Privacy Policy

ISBAD Challenge, accessible from isbad.com, is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you use our app or sign up, we may collect:

Name
Email address
User-generated activity (e.g. ice bath logs)
Technical data such as IP address, browser, and usage data

2. Purpose and Legal Basis

We process your data for the following reasons:

To provide and improve our service (legitimate interest)
To manage your account (contractual necessity)
To send you notifications or updates (consent, where required)
To comply with legal obligations (legal obligation)

3. Data Sharing

Your data is never sold. We may share it with:

Service providers (e.g. Supabase for backend and hosting)
Authorities if legally required

All third parties follow strict confidentiality and data protection agreements.

4. Data Retention

We keep your personal data only as long as necessary for the purposes mentioned above or as required by law. You can delete your data at any time by contacting us.

5. Your Rights

Under the GDPR, you have the right to:

Access your data
Request correction of inaccurate data
Request deletion ("right to be forgotten")
Withdraw consent at any time
Data portability
Object to data processing in some cases
Lodge a complaint with a supervisory authority

To exercise any of these rights, email us at info@isbad.se.

6. Data Security

We use secure technologies and best practices to protect your data, including encryption, access control, and regular security reviews.

7. International Transfers

Our data is stored and processed within the EU or in jurisdictions that ensure adequate protection under GDPR, such as through standard contractual clauses.

8. Changes to This Policy

We may update this Privacy Policy. We will notify users of significant changes by email or in-app notification.

Last updated: June 27, 2025