Privacy Policy

This privacy policy informs you about the processing of personal data when using P2P: Pause to Progress.

Last updated: July 1, 2026

1. Data Controller

Cornelius Thönes

St.-Georg-Straße 66

18055 Rostock

info@pause2progress.com

For privacy-related questions, please contact us by email.

2. Data We Process

2.1 Account Data

For registration and login, we process:

  • Email address
  • Password (stored only as a secure hash, never in plain text)
  • Username

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

2.2 Profile Data

As part of using the app, we store:

  • Instrument
  • Language preference

Legal basis: Art. 6(1)(b) GDPR

2.3 Practice Session Data

To provide the core functionality, we process data from your practice sessions:

  • Start time and duration of practice sessions
  • Break data (time, duration)
  • Self-assessments during breaks (concentration, energy, motivation, body tension on a 1-10 scale)
  • Break exercises performed
  • Mood rating after a session (1-3 stars)

Legal basis: Art. 6(1)(b) GDPR

2.4 Journal Entries

If you use the journal, we optionally store:

  • Practice time and mood ratings
  • Free-text notes (e.g. successes, challenges, goals, questions for your teacher)

Legal basis: Art. 6(1)(b) GDPR

2.5 Local Browser Settings

The following settings are stored exclusively on your device (localStorage) and are never transmitted to our servers:

  • Sound settings
  • Default session settings (practice time, break interval, break duration)
  • Onboarding status
  • Metronome presets and settings

2.6 Server Access Logs

Our hosting provider automatically logs technical access data (IP address, timestamp, requested URL, HTTP status). These logs are used solely for operational security and are deleted after a maximum of 30 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation)

3. No Advertising or Third-Party Trackers

We do not use advertising trackers, third-party analytics services, or tracking cookies. To improve the app, we record anonymous usage events (e.g. which features are opened) exclusively in our own database, without cookies, without sharing with third parties, and without building a personal profile. Your browser's "Do Not Track" setting is respected.

4. Data Processors

We use the following service providers to operate the app. Data processing agreements (DPA) pursuant to Art. 28 GDPR have been concluded with each of them:

Supabase: Database & Authentication

Supabase Inc., 970 Trestle Glen Road, Oakland, CA 94610, USA

Server location: Frankfurt, Germany (EU-Central-1)

supabase.com/privacy

Vercel: App Hosting

Vercel Inc., 340 Pine Street Suite 700, San Francisco, CA 94104, USA

Server location: EU region

vercel.com/legal/privacy-policy

Sentry: Error Analysis

Functional Software, Inc. (Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA

Server location: EU region (Frankfurt). Collects anonymized diagnostic data on technical errors (error message, page, browser/device) to ensure stability. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). No personal data is intentionally transmitted.

sentry.io/privacy

5. No Data Sharing

Your data is not sold to or shared with third parties for advertising purposes. Data is only transferred to the data processors listed above to the extent technically necessary to operate the app.

6. Data Retention

Your data is stored for as long as your account exists. You can permanently delete your account and all associated data at any time under Settings → Delete account. Local browser data can be deleted via your browser settings at any time.

7. Your Rights (Art. 15-21 GDPR)

You have the following rights with respect to your personal data:

  • Access (Art. 15): Request information about your stored data
  • Rectification (Art. 16): Correction of inaccurate data
  • Erasure (Art. 17): Directly in the app or by email request
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20): Machine-readable copy of your data
  • Objection (Art. 21): Object to the processing of your data

For all requests: info@pause2progress.com

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority at any time:

Landesbeauftragter für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern (LfDI M-V)

Lennéstraße 1, 19053 Schwerin, Germany

datenschutz-mv.de

9. Changes to This Privacy Policy

We reserve the right to update this privacy policy to keep it current and legally accurate. The current version is always available in the app under Settings → Privacy.