Privacy Policy

This policy explains what personal data is processed when you visit this website or use the SpineGuard app, why it is processed, and the rights you have over it.

Last updated: [DATE — TODO fill in before launch].

1. Data controller

The data controller responsible for this website and the SpineGuard app is:

  • Owner: [FULL NAME / COMPANY NAME — TODO fill in]
  • NIF/CIF: [TODO fill in]
  • Address: [POSTAL ADDRESS — TODO fill in]
  • Email: hello@oriolj.com

2. What data we process

On this website (spineguard.oriolj.com): we use Vercel Analytics, a cookieless analytics tool that collects aggregate visit metrics (page views, referrer, country, device type). It does not use cookies and does not build cross-site profiles. This website sets no cookies. Our hosting provider may keep standard server logs (IP address, user agent) for security purposes.

In the SpineGuard app (spineguard.app.oriolj.com): if you create an account we process your email address and password (stored hashed). If you choose to fill in your health profile, we process body stats (such as weight and height) and information about your back condition, which you provide voluntarily to receive personalized weight recommendations.

3. Purposes and legal bases

  • Providing the app and your account — performance of a contract (art. 6.1.b GDPR).
  • Processing the health information you enter to calculate personalized recommendations — your explicit consent (art. 9.2.a GDPR); you can leave these fields empty and delete them at any time.
  • Aggregate, cookieless site analytics — legitimate interest in understanding site usage (art. 6.1.f GDPR).
  • Security logs and abuse prevention — legitimate interest (art. 6.1.f GDPR).
  • Compliance with legal obligations, where applicable — art. 6.1.c GDPR.

4. Retention

Account data is kept while your account exists and deleted when you delete your account. Aggregate analytics contain no personal identifiers. Server logs are kept for a limited period for security purposes.

5. Recipients and processors

We do not sell personal data. Service providers acting as processors: Vercel Inc. (website hosting and cookieless analytics) and [HOSTING PROVIDER FOR THE API/DATABASE — TODO fill in]. Each processor is bound by a data processing agreement (art. 28 GDPR).

6. International transfers

Some providers (e.g. Vercel) are based in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses otherwise.

7. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability, and objection, and withdraw consent at any time, by emailing hello@oriolj.com. You also have the right to lodge a complaint with the Spanish supervisory authority, the AEPD (www.aepd.es).

8. Minors

This service is not directed at children under 14. Please do not create an account if you are under 14.

9. Not medical advice

Weight recommendations in SpineGuard are general guidance based on commonly cited guidelines and the information you provide. They are not medical advice. Always consult a healthcare professional about back pain or any health condition.

10. Changes and contact

We may update this policy; material changes will be announced on this page. Questions: hello@oriolj.com.