Your privacy rights

About this page

This page is a plain-English summary of your rights over your personal data. It brings together two regimes in one place:

• the EU GDPR and UK GDPR, for people in the EU, EEA, and UK; and
• US state privacy laws (such as California's CCPA/CPRA and the comprehensive laws of other states), for people in the United States.

It is a summary, not a substitute for our privacy policy or our data processing agreement, which set out the full detail. Where this page and those documents differ, the full documents apply.

You may have reached this page via a link labelled “GDPR” — it still lives at the same address, and now covers US rights alongside the GDPR.

Who we are & our role

We are helping.app, operated by Darren [SURNAME], a sole trader (autónomo) registered in Spain. Our role depends on which data we are talking about:

• For the personal data of coaches (such as account and billing details), we are the data controller.
• For the personal data of a coach's clients, the coach is the data controller and we are the data processor (our role is defined by Article 28 of the GDPR). We process that data only on the coach's instructions. See our data processing agreement.

Your rights under the GDPR & UK GDPR

If you are in the EU, EEA, or UK (or otherwise covered by the EU GDPR or UK GDPR), you may have the right to:

• Be informed about how your data is used — this page and our privacy policy do that.
• Access your data — ask us for a copy of the personal data we hold about you.
• Rectify inaccurate data — ask us to correct anything that is wrong.
• Erase your data — ask us to delete it (sometimes called the “right to be forgotten”).
• Restrict processing — ask us to limit how we use your data temporarily, for example while a correction is disputed.
• Data portability — receive a copy of your data in a structured, machine-readable format, or have it sent to another provider.
• Object — to processing based on our legitimate interests, or to direct marketing.
• Withdraw consent — where we are relying on your consent, you can take it back at any time.

Automated decisions

We do not use solely-automated processing to make decisions about you that have a legal or similarly significant effect. Our engagement scoring is informational — it summarises how a client is responding — and is not used to make legal decisions about people.

Your rights under US state laws

The United States has no single federal privacy law, so your rights depend on your state. We do not sell personal data. Depending on where you live, you may have the right to:

• know or access the personal information we hold about you;
• delete your personal information;
• correct inaccurate personal information;
• opt out of the “sale” or “sharing” of your personal information for targeted advertising, or of certain profiling; and
• limit the use of sensitive personal information (under California's CCPA/CPRA).

California residents get the fullest set of rights under the CCPA/CPRA. Other states with comprehensive privacy laws — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon, and Montana — offer a similar core set, usually with a right to appeal if we refuse your request. Because we do not sell personal data or use it for targeted advertising, many of these opt-out rights are not triggered in practice, but you can still ask us to confirm, correct, or delete your data.

We do not knowingly collect personal information from children under 13 (or any higher minimum age a state sets), and the service is not directed at minors. See our privacy policy for the full detail, including our position on whether analytics or subprocessors count as a “sale” or “share”.

How to exercise your rights

Email hello@helping.app and tell us which right you want to use. We will:

• verify your identity before acting;
• for GDPR / UK GDPR requests, respond within one month, and tell you if we need to extend that by up to a further two months for complex requests;
• for US state-law requests, respond within the timeframe your state's law requires, and tell you how to appeal if we refuse; and
• provide this free of charge, unless your request is manifestly unfounded or excessive (or, for some US rights, excessive in a way the law allows us to charge for).

If you're a coach's client

If you are a client of a coach who uses helping.app, your coach is the data controller for your data. You can exercise your rights through your coach, or you can contact us directly at hello@helping.app and we will route your request and cooperate with your coach as needed.

Lawful bases

Under the GDPR / UK GDPR we rely on lawful bases such as performance of a contract, legitimate interests, legal obligation, and (where relevant) consent. Your coach relies on their own lawful basis to contact you. The US state laws are framed less in terms of “lawful bases” and more in terms of the consumer rights above; where we rely on consent, you can withdraw it. See our privacy policy for the full detail.

International transfers & retention

Your data may be processed outside your country where subprocessors operate globally — and several (Stripe, Twilio, Telegram) are US-based — with appropriate safeguards such as the EU Standard Contractual Clauses or the UK IDTA in place. We keep data only as long as we need it; for example, a coach's client data is kept briefly after removal and then anonymised. See our privacy policy and data processing agreement for the detail.

Complain to a regulator

You have the right to complain to a data protection authority. Because we are established in Spain, our lead supervisory authority under the GDPR is the Spanish Data Protection Agency (AEPD — Agencia Española de Protección de Datos). If you are elsewhere in the EU or EEA, contact your national data protection authority; if you are in the UK, contact the Information Commissioner's Office (ICO). If you are outside the EU/UK, contact your local data protection authority — and if you are in the United States, your state attorney general. We would welcome the chance to put things right first, but you are free to go to your regulator at any time.

Contact

Questions about this document? Email hello@helping.app.

This is a first draft for review by a qualified lawyer, not legal advice.