1. Data controller

The controller of personal data processed in connection with the use of the odysai.io and odysai.app services is: Piotr Ślubowski. Contact for privacy matters: kontakt@odysai.app

2. What data we process

Odysai does not require creating an account or providing personal data for ordinary use of the odysai.io and odysai.app services. However, we may process data in the following situations:

E-mail contact

If you write to us, we process the e-mail address you provide, the content of the correspondence and any other information you share with us.

Google Analytics

After you give your consent, we use Google Analytics 4 to understand how people use the services, which content is visited and where traffic comes from. As part of Google Analytics, information such as visited pages, device, browser, approximate location and technical connection data may be processed. Google Analytics is disabled by default until the user gives consent.

Anonymous application events

In the odysai.app service we also record basic, anonymous information about how the application is used, such as starting the Pilot, viewing a stop, opening a map, finishing a day or moving between Cards. This data is used to assess how the product performs, to detect problems and to improve the user experience. These events do not require an account and are not used to identify a specific person or to build a user profile. We use the Supabase infrastructure to store this information.

3. Purposes and legal bases of processing

We use correspondence data to reply to you, to hold conversations about Odysai and to handle potential cooperation. Depending on the nature of the contact, the basis for processing is our legitimate interest in conducting communication, or taking steps at your request before entering into a contract. Data processed via Google Analytics is used only after obtaining your consent. You may withdraw your consent at any time through the analytics or cookie settings available in the relevant service. We use anonymous application events to ensure the product works correctly, to assess how its features are used and to develop it further.

4. Google Analytics and Google Tag Manager

The services may use: Google Analytics 4 to analyse how the services are used, and Google Tag Manager for the technical management of tags and consent settings. These services are provided by Google. Google may process data in accordance with its own privacy rules and data processing terms. Google Analytics is disabled by default until the user gives consent. The odysai.io and odysai.app services use separate Google Analytics measurement streams.

5. Supabase

The odysai.app service uses the Supabase platform as part of the application's technical infrastructure. Supabase may process technical data necessary for the application to work and store anonymous events related to the use of its features. Application events recorded by Odysai are not used to identify users and are not used for advertising purposes.

6. Framer

The odysai.io service is published and hosted using the Framer platform. Framer may process technical data necessary to provide hosting and to ensure the service works correctly. Odysai may also use Framer's built-in statistics. According to the provider, this mechanism does not use cookies or persistent user identifiers for standard traffic measurement.

7. Cookies and similar technologies

Necessary technologies may be used without consent where they are required for the service to work correctly, to ensure security or to remember your privacy choice. Optional cookies and analytics technologies related to Google Analytics are used only after consent is given. You may change your analytics decision at any time using the settings available in the relevant service. Declining analytics does not limit the core features of Odysai.

8. Who we may share data with

Data may be processed by providers of technical tools, in particular:

• Google (in connection with Google Analytics, Google Tag Manager and Google Workspace),
• Framer (in connection with hosting and operation of the odysai.io service),
• Supabase (in connection with the infrastructure and storage of odysai.app application data),
• providers of the technical and security infrastructure used by the Odysai services.

Data is shared only to the extent necessary to provide those services.

9. Transfers outside the European Economic Area

Some providers of the technologies used by Odysai operate globally. As a result, data may also be processed outside the European Economic Area. In such cases, providers apply the legal mechanisms required by data protection law, including appropriate safeguards for international data transfers.

10. How long we keep data

We keep correspondence for as long as needed to conduct the conversation and handle the matter, and then for a period justified by protection against potential claims. Data in Google Analytics is retained in line with the settings of our Google Analytics property. Currently, user-level data retention is 14 months. We keep anonymous application events for as long as needed to analyse how the product performs and to develop it.

11. Your rights

In the cases provided for by law, you have the right to:

• access your data,
• rectify it,
• erase data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent you have given.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.

12. Contact

For matters concerning privacy and personal data, you can write to: kontakt@odysai.app

13. Changes to this policy

This policy may be updated if the features of the services, the tools used or applicable legal requirements change.

Last updated: 3 September 2026

This is an English-language courtesy translation. The Polish version is the governing text and prevails in case of any discrepancy.