Individual Entrepreneur Nikita Shestak ("we", "us", "our") operates the Askesis platform at goaskesis.com ("the Platform"). This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.
Individual Entrepreneur Nikita Shestak. Registered address: Village Didi Chorjo, 5th Street, No. 28, Ambrolauri Municipality, Georgia. We are the data controller for personal data collected through the Platform.
3. Data We Collect
3.1 Data you provide directly:
Account information — your email address, name, username and, if you add them, avatar, bio and location
Check-in data — daily check-ins, moods, public notes, and notes and reasons for missed days
Private notes — notes attached to your check-ins that only you can see
Challenge data — challenges you create or join, your start dates and progress
Social activity — comments, kudos, welcomes and the people you follow
Advertising requests — if you use the "Advertise" form, your name, email, website and message, used only to reply to you
3.2 Data collected automatically:
Usage data — pages viewed, features used and sessions, collected with Amplitude (see section 11)
Device information — browser type, operating system, device type
IP address — processed by our hosting and analytics providers, including to estimate your country or region
Error reports — when something breaks in the app, a technical report (error message, page, browser and device type, app version and your user ID) is sent to Sentry so we can fix it. It doesn't include your notes, messages or payment details.
Timezone — detected on first login and saved to your profile, so that your days, streaks and missed days follow your local calendar
3.3 Data from third parties:
If you sign in with Google — your name, email address and profile picture from your Google account
Payment data — Paddle.com sells the subscription as our Merchant of Record and processes payments (Stripe for subscriptions started before November 2026). We never see or store your full card details; we receive your customer and subscription identifiers, plan, payment status and billing period.
4. How We Use Your Data
We use your personal data to:
Create and manage your account and sign you in (including sending sign-in links by email)
Run challenges: record check-ins and missed days, and calculate streaks, completion, karma and leaderboards
Show your profile and activity to other users as described in section 7
Send in-app notifications (for example new followers, kudos, comments, streak milestones, missed days, and challenges ending soon)
Process subscription payments and freezes
Detect and prevent fraud, spam and abuse
Understand how the Platform is used and improve it
Comply with legal obligations
Legal basis (GDPR): performance of our contract with you (providing the Platform and the subscription), our legitimate interests (security, abuse prevention, understanding and improving the Platform), consent for analytics cookies, and legal obligations (for example keeping billing records).
5. Private Notes
Private notes are stored separately from public check-ins and our database only returns them to your own account. They are:
Never visible to other users
Never used to train AI models
Never shared with third parties except as required by law
Like all data on the Platform, they are encrypted in transit and at rest by our database provider. When you delete a note, a check-in or your account, the note is deleted.
6. How We Share Your Data
We do not sell your personal data and we do not share it for advertising. We share data only in these circumstances:
Service providers (processors):
Supabase — database and authentication (EU region, Frankfurt)
Vercel — website hosting and delivery
Cloudflare — domain name services
Purelymail — email hosting for support@goaskesis.com
Resend — delivery of sign-in emails
Paddle — Merchant of Record for subscriptions: checkout, payments, tax and invoices. Paddle processes your billing details as an independent controller under its own privacy notice.
Stripe — payment processing for subscriptions started before November 2026
Google — sign-in (only if you use Google sign-in)
Amplitude — product analytics
Sentry — error monitoring (EU region, Frankfurt)
Each provider processes data only to provide its service to us, under a data processing agreement.
Legal requirements:
We may disclose data if required by law, court order or a competent authority.
Business transfers:
If the Platform is sold or transferred, your data may be transferred as part of that transaction. We will notify you before this occurs.
7. What Other Users Can See
Visible to anyone on the Platform:
Your name, username, avatar, bio and location (if you add them)
Your check-ins in challenges: date, mood, public notes, frozen and missed days, and notes about missed days
Challenges you join, your streaks, completion and leaderboard position
Challenges you create (unless private), your comments, kudos, followers and the people you follow
Your karma, badges and whether you have a subscription
Private challenges are not listed in Explore or shown on public pages.
Only visible to you:
Your private notes
Your email address
Your subscription, billing details and freeze history
Your notifications
8. Data Retention
We keep your data while your account is active. You can delete your account at any time in your profile. When you do:
Your profile, check-ins, private and public notes, comments, kudos, follows, notifications and freeze history are deleted immediately
Challenges you created that have no other participants are deleted; challenges with other participants remain without you as creator
Your subscription is cancelled so you are not charged again
Copies in our providers' backups are overwritten within 30 days
Billing records are kept for as long as tax and accounting law requires
Anonymised, aggregated statistics (for example total check-ins on the Platform) may be kept
9. Your Rights
Under the GDPR and other applicable data protection laws, you have the right to:
Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate or incomplete data (most profile data can be edited in the app)
Erasure — delete your account in the app, or ask us to delete specific data
Portability — receive your data in a machine-readable format (JSON or CSV) on request
Restriction — ask us to limit how we process your data
Objection — object to processing based on legitimate interests, including analytics
Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, email support@goaskesis.com. We will respond within 30 days.
You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.
10. Data Security
We use appropriate technical and organisational measures to protect your data, including:
Encryption in transit (HTTPS/TLS) and at rest
Row-level security in our database, so each account can only change its own data
Passwordless sign-in (email links or Google)
Access to production systems limited to the operator
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions.
11. Cookies and Similar Technologies
The Platform uses:
Essential storage — your sign-in session and settings, kept in your browser's local storage, and an offline cache so the app loads quickly. These are needed for the Platform to work.
Analytics (only with your consent) — if you accept analytics cookies, Amplitude sets a cookie and local storage identifiers to measure page views, sessions and feature use. We use this only to understand and improve the Platform, not for advertising. If you decline, Amplitude is not loaded.
We do not use advertising or cross-site tracking cookies. Sponsored cards on the Platform are plain links and do not track you. You can change your choice at any time in , and clear or block cookies and local storage in your browser settings; blocking essential storage will sign you out.
12. Children
The Platform is not directed at children under 13, and you must be at least 13 to use it. If you are under the age of digital consent in your country (16 in some EU countries), you may only use the Platform with the consent of a parent or guardian. If you believe a child has created an account without the required consent, contact us at support@goaskesis.com and we will delete the account promptly.
13. International Transfers
Our database is hosted in the European Union. We are based in Georgia, and some of our providers (such as Vercel, Cloudflare, Purelymail, Resend, Paddle, Stripe, Google, Amplitude and Sentry) may process data in the United States or other countries. Where data leaves the EU/EEA, we rely on adequacy decisions (including the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification at least 14 days before they take effect.