Privacy Policy & Data Safety Disclosures
Official domain: superiorman.co • Data Controller: Sledan s.r.o., Ostriezova 2, 84106 Bratislava, Slovakia (IČO 57830037) • Privacy contact: [email protected]
1. Foundational Commitment: Absolute Zero Data-Brokerage
Superior Man™ is engineered around the principle of masculine sovereignty and radical self-ownership. We do not sell, rent, license, or monetize your personal data to third-party data brokers, advertising networks, or data cooperatives. We run zero commercial advertisements within the Superior Man mobile operating system or web portal. Your data exists solely to power your private transformation and daily progress tracking.
2. Data Categories We Process
Verified email address, encrypted authentication UID via Firebase Authentication, and the access pass you hold.
If you enable App Lock (FaceID, TouchID, or Android BiometricPrompt), all biometric verification occurs strictly locally in your device's Secure Enclave. Zero biometric data is ever transmitted to or stored on our servers.
Journal entries, reflection answers and self-assessment answers are stored only on your device with AES-256 client persistence for 100% confidential offline accessibility.
Routine checklist completion timestamps, streak counts, audio listen positions, and module completion ratios to synchronize your progress across sessions.
Usage statistics (Google Analytics for Firebase) and performance traces (Firebase Performance Monitoring) show us which features help and which screens are slow. They are collected only if you allow them in the app, and you can change your choice any time in Settings. Crash reports (Firebase Crashlytics: crash logs and a Firebase installation identifier) are always sent so we can fix bugs and keep the app stable. We do not use advertising identifiers and do not enable ad personalization. On superiorman.co we count page views with Cloudflare Web Analytics, which sets no cookies and does not identify you. We also use PostHog (EU servers in Frankfurt) to see which pages and steps help visitors: page views, clicks, scrolling and steps such as starting the assessment or a checkout. Until you accept on the cookie bar, and if you decline, PostHog stores nothing on your device and counts visits with a privacy-preserving hash made on its servers. Only if you accept does it keep an identifier on your device, so we can recognise return visits and review anonymous recordings of how the site is used, with everything you type masked. You can withdraw that consent any time on the Cookie Policy page. The e-book and assessment forms are protected from bots by Cloudflare Turnstile, which checks the browser without a puzzle; see Cloudflare's Turnstile Privacy Addendum.
The answers you give in the onboarding questionnaire (for example your main goal and current obstacle) are stored with your account to personalize your plan and are deleted with it. If you send feedback or a bug report, we store your message, e-mail address, app version, device platform and recent technical logs to investigate the issue.
3. Lawful Basis for Processing (GDPR Article 6)
We process your personal information strictly under compliant legal bases under EU Regulation 2016/679:
- Contractual Necessity (Art. 6(1)(b)): To initialize and manage your account, deliver educational audio tracks, synchronize progress across devices, and grant purchased subscription entitlements.
- Legitimate Interests (Art. 6(1)(f)): To maintain system resilience, defend against scraping or unauthorized access via Firebase App Check, and diagnose unexpected application crashes (Firebase Crashlytics crash reports).
- Legal Obligation (Art. 6(1)(c)): To comply with applicable tax, fiscal, and financial reporting standards governed by Merchant of Record frameworks (Polar.sh, Apple, Google).
- Consent (Art. 6(1)(a)): For usage statistics and performance traces (Google Analytics for Firebase, Firebase Performance Monitoring), website analytics that remember your device (PostHog, only after you accept on the cookie bar), non-essential notifications and email sequences. You can withdraw consent at any time in app settings.
4. Verified Third-Party Subprocessors
We partner exclusively with enterprise infrastructure providers operating under strict Data Processing Agreements (DPAs) and ISO/IEC 27001 standards:
| Subprocessor | Purpose | Jurisdiction | Compliance Safeguard |
|---|---|---|---|
| Google Cloud / Firebase | Authentication, Firestore database, App Check shielding, usage analytics, crash and performance diagnostics (no advertising IDs) | USA / EU | EU-US DPF & Standard Contractual Clauses (SCCs) |
| Cloudflare Inc. | R2 CDN audio streaming, edge caching, web portal hosting, cookieless website analytