Your email. A clear purpose.

Early-access privacy notice · Version 18 October 2026

This notice covers the landing page and launch email list, not a Zdrovi health vault. When the signup succeeds, you join the launch list immediately. We send a welcome email with a removal link.

Who is responsible

Jakub Frechowicz, trading as Zdrovi, Eierbachstrasse 46, 8155 Niederhasli, Switzerland. You can send requests to this address or email jakub.frechowicz@gmail.com.

What the list collects

The list stores your email, subscription status, signup time, the consent wording/version and the offer version. Removal links use random tokens; only their hashes are stored in the application database. No name, medical records, health conditions or payment details are requested.

Why and on what basis

We use your email with your consent to acknowledge your signup and send the launch invitation and free-month activation instructions. This is not an ongoing newsletter. Giving consent is voluntary. You may withdraw it at any time through the removal link without affecting earlier lawful processing. Where the GDPR applies, the basis for these emails is Article 6(1)(a).

We also process limited technical information for abuse prevention, security and delivery, based on legitimate interests in protecting the list and operating the service (Article 6(1)(f), where applicable). The application rate limiter stores a keyed, pseudonymous hash derived from the connection IP and an hourly counter, not the raw IP. Hosting and email providers may separately process IP addresses, request logs, delivery events and email content. There is no advertising profiling or automated decision-making with legal or similar significant effects.

Who handles the information

Zdrovi is hosted on Cloudflare Workers in the operator’s own Cloudflare account. The launch-list database uses Cloudflare D1 with EU jurisdiction, so the database runs and stores its data within the European Union. This database restriction does not mean that all website requests, security processing or email delivery take place only in the EU. No mailing-list information is sold or shared with advertisers.

Resend delivers the welcome email and launch invitation. It receives your email address, message content and delivery-related information. Our sending domain, auth.zdrovi.com, uses the Ireland sending region (eu-west-1). Resend states that its primary processing operations and stored customer data are in the United States, including message content and delivery logs. Choosing an EU sending region does not move Resend’s stored data to the EU.

Resend’s Data Processing Addendum includes Standard Contractual Clauses for international transfers, with provisions for transfers from Switzerland. Its subprocessor list identifies the providers it uses, including US-based providers. See Resend’s data protection overview for its processing locations and transfer arrangements.

Retention and removal

The implementation gives subscriptions a maximum of 12 months from signup. After the launch invitation and offer instructions have been sent, we delete the launch list and do not use its email addresses for any other purpose. If you unsubscribe before launch, we remove your email and you will not receive the launch invitation or instructions to claim the offer. To unsubscribe, open the removal link in your email and click “Unsubscribe and remove my email”. A successful removal deletes your row from the active application database immediately. Cloudflare and Resend may retain separate technical records or backup copies under their own retention policies. Removing your signup does not immediately erase those copies. To prevent repeated signup attempts, we keep a temporary counter linked to a protected version of your IP address. These counters are removed by daily cleanup after about 24–48 hours.

Your choices and rights

You may ask for access, correction, deletion, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw consent. Use the unsubscribe link to remove yourself from the list, or contact the operator for other requests. You may complain to the Swiss Federal Data Protection and Information Commissioner or, where applicable, your EU supervisory authority. Any applicable EU representation requirements must be resolved before targeted EU collection opens.

Cookies and email tracking

The landing-page signup does not add analytics, advertising cookies, tracking pixels or link-click tracking. Resend open/click tracking must be disabled in the sender settings before activation. Hosting infrastructure may use necessary security mechanisms; their behaviour must be checked during launch verification. No optional analytics are needed to count signups.

Before the list opens

The verified email contact, provider details, transfer arrangements, retention/purge operation and any applicable representation details must replace the provisional notes in this notice. You can remove your signup using the link in your welcome email.