Privacy policy

Data controller

The controller of personal data processed by legalizacja.app is Clean Whale Sp. z o.o., ul. Opaczewska 42, 02-372 Warszawa, Poland. Contact: ivan.shyla@cleanwhale.pl.

What data we process

Account: e-mail address (magic-link sign-in). Situation and case: citizenship, voivodeship, residence status, answers and case stages — provided voluntarily to tailor your checklist. Chat: the content of conversations with the assistant. Document files are NOT stored — we check metadata only (name, type, size) and keep the check result. Timeline map: reports are anonymous (voivodeship, case type, dates, outcome) and are not linked to your account; on submission we create an anonymous edit token (a link you can save to update your timeline later — no email). Analytics: we use Google Analytics 4 (IP anonymization) ONLY after you accept the cookie banner — no analytics cookies load before that. Technical: an essential session cookie (kp_uid) and server logs (IP address) for abuse protection. We use no marketing cookies.

The public case feed shows only the voivodeship, case type, stage months and outcome — without a person or case identifier, exact days, tokens or technical data.

Purposes and legal bases

Providing the service (checklists, chat, reminders) — Art. 6(1)(b) GDPR (contract). Case e-mail notifications — Art. 6(1)(b); you can disable them in account settings. Security and anti-abuse limits — Art. 6(1)(f) (legitimate interest). Anonymous map statistics — the data does not identify a person.

Recipients (processors)

Amazon Web Services (hosting in the USA — us-east-1; SES e-mail — eu-central-1, Frankfurt), Anthropic PBC (USA — processing chat content to generate AI replies) and Google (Analytics — audience statistics, only with your consent). Transfers outside the EEA rely on Standard Contractual Clauses / the EU-US Data Privacy Framework. We do not sell data or share it for marketing.

Retention

Account and case data — until account deletion or an erasure request. Anonymous map reports — indefinitely (they identify no one). Technical logs — up to 90 days.

Your rights

You have the right to access, rectify, erase, restrict, port your data and to object. Write to ivan.shyla@cleanwhale.pl — we reply within 30 days. You may also lodge a complaint with the Polish DPA (UODO, uodo.gov.pl). The AI chat is informational — we make no automated decisions with legal effects.