) |
| Improve the product using aggregated usage | Legitimate interest (Art. 6(1)(f)) |
| Optional emails you opt into | Consent (Art. 6(1)(a)) |
05 AI analysis of your recordings
To produce your transcript and scores, the recordings you submit, and any slide deck you attach, are processed by a specialist third-party AI provider on our behalf. This is the core service you ask for. The analysis is automated, but it does not make decisions that have legal or similarly significant effects on you. It is feedback, returned to you.
We do not sell your recordings, and we do not use them to train our own models. Our AI provider processes them only to return your results, under a data processing agreement and its own terms.
06 Who processes it
We rely on a small set of processors. Each handles only what its purpose requires.
| Processor | Purpose | Location |
|---|---|---|
| salecki.digital (Appwrite on Hetzner) | Accounts, app data, backend logic | Germany (EU) |
| Cloudflare R2 | Encrypted storage of recordings, exports, avatars | EU (Western Europe) |
| Cloudflare | DNS and CDN for the website | Global edge |
| Specialist AI provider | AI analysis of the recordings you submit | EU / US |
| RevenueCat | Subscription management and receipt validation | United States |
| Apple | App distribution, in-app purchases, Sign in with Apple | Global |
| Sentry | Crash and performance diagnostics | Germany (EU) |
| Resend | Transactional and account email | EU |
07 International transfers
Your data is primarily processed on EU infrastructure. Where a processor operates outside the European Economic Area, such as Apple or RevenueCat in the United States, transfers are covered by appropriate safeguards: the European Commission’s Standard Contractual Clauses, and adequacy mechanisms such as the EU-US Data Privacy Framework where the processor is certified.
08 How long we keep it
| Data | Retention |
|---|---|
| Raw recordings | Deleted automatically after your tier window: 3 days (Solo), 14 days (Speaker), 30 days (Master) |
| Analysis (scores, suggestions, transcripts) | Until you delete it or close your account |
| Account data | While your account is active, removed when you delete it |
| Data exports | Temporary, purged automatically after the download link expires |
| Diagnostics | A limited period at our diagnostics processor |
09 Security
Data is encrypted in transit with TLS and at rest in our EU storage. Backend functions are authenticated and scoped, recordings sit in a private bucket reached only through short-lived signed URLs, and we store no payment card data. No system is perfectly secure, but we keep our footprint small and our access tight.
10 Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Erase your data (the right to be forgotten).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing relies on it.
If you are a California resident, the CCPA gives you the right to know what we collect, to request deletion, and to not be discriminated against for exercising those rights. We do not sell your personal information.
11 Exercising your rights
The fastest route is built into the app. Open Profile, then export your data or delete your account, which removes your recordings, analysis, and account in one step. You can also email hi@salecki.digital and we will action your request.
13 Children
Tymbre is not directed to children under 16, and we do not knowingly collect their data.
14 Complaints
You have the right to lodge a complaint with a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw. We would always prefer you tell us first, so we can put things right.
15 Changes
If this policy changes in a meaningful way, we will update the date at the top and, where appropriate, notify you in the app.
16 Contact
Questions about your data or this policy: hi@salecki.digital. General app support: hi@tymbre.app.