2. Privacy Policy (Datenschutzerklärung / Politique de confidentialité)

Written to satisfy both the Swiss revFADP (nDSG) and the EU GDPR. It covers Linyup acting as the controller for website visitors and Customers. Where a studio uploads its own contacts into the product, Linyup acts as a processor on the studio’s behalf; that relationship is governed by a separate Data Processing Agreement (see Section 9), not by this policy.

2.1 Who is responsible

The controller responsible for processing personal data described here is:

Franco D’Agostino, trading as “D’Agostino Production”
Kleinhüningerstrasse 205, 4057 Basel, Switzerland
Email: hello@linyup.com

For Customers and visitors in the EU/EEA, this controller processes personal data in connection with offering its service in those markets.

2.2 What data we collect and why

a) When you visit the website

When you load linyup.com, our hosting provider automatically processes technical data needed to deliver the site securely: IP address, browser and device type, referring page, and date and time of access. This is necessary to operate and secure the site.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)) / FADP Art. 31.

b) When you contact us or join a waitlist

If you fill in a contact or sign-up form, we process the data you provide, such as your name, email address, studio name, and message.

Purpose: to respond to you and, where you ask for it, to keep you informed about Linyup.

Legal basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)) and/or your consent (GDPR Art. 6(1)(a)).

c) When you create an account or become a Customer

To provide the service we process account and profile data (name, email, language, login credentials), billing data, and usage data.

Legal basis: performance of the contract (GDPR Art. 6(1)(b)).

d) Payments

Payments are processed by Stripe. Card and payment details are entered directly with Stripe and are not stored by us; we receive limited transaction metadata (such as status, amount, and a reference). See Section 2.4.

Legal basis: performance of the contract (GDPR Art. 6(1)(b)).

e) Marketing emails

If you opt in, we may send you product news through our email provider. You can unsubscribe at any time using the link in each email.

Legal basis: consent (GDPR Art. 6(1)(a)); withdrawable at any time.

2.3 Cookies and analytics

We use PostHog for product analytics — to understand which pages and features visitors engage with (for example, expanding the pricing comparison or opening a feature detail) so we can improve the site. We do not use advertising cookies, advertising pixels, or cross-site tracking, and session recording is switched off.

Analytics only runs if you agree to it. On your first visit we ask for your consent through a banner, and nothing analytics-related loads until you choose: if you accept, we load PostHog and set analytics cookies on your device; if you decline — or simply don’t choose — PostHog is never loaded and no analytics cookies are set. You can change your decision at any time via the “Cookie settings” link in the site footer. Your analytics data is hosted in PostHog’s EU region, and we never use it to identify you personally or track you across other websites.

Legal basis: your consent (GDPR Art. 6(1)(a) / FADP), which you may withdraw at any time with effect for the future.

Inside the Linyup app (for Customers). When you are signed in and using the product, we also use PostHog to understand how the app is used so we can improve it. There, analytics is on by default under our legitimate interest in operating and improving the service (GDPR Art. 6(1)(f) / FADP Art. 31); session recording is switched off, and you can opt out at any time from the user menu in the app. The consent banner above governs the public website only.

For two strictly functional purposes we use your browser’s local storage: to remember your light or dark theme preference, and to remember your analytics-consent choice. These are essential to honour your own settings, are kept only on your device, hold no personal data, and are not shared — so no separate consent is needed for them.

To display the site, your browser loads some resources from third-party content-delivery networks — web fonts from Google Fonts (Google) and interface icons from unpkg. Fetching those files makes your IP address and browser information visible to those providers; we do not use this to track you. When you submit an email form, the address you enter is sent to Google Firestore to record your request (see Sections 2.2 and 2.4).

2.4 Service providers and recipients

We use carefully selected providers who process data on our behalf under contract. We do not sell personal data.

Provider	Purpose	Location
Google Cloud / Firebase (Google)	Hosting, database, file storage, and serverless functions	EU / Switzerland (europe-west6, Zurich)
Brevo (Sendinblue SAS)	Transactional and marketing email	France (EU)
PostHog (PostHog, Inc.)	Privacy-friendly product analytics (cookieless)	EU region (Frankfurt); provider based in the United States
Stripe (Stripe Payments Europe, Ltd.)	Payment processing	Ireland (EU), with group processing in the United States

Our application infrastructure runs in Google’s europe-west6 (Zurich, Switzerland) region and our email provider is in France (EU), so most processing stays within Switzerland and the EU/EEA. Some providers may process data outside Switzerland and the EU/EEA (for example in the United States). Where this happens, transfers are protected by recognized safeguards such as the EU and Swiss Standard Contractual Clauses and, where applicable, an adequacy mechanism such as the EU-U.S. / Swiss-U.S. Data Privacy Framework.

2.5 How long we keep data

We keep personal data only as long as needed for the purposes above or as required by law.

• Website logs: up to 30 days (Google Cloud’s default log retention).
• Contact and waitlist data: until your request is handled, or until you ask us to delete it.
• Customer account and billing data: for the duration of the contract and for as long as legal retention duties (for example Swiss accounting law, generally 10 years for accounting records) require.

2.6 Your rights

Depending on the law that applies to you (Swiss FADP and/or EU GDPR), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where no legal duty requires us to keep it;
• restrict or object to certain processing;
• receive your data in a portable format and, where applicable, have it transferred;
• withdraw any consent at any time, without affecting prior processing.

To exercise any of these, email hello@linyup.com. You also have the right to lodge a complaint:

• in Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), edoeb.admin.ch;
• in the EU/EEA, with your local data-protection supervisory authority.

2.7 Data security

We use appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access, including encryption in transit and access controls. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.

2.8 Children

The service is intended for businesses (coaches and studios), not for use by children directly. Where a studio stores data about minors among its contacts, the studio is responsible for the lawful basis for doing so, including any guardian consent. See Section 2.9.

2.9 Data you upload as a Customer (contacts)

When you use Linyup to manage your own people (your “contacts,” such as your members, students, or clients), you remain the controller of that data and Linyup acts as your processor. This means:

• you decide what data to collect and how to use it, and you are responsible for having a lawful basis and for informing your contacts;
• we process that data only on your documented instructions, as set out in our Data Processing Agreement (DPA);
• where you store data about minors, you are responsible for any required guardian consent.

2.10 Changes

We may update this policy as the service evolves. The current version is always available at linyup.com, with the date of the last update shown below.