Privacy Policy
2026-07-19 • Version 1.2
Introduction
Serenzer is committed to protecting your privacy and personal data.
This policy explains what data we collect, how we use it, and what your rights are.
By using Serenzer, you accept the practices described in this policy.
Data Collected
Authentication data (email address, username, encrypted password)
Personal development profile (12 life dimensions)
Conversations with the AI to improve coaching
Technical data (IP address, browser, device)
OAuth connection data (Google, Apple) if used
Use of Data
Providing personalised and tailored AI coaching
Analysing your progress across the 12 dimensions
Improving our services and coaching algorithms
Ensuring security and preventing misuse
Contacting you regarding your account and our services
AI Subprocessors and Data Sharing
In order to provide the coaching service, Serenzer transmits certain of your data to third-party artificial intelligence providers. This section details with whom, what data, and for what purpose.
Purpose of sharing: to enable the AI coach to understand your situation, take into account your upcoming commitments, and generate personalised and contextual responses.
AI Providers Used
OpenAI, Inc. (United States) — GPT-4o and GPT-4o-mini models for coaching chat and event briefing generation
Anthropic, PBC (United States) — Claude models for coaching chat (alternative provider)
xAI Corp. (United States) — Grok model for coaching chat (alternative provider)
The active provider depends on our internal configuration and may change over time.
Data transmitted to these AI providers:
The content of your text and voice conversations with the AI coach
Your personal development profile (12 dimensions, values, objectives)
The context of your Google Calendar events: title, date, time, location and description (for the next 50 events over 60 days)
Google data that is NEVER transmitted to AI providers
Your Google contacts (read during synchronisation but stored solely within our infrastructure)
The email addresses of participants in your events
"Other" contacts retrieved via the Google People API
Commitments of our AI subprocessors:
None of these providers is authorised to use your data to train its models (standard API clause).
Data is processed in encrypted transit (TLS 1.2+).
Transfers outside the European Union are carried out on the basis of the Standard Contractual Clauses of the European Commission.
Compliance with the Google API Services User Data Policy
The use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements.
Other Technical Service Providers
In addition to the AI providers, Serenzer relies on the following service providers for its infrastructure:
None of these service providers receives the content of your conversations, your 12-dimension profile, or your Google Calendar data.
Hostinger International Ltd. (France, European Union) — hosting of application servers and the database.
Stripe, Inc. (United States) and Stripe Payments Europe Ltd. (Ireland) — payment processing for subscriptions. Stripe receives your email address and the information strictly necessary for the transaction.
Google LLC (Google Workspace) — sending of transactional emails (confirmations, password resets, notifications). These emails contain your email address and the functional content of the message.
Google Ireland Ltd. (Ireland) and Google LLC (United States) — Google Analytics, audience measurement for our showcase website serenzer.com. This processing is based exclusively on your consent, collected via our banner and revocable at any time. The data transmitted consists of browsing data (pages visited, duration, visit source, browser technical data), to the exclusion of any conversation content. Transfers outside the European Union are carried out on the basis of the Standard Contractual Clauses.
Secure Data Storage
Your data is stored securely:
Encryption of sensitive data in the database
Mandatory HTTPS/SSL connections
Restricted access with strong authentication
Regular and secure backups
Servers located in Europe (GDPR compliance)
Your Rights under the GDPR
Access: view all your personal data
Rectification: correct or update your information
Erasure: delete your account and all your data
Portability: export your data in a standard format
Objection: refuse processing on legitimate grounds
Complaint: lodge a complaint with the relevant supervisory authority
Cookies Used
Essential cookies for authentication and security
Preference cookies (language, settings)
Audience measurement cookies (Google Analytics), deposited only after your explicit consent
No advertising cookies
Ability to manage your cookie preferences at any time
Contact
Email: privacy@serenzer.com
Response within a maximum of 15 days
Data Protection Officer available