Privacy policy

This policy explains what personal data SmileMove processes, why, and how to exercise your rights. The data controller is the owner of SmileMove. Contact: palgalsoft@gmail.com.

1. What data we process

• Email and password (the latter encrypted by the authentication provider).
• Name, role (trainer or student), invite code and any profile data you provide.
• For students: goal, phone, date of birth and notes, if filled in.
• Programmes, places and attendance linked to your account.
• Minimal technical session data (authentication cookies) and, if enabled, usage analytics on the host.

2. Why and on what basis

• Providing the Service (create account, login, programmes, invitations): performance of the contract / pre-contractual steps.
• Transactional emails (invitation, confirmation, password reset): same basis.
• Security and abuse: legitimate interest in protecting the platform.
• Legal obligations, when one applies.

We do not use your data for third-party advertising and we do not sell lists.

3. Who helps us process it

The Service is hosted and run with providers acting as processors, including: authentication and database (Supabase), transactional email (Resend) and application hosting (Vercel). They only access the data needed for that function.

4. Retention

We keep data while your account is active and for the extra time needed to resolve incidents or meet legal duties. If you ask to close the account, we will delete or anonymise what is no longer needed.

5. Your rights

You can request access, rectification, erasure, restriction, portability and objection, and withdraw consent when that is the basis. Write to palgalsoft@gmail.com. You can also complain to the Spanish Data Protection Agency (AEPD).

6. Cookies

We use cookies or equivalent storage that are essential to keep you signed in. If the host injects analytics, the purpose is to understand aggregate site use, not to identify you for advertising.

7. Minors

The Service is not aimed at under-16s. If we find an account for a child below that age, we will delete it.