Legal
Privacy policy
Last updated August 20, 2026
This policy explains what Tymbre collects, why, who processes it, and the control you have over it. Tymbre is an iOS app operated by salecki.digital.
01 Who we are
The data controller is salecki.digital (Sole trader registered in Poland), owned by Mikołaj Salecki.
- ul. Gen. Jasińskiego 11/51, 05-500 Piaseczno, Poland
- NIP 1231052003 · REGON 361948200
- Email hi@salecki.digital
- Phone +48 780 607 707
02 Scope and consent
This policy covers the Tymbre iOS app and the tymbre.app website. By creating an account and using Tymbre, you acknowledge this policy. Where we rely on your consent, you can withdraw it at any time without affecting processing that already took place.
Optional Google Analytics remains off until you make a choice in the app. Declining does not limit Tymbre. You can change the choice at any time under Profile → Privacy and security.
03 Data we collect
- Account data. Your email, display name, and an optional profile photo. If you use Sign in with Apple, the identifier Apple gives us and the email you choose to share, which may be Apple's private relay address.
- Content you submit. The audio and video recordings of your practice sessions, and any slide PDFs you upload.
- Analysis we generate. Transcripts, CLEAR scores, coaching suggestions, strengths, and other metrics derived from your recordings. In Frame and Stage sessions this includes observations about visible head direction, hand gestures, body movement, framing, and use of the surrounding space. These observations are linked to the session in your account and are used only to provide Tymbre's coaching features.
- Subscription data. Your tier and purchase or renewal status, through Apple and RevenueCat. We never see or store your card details.
- Apple Ads attribution. If Apple attributes your download to one of our App Store ads, Apple provides standard campaign, ad group, and keyword identifiers to RevenueCat so we can measure our own campaigns. We do not request access to the advertising identifier or detailed tracking data.
- Diagnostics. Crash reports, slow-start timing, and limited app-state or action context attached to an error, to keep the app working. Account, session, device, and email identifiers are removed before a diagnostic event leaves the phone.
- Optional app analytics. If you allow it, Google Analytics receives a random app-instance identifier, app lifecycle and session events, the Tymbre screens and features used, app version, device and operating-system information, language, and approximate location derived from the connection IP address. Google states that it discards the IP address before the Analytics event is logged. StoreKit may also report product, price, purchase, and subscription events. We do not set a Google Analytics user ID or send your account details, recording or session identifiers, titles, transcripts, scores, files, URLs, or raw error messages.
- Website forms. The email and consent record you submit for the optional newsletter, and the name, email, topic, and message you submit when asking support for help.
We do not use advertising identifiers and we do not track you across other apps or websites.
04 How we use it
We process your data for the purposes below, each on the legal basis stated under the GDPR.
| Purpose | Legal basis |
|---|---|
| Deliver the coaching analysis and run your account | Performance of our contract (Art. 6(1)(b)) |
| Manage subscriptions and meet tax and accounting duties | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Keep the app secure, reliable, and free of abuse | Legitimate interest (Art. 6(1)(f)) |
| Optional app usage analytics | Your consent (Art. 6(1)(a) GDPR and Art. 399 PKE) |
| Measure the effectiveness of our own Apple Ads campaigns | Legitimate interest (Art. 6(1)(f)) |
| Answer support requests you send us | Contract or steps at your request, and legitimate interest in customer support (Art. 6(1)(b), (f)) |
| Optional emails you opt into | Consent (Art. 6(1)(a)) |
05 AI analysis of your recordings
To produce your transcript and scores, the recordings you submit, and any slide deck you attach, are processed by a specialist third-party AI provider on our behalf. This is the core service you ask for. The analysis is automated, but it does not make decisions that have legal or similarly significant effects on you. It is feedback, returned to you.
We do not sell your recordings or use them to train our own models. Model inputs are copied to a private, temporary Google Cloud Storage bucket in the European Union and processed through Vertex AI's EU multi-region endpoint. We delete each temporary object after the analysis. Soft delete and explicit context caching are not enabled, and an automatic one-day lifecycle rule covers interrupted jobs.
Google states that it does not use customer data to train its models without permission. Its automated abuse controls may retain a flagged prompt for up to 90 days in the same selected EU region. We do not use search grounding, stored interactions, or request-response logging. Vertex AI may apply short-lived in-memory caching as part of operating the service under Google's data-use terms.
