Privacy Policy — SHIFT by Relivital
Last updated: 5 November 2026
Scope
This policy explains what the SHIFT app ("the app") does with your data. The app is a daily face-exercise marathon by Relivital. The data controller is Vionelle spółka z ograniczoną odpowiedzialnością, ul. Ludwika Idzikowskiego 16/401, 00-710 Warszawa, Poland, [email protected] ("we").
Information stored on your device
You can use the app without an account. Your test answers, plan, progress and settings are then stored only on your phone. Deleting the app removes them. A guest has no consent records: consents are recorded from the moment you create an account.
Information we store when you create an account
An account is created with your e-mail address and a one-time code sent to it; there is no password. We store:
- name, e-mail address, the app language and, if you enter it, a phone number (optional);
- the creator code, if you typed one;
- your test answers and settings, synced from the phone: skin concerns and areas, goals (including a free-text "other goal"), experience, reminder time, distance, style and minutes per day;
- your progress: credited days (with dates), streak, freezes, points and their history, promo codes issued to you (issue date, status);
- your consents and a log of them: type, granted or withdrawn, time, text version, language and where you gave it.
Our processors also keep technical records: sign-in logs (IP address, device type, time) at Supabase, and the recipient address and delivery status of each e-mail at Resend.
How the information is used and on what basis
- To run the account, sign you in, keep your progress and points, and issue promo codes. Promo codes are issued on our server.
- To send you e-mail with the sign-in code (always) and messages about the marathon and offers (only with your marketing consent).
- To personalise offers, only with your separate personalisation consent.
- To call you by phone, only with your separate consent to calls and only if you gave a phone number. The phone number is not used for anything else, and the app does not send SMS in this version.
- To count how the app is used (see "Services we use").
- Contact export: Vionelle may export contact data (e-mail, name, phone, consents, creator code, progress) for its sales and marketing; only users with the matching consent are used for marketing.
| Purpose | Legal basis |
|---|---|
| Account, progress, points, promo codes | Contract (Art. 6(1)(b) GDPR) |
| Sign-in security, fraud limits | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing, personalised offers, calls | Your consent (Art. 6(1)(a) GDPR) |
Marketing, personalisation and phone calls are three separate consents, all off by default. You can change each one at any time in Settings. Withdrawing a consent does not affect what was done before.
Points and promo codes
Points expire 90 days after they are earned. "Sklep" opens relivital.pl in your browser; purchases happen on that site, not in the app, and the app does not see them. A promo code you receive is linked to your account. Some codes are lifetime percentage discounts (3, 5, 7 or 10%) that cost no points and do not expire; the server issues them. If you delete your account, the code stays without any link to you and the discount is lost.
Notifications
The app uses local reminders on your phone (a daily reminder and a reminder 7 days before points expire). They need your permission and can be turned off in Settings or in the phone settings. The app does not send remote push messages in this version.
Services we use
- Supabase (servers in the EU, Frankfurt): stores the account, progress, points, consents, promo codes and sign-in logs. Processor for us.
- Resend: sends e-mail (sign-in codes and, with your consent, messages) and keeps the recipient address and delivery status. Processor for us.
- Amplitude: usage statistics. It receives an install identifier, device type, system, language, approximate location from the IP address, and events (for example days completed) plus your creator code if you entered one. It never receives your e-mail, name, phone or promo code strings.- The database is owned and operated by Vionelle spółka z ograniczoną odpowiedzialnością (the controller named above).
The app has no advertising SDK, does not track you across other apps and does not ask for App Tracking Transparency permission. We do not sell your data.
Your choices and your rights
- Request my data: Settings → "Request my data". We send a copy to your e-mail.
- Delete account: Settings → "Delete account" (a guest sees "Delete my data"). Deleting your account removes your profile, progress, points, consents and requests from our database, and the data from the phone. Technical logs of our processors and backups are kept for 30 days and then deleted. Usage statistics use a random identifier that is no longer linked to you after deletion. You can also ask on the web page https://shift.relivital.pl/delete-account or by e-mail to [email protected].
- You may also ask us to correct your data, restrict or object to its use, receive your data in a portable format (Art. 20 GDPR), withdraw any consent at any time, or complain to the Polish data protection authority (UODO).
Data retention
We keep account data while the account exists. When you delete the account its data is removed as described above. Backups and the technical logs of our processors are kept for 30 days.
Children's privacy
The app is not directed at children under 16. If you believe a child gave us data, write to us and we will delete it.
International use
Our database is in the EU (Frankfurt). Some providers may process data outside the EU.
Changes
We may update this policy. The date above shows the latest version. Consents are asked again when their wording changes.
Contact
Vionelle sp. z o.o., ul. Ludwika Idzikowskiego 16/401, 00-710 Warszawa, [email protected]