Waitlist

How we handle your e-mail

Version of 2 October 2026

Information about the processing of personal data on the Ayva waitlist (Art. 13 GDPR). It covers only the waitlist on this website — the app has its own privacy policy.

Who processes your data

For anything about your personal data, write to veselyjan@ayvaai.com.

Why, and on what legal basis

To let you know when Ayva is on Google Play, and to send you updates about your place on the waitlist: confirming your sign-up, your position and your personal link for friends. We won't send you anything else and we never sell your e-mail address.

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 7(2) of Czech Act No. 480/2004 Coll.). You give it by ticking the box in the form and confirm it with the button on the page the e-mail links to. Without confirmation, you won't be added.

Invitations in the app: if you create an Ayva account with the same verified e-mail, we link your confirmed waitlist sign-up to it — whoever invited you to the waitlist, or the code you signed up with, becomes your invitation in the “Invite a friend” programme (the invited person may get a longer free trial and the inviter a reward). Likewise, a friend who enters your waitlist code in the app is credited to your account. The legal basis here is performance of the programme rules in the app's terms (Art. 6(1)(b) GDPR), and it only applies if you create an account in the app; details are in the app's privacy policy (section 8).

What data

• your e-mail address, and a form of it without the “+tag” (and without dots for Gmail) that tells us whether it is the same mailbox,
• when you consented and to which version of the text, when you confirmed, and the language of the page,
• your personal code for friends, the invite code from the form, and who invited you.

We don't store your IP address with your sign-up. To prevent abuse of the form, we count attempts by a fingerprint (SHA-256) of the IP address and e-mail, and delete these fingerprints within 2 days.

How long

• An unconfirmed sign-up is deleted 30 days after you last submitted the form.
• A confirmed sign-up is deleted 365 days after confirmation, or as soon as you leave the waitlist.

Who works with the data

• Supabase — database, servers in the EU (Frankfurt),
• Fly.io — the waitlist server, servers in the EU (Frankfurt),
• Google — sending e-mails,
• Vercel — hosting this website; it only sees technical data about the visit (such as the IP address), never your e-mail or sign-up.

They are processors who may only use the data on our behalf. All of them are US companies, so data may be transferred outside the EU. Such transfers are covered by the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and, where it does not apply, by Standard Contractual Clauses (Decision (EU) 2021/914). We'll send you a copy of the clauses on request.

Your rights

• You can withdraw your consent at any time with the “Leave the waitlist” link in every e-mail. This deletes your sign-up.
• You have the right to access, rectify and erase your data, to restrict its processing and to data portability — just write to veselyjan@ayvaai.com.
• If you have an Ayva account with the same verified e-mail address, your sign-up is included in your account's data export and is deleted when you delete the account.
• You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or your local data protection authority.

Privacy policy of the app