Privacy Policy

Last updated: 29 August 2026

MoiCheck ("we", "us") is a small, independent bucket-list app for Groningen. This policy explains what personal data we collect, why, how long we keep it, and how you can access or delete it. We try to collect as little as possible.

1. What we collect

Data	When	Why
Email address	When you sign in with a magic link or with Google	To identify your account and sync your progress across devices
Name (from your Google profile)	When you sign in with Google	Displayed back to you in the app; not used for anything else
Bucket-list progress & memory notes	When you tick off an item or add a free-text note	To show your progress, badges, and memories, synced to your account
Name, email, subject & message	When you submit the contact form	To read and reply to your feedback, bug report, or suggestion
Theme, language, and (if not signed in) progress	Always, stored only in your browser	To remember your preferences and let you use the app without an account

We do not collect payment information, government IDs, or any special-category data. If you never sign in or use the contact form, no personal data leaves your device.

2. Who processes your data

Supabase — hosts our database and handles authentication (magic-link emails and Google sign-in). Your email, name, and bucket-list progress/notes are stored in Supabase's infrastructure.
Google — if you choose "Continue with Google", Google handles the sign-in and shares your email and name with us via Supabase.
FormSubmit.co — delivers contact-form submissions (name, email, subject, message) to our inbox by email.
OpenStreetMap / Leaflet — the map view loads map tiles directly from OpenStreetMap's tile servers, which, like any web request, will see your IP address and general request metadata.
Vercel — hosts the MoiCheck website itself.

We do not sell your data or share it with advertisers.

3. How long we keep it

Account data & progress/notes: kept for as long as your account exists, until you ask us to delete it.
Contact-form submissions: kept in our email inbox, and a local copy is kept only in your own browser's storage until you clear it — we don't keep a separate server-side copy.
Local preferences (theme, language, guest progress): stay on your device until you clear your browser storage.

4. Your rights

Under the GDPR, you can ask us to:

tell you what data we hold about you;
correct inaccurate data;
delete your account and associated data ("right to be forgotten");
export your data in a portable format;
object to how we process it.

To exercise any of these rights, email us at dblayzer@gmail.com. We'll respond within a reasonable time and, for deletion requests, remove your account data from Supabase.

You can also clear your locally-stored data at any time by clearing your browser's site data for MoiCheck, or by using the sign-out option in the app.

5. Cookies & local storage

We don't use advertising or tracking cookies. We use your browser's local storage to remember your theme, language, and (for signed-in users) a session token so you stay logged in. Supabase may set similar local storage entries to manage your authenticated session.

6. Children

MoiCheck isn't directed at children, and we don't knowingly collect data from anyone under 16.

7. Changes to this policy

If we change how we handle your data, we'll update this page and change the "last updated" date above.

8. Contact

Questions about this policy or your data? Email dblayzer@gmail.com.