Personal Data Processing Policy
Effective from 1 August 2026
This is an English translation provided for convenience. The Czech version is authoritative.
1. Who processes your data
The data controller is Marek Polcar, Company ID 03840131, registered at Keřová 716/5, 641 00 Brno, Czech Republic. The contact e-mail is ahoj@kyna.cz. I have not appointed a data protection officer; please contact me directly in all matters.
2. What data I process
- Account data: e-mail address and password stored as an irreversible hash.
- Kennel data: the name, the contact details you fill in yourself, and the logo if you upload one.
- Dog data: name, breed, sex, date of birth, titles, health clearances and any other details you enter into the app.
- Photographs: the dog photos you upload and the images the app creates from them.
- Support messages: the content of messages you send me through the in-app support, including any attachments.
- Order data: what you ordered, when and for how much.
- Payment data: processed exclusively by the Stripe payment gateway. Your card number never reaches me and I do not store it.
- Technical data: information about how you use the app, IP address and browser type.
3. Why I process the data
- Performance of a contract: running your account, creating flyers, delivering them and making them available for download. Without this data the service cannot be provided.
- Legal obligation: keeping tax and accounting records.
- Legitimate interest: securing the service, preventing abuse and measuring which parts of the app are used.
- Consent: sending the newsletter. You can withdraw the consent at any time via the link in every e-mail.
4. Who I share the data with
I do not sell your data to anyone. I rely on the following processors to run the service:
| Processor | What it is for | What data is shared | Where, and on what basis |
|---|---|---|---|
| Supabase | database and sign-in | account, kennel, dog and order data, and support messages | European Union, data stays in the EU |
| Cloudflare | image storage (R2), website hosting and bot protection on forms (Turnstile) | photographs, generated flyers and technical data | European Union, storage is bound to the European region |
| Google Gemini | flyer creation | dog photographs, the cynological details you enter and the contact details to be shown on the flyer | United States, European Commission standard contractual clauses |
| Stripe | payments | e-mail and payment data | United States, European Commission standard contractual clauses |
| Resend | order confirmations and support message notifications | e-mail, order data and support message content | United States, European Commission standard contractual clauses |
| PostHog | measuring how the website and the app are used | technical data and an anonymous identifier | European Union, the eu.posthog.com instance |
| EmailOctopus | newsletter delivery | e-mail, optionally your name and kennel name | European Union (Ireland), with access from the United Kingdom under the European Commission adequacy decision |
5. Photographs and artificial intelligence
This is the most important part of this policy, which is why I state it separately. The flyer comes about by my sending photographs of your dogs, the details you enter about them, and the contact details to be shown on the flyer, to Google for processing, specifically to the Gemini service. Without this transfer the flyer cannot be created; it is the essence of the service.
According to its terms for the paid Gemini API, Google does not use data sent through this interface to train its models. The current wording is available in the Google terms. If you do not want your photographs to reach this processor, please do not use the service.
By uploading a photograph you confirm that you hold the rights to it. With images taken by professional photographers this may not be a given, so please verify it before uploading.
6. How long I keep the data
I keep account, kennel and dog data and the created flyers for as long as your account exists. Purchased flyers are kept even after that, so you can download them again at any time. Tax records are kept for as long as the law requires. After your account is deleted I remove the data, except what I am legally required to retain. After your account is deleted I also remove the error reports and measurement records held in PostHog under your account identifier.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw the newsletter consent at any time. Just write to ahoj@kyna.cz and I will get back to you within one month at the latest.
If you believe I process your data unlawfully, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.cz.
8. Cookies and usage measurement
The service needs only a minimum to run: the sign-in session stored in your browser and a cookie holding your answer from the consent bar. None of it tracks what you do elsewhere on the internet.
I measure the use of the kyna.cz website and the app.kyna.cz application with PostHog, which runs on servers in the European Union. Measurement is the only part of the service that is not essential, which is why the bar at the bottom of the page asks you about it. Your answer is stored in a cookie whose name starts with __ph_opt_in_out_ and it covers both kyna.cz and app.kyna.cz at once, so answering once is enough.
- If you accept, PostHog stores an identifier in your browser that recognises your next visit.
- If you decline, nothing else is stored in your browser and I measure the use of the service in the browser anonymously, without cookies and without a persistent identifier. This does not apply on the server side, see the paragraph below.
Regardless of your answer, two things are recorded on the server side. Error reports, so that service failures can be found and fixed: they contain your account identifier, the address where the error occurred, and up to fifteen lines of Kyna's own source code around each frame of the stack trace. And a record of a completed purchase, at the moment of payment. The legal basis is legitimate interest in the secure and functional operation of the service for the error reports, and performance of the contract for the purchase.
You can change your decision at any time: click "Privacy settings" in the website footer or in the account menu in the app and the bar will appear again. IP addresses are anonymised during measurement and I do not use screen recording.
9. Changes to this policy
I may update this policy. The current version is always available on this page and is marked with the effective date shown at the top.