06 Who processes it
We rely on a small set of processors. Each handles only what its purpose requires.
| Processor | Purpose | Location |
|---|---|---|
| salecki.digital (API and PostgreSQL on OVHcloud) | Accounts, app data, backend logic | Poland (EU) |
| salecki.digital (GlitchTip on OVHcloud) | Crash and error diagnostics, self-hosted on our own server | Poland (EU) |
| stats.kehai.io | Cookieless website page-view, engagement-time, and named-event statistics without a persistent visitor identifier | Cloudflare global edge |
| Google Analytics | Optional app usage statistics, enabled only after your choice | Global, including the United States |
| OVHcloud Object Storage | Private storage of recordings, slide decks, exports, and avatars | Warsaw, Poland (EU) |
| Cloudflare | DNS, CDN, and security proxy for the website and API | Global edge |
| Google Cloud (Vertex AI and temporary Cloud Storage) | Regional AI analysis of the recordings and slide decks you submit | European Union |
| RevenueCat | Subscription management, receipt validation, and standard Apple Ads campaign attribution | United States |
| Apple | App distribution, in-app purchases, Sign in with Apple | Global |
| Resend | Account, support, export, and opt-in newsletter email | United States |
07 International transfers
Our core account database, durable media storage, and AI model inputs are processed on EU infrastructure. Some related account and optional analytics services operate globally or outside the European Economic Area, including Apple, Google Analytics, RevenueCat, Resend, and Cloudflare. Where personal data is transferred outside the EEA, the transfer is covered by appropriate safeguards, including the European Commission's Standard Contractual Clauses and adequacy mechanisms such as the EU-US Data Privacy Framework where the processor is certified.
08 How long we keep it
| Data | Retention |
|---|---|
| Raw recordings | Deleted automatically after your plan window: 7 days (Solo, the free week included), 14 days (Speaker), 30 days (Master) |
| Slide decks you attach | Deleted with the recording of the same session, on the same plan window |
| PDF reports you export | Deleted with the recording of the same session, on the same plan window. You can export the report again from the analysis, which stays |
| Temporary Vertex AI input copies | Deleted after each analysis; an automatic one-day lifecycle is the fallback if a worker stops unexpectedly |
| Google abuse-monitoring prompt logs | Only when automated controls flag a request; up to 90 days in the selected EU region under Google's published policy |
| Analysis (scores, suggestions, transcripts) | Until you delete it or close your account |
| Account data | While your account is active, removed when you delete it |
| Data exports | Temporary, purged automatically after the download link expires |
| Newsletter address and consent record | Until you unsubscribe or withdraw consent |
| Support correspondence | For as long as needed to answer and document the request, then deleted when it is no longer needed |
| Diagnostics | 30 days in our self-hosted diagnostics system |
| Google Analytics user-level and event-level data | No longer than 14 months under Google Analytics retention controls; standard aggregated reports may remain available for longer. Collection stops immediately after withdrawal and the app resets its local analytics instance identifier. |
09 Security
Data is encrypted in transit with TLS and at rest in our EU storage. Backend services are authenticated and scoped, recordings sit in a private bucket reached only through short-lived signed URLs, and we store no payment card data. No system is perfectly secure, but we keep our footprint small and our access tight.
10 Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Erase your data (the right to be forgotten).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing relies on it.
If you are a California resident, the CCPA gives you the right to know what we collect, to request deletion, and to not be discriminated against for exercising those rights. We do not sell your personal information.
11 Exercising your rights
The fastest route is built into the app. Open Profile, then export your data or delete your account, which removes your recordings, analysis, and account in one step. You can also email hi@salecki.digital and we will action your request.
The same screen contains the usage analytics switch. Turning it off stops future Google Analytics collection and resets the analytics instance identifier stored by the app. This does not retroactively remove information already included in historical aggregate reports.
13 Children
Tymbre is not directed to children under 16, and we do not knowingly collect their data.
14 Complaints
You have the right to lodge a complaint with a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw. We would always prefer you tell us first, so we can put things right.
15 Changes
If this policy changes in a meaningful way, we will update the date at the top and, where appropriate, notify you in the app.
16 Contact
Questions about your data or this policy: hi@salecki.digital. General app support: hi@tymbre.app.