Privacy policy
In short: we only want your email. We send you a welcome email with an invitation to test the app and a launch announcement. We sell nothing and share nothing for advertising. You can withdraw your consent at any time.
Who processes your data
The controller is Michael Petrík, company ID (IČO) 87689430, náměstí T. G. Masaryka 23, 468 51 Smržovka, Czech Republic. A sole trader registered in the Czech Trade Register.
Contact for anything about your data: support@ryly.app.
What we process and why
- Email, site language, sign-up time. To send you a welcome email with an invitation to test the mobile app and one announcement when Ryly launches. Legal basis: your consent (Art. 6(1)(a) GDPR and Section 7 of Czech Act No. 480/2004 Coll.), given by submitting the form.
- Test invitation. If you join testing, we pass your email to the platform we distribute test builds through (see recipients below). The invitation can't be sent otherwise.
- Bot protection. When you click into the email field, Google reCAPTCHA Enterprise loads. It evaluates technical data about your browser and device (including IP address) and may set a cookie. Legal basis: legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR).
- Operation and errors. Hosting logs technical request data (such as IP address). When the site breaks, a technical report and a short recording of the page are stored; form field contents never are. Legal basis: legitimate interest in a secure, working site.
- Visits. Measured with our own Umami instance, without cookies and without identifying visitors.
Giving your email is voluntary. Without it we just can't invite you. There is no automated decision-making or profiling.
How we protect your email
Your email is encrypted in your browser (RSA-3072) before it is sent to the database. Neither the storage nor the backups can read it. Only the controller can decrypt it, and only to send the messages.
Who receives your data
Only processors that run the service for us, and only as much as needed:
- Google (Firebase / Firestore, reCAPTCHA Enterprise) – database in the EU (Frankfurt), bot protection.
- Hetzner Online GmbH, Germany – encrypted backups in the EU.
- Vercel Inc., USA – website hosting.
- Cloudflare, Inc., USA – sending emails.
- Apple (TestFlight), Google (Google Play, Firebase App Distribution) – only for the test invitation, depending on the platform you use.
Error reports and visit measurement run on the controller's own server and are not shared with anyone.
Some recipients may process data in the USA. Transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
How long
We keep your email until Ryly launches and testing ends, at most 2 years after you signed up. Then we delete it. Sooner if you withdraw consent. Technical and error records are deleted automatically within 90 days.
Your rights
- Withdraw consent at any time: via the link in the email, by replying to it, or at support@ryly.app. Withdrawal doesn't affect processing done before it.
- Request access, correction, erasure, restriction or portability of your data.
- Object to processing based on legitimate interest.
- Lodge a complaint with the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7) or the authority in your EU country.
We respond without undue delay, within one month at the latest.
Age
The waitlist is for people aged 15 and over. If you're younger, ask a parent to sign you up.
Browser storage
The site remembers your chosen language and theme in your browser (localStorage). It stays with you. The only cookie may be set by reCAPTCHA (see above).
Changes
We may update this policy, for example when the app launches. The current version is always here, dated at the top.