Legal

Privacy Policy

Last updated: October 7, 2026

This policy explains what personal data Teloboost collects, why, who helps us process it, and what rights you have. We don't sell your data, and we don't use advertising or analytics trackers.

Who Is Responsible

Teloboost LLC, 30 North Gould Street, Sheridan, WY 82801, United States, is responsible for your data (the "controller"). For anything about your data, email support@teloboost.com.

What We Collect

Account: your email address and password. If you sign in with Google, we also receive your name and your Google account identifier.
Reminders you turn on: the email address for email reminders, your browser's push subscription for desktop notifications, and the Slack webhook for Slack reminders.
What you create: exercises, albums, tags, photos, and the notes and feedback you write when you schedule or finish a break.
Break history: when breaks were scheduled and whether you completed or skipped them.
Subscription: your Stripe customer and subscription identifiers. Stripe handles your card details, and we never see them.
Messages: feedback you send through the site and emails you send us.
Technical data: your IP address, browser user agent and the pages requested, in our server logs.

Your notes are free text, so you decide what goes in them. If you write about your health there, we use it only to show it back to you.

Why We Use It

To provide the Service you signed up for (account, reminders, your library, Pro). The legal basis is our contract with you (GDPR Art. 6(1)(b)).
To keep the Service secure and working, through server logs, abuse prevention and error diagnosis. The legal basis is our legitimate interest in running a reliable, safe service (Art. 6(1)(f)).
To answer you when you write to us. The legal basis is the contract or our legitimate interest.
To meet legal obligations, such as tax and accounting records for payments. The legal basis is Art. 6(1)(c).

We don't use your data for advertising, and we don't make automated decisions about you.

Who Processes It for Us

These service providers process data on our behalf, under contracts that bind them to our instructions:

Hetzner Online (Germany): the servers that run Teloboost and its database.
Amazon Web Services (United States): sign-in (Cognito), sending emails (SES), storing photos and backups (S3) and delivering the site (CloudFront).
Stripe (United States): payments.
Google (United States): only if you choose "Continue with Google".
Slack (United States): Slack reminders, if you connect Slack. We also use Slack internally for operational alerts, such as a new sign-up, a deleted account or feedback you send.
Your browser's push service (for example Google, Apple or Mozilla): desktop notifications, if you turn them on.

We may also disclose data if the law requires it, for example to answer a court order.

Where It Is Stored

Our servers and database are in Germany. Some of the providers above are in the United States, so some data is transferred there. These transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.

How Long We Keep It

Your account and everything in it: kept while your account exists. When you delete your account we remove it within 7 days, and database backups that still hold it expire within 30 days after that.
Guest sessions (a break started without an account): removed after 3 days.
Server logs: rotated automatically and overwritten, typically within days.
Payment records: kept as long as tax and accounting law requires.

Cookies

We only use cookies that the Service needs to work, so we don't ask for consent. access and refresh keep you signed in: access lasts up to an hour, or 3 days for a guest, and refresh lasts up to a year. Your light or dark theme choice is saved in your browser's local storage. We don't use advertising or analytics cookies, and we don't load fonts or scripts from other companies' servers. The one exception is the checkout page, which loads Stripe to take your payment.

Your Rights

You can ask us for a copy of your data, to correct it, to delete it, to receive it in a portable format, or to restrict or object to how we process it. You can delete your account yourself at any time from My account. For any other request, email support@teloboost.com. We answer within one month.

If you are in the EU, you can also complain to a data protection authority. Ours is the Information Commissioner of the Republic of Slovenia (ip-rs.si), and you can also go to the authority in your own country.

Children

Teloboost is not for anyone under 16. If you believe a child has given us data, email us and we'll delete it.

Security

Traffic is encrypted in transit, and access to production systems is limited to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you if a breach puts you at risk.

Changes to This Policy

If we change this policy, we update the "Last updated" date above. For significant changes we tell you by email or in the app before they apply.

Contact

Questions about this policy or your data? Email support@teloboost.com.