Privacy Policy

This page says, in plain language, exactly what Galwise collects, why, who touches it, and how to get it removed.

Who is responsible for your data

Galwise (galwise.co), operated by Shawn Todd at 10695 Dean Martin Drive #1041, Las Vegas, NV 89141, is the data controller for the information described on this page. For anything privacy-related — questions, requests, complaints — email privacy@galwise.co. We answer ourselves; there is no ticket queue.

What we collect, and why

If you subscribe, we store your email address and which guide path you came from, so the check-in emails match where you are. The legal basis is your consent (GDPR Article 6(1)(a)) — you typed your address in and pressed the button; we never add anyone any other way.

Your health answers stay in your browser

The questions Galwise asks about reactions and symptoms produce health-related answers. We do not store those answers or your signal result on our servers today. They live in your browser session and disappear when you close it or tap Start over. Our database records only an anonymous random ID and which path (diagnosed or pre-diagnosis) you chose — never your name, email, or answers together. Your signal result can also be saved on your own device so your boundary screen can remember you — it stays on the device and is never sent to us. Before Galwise accounts launch, we will add a separate, explicit consent step for saving any health information, as GDPR Article 9 requires.

Who processes data for us

Three services touch data on our behalf, under data-processing agreements: Resend (email delivery, USA), Supabase (database hosting, USA), and Vercel (website hosting, USA). Cloudflare (USA) handles our domain and email authentication. None of them may use your data for anything except running Galwise.

How long we keep it

Your email stays on the list until you unsubscribe. After you unsubscribe, your address is removed from all sending within 30 days. If you ask us to delete everything, we permanently remove your data after a 30-day grace period.

Your rights

You can ask us, at any time, to: access a copy of your data (rectification if it's wrong), correct it, erase it, hand it to you in a portable format, or stop processing it (objection). Email privacy@galwise.co for any of these — we act on every request, and we don't ask why.

Withdrawing consent

Consent is not a one-time door. You can withdraw it whenever you like — every email we send has a one-click unsubscribe, and emailing privacy@galwise.co works just as well. Withdrawing changes nothing about what you can read on Galwise.

Complaints

If you believe we've handled your data badly, you have the right to lodge a complaint with your local data-protection supervisory authority. We'd also like the chance to fix it — privacy@galwise.co reaches us directly.

We never sell your information

We never sell your personal information. Ever.

Deleting your account

Delete your account anytime. We permanently remove your data after a 30-day grace period.

Analytics

We use privacy-friendly analytics to improve the guide. No ads. No data sales.

We will publish the complete policy before launch. This summary reflects how Galwise operates today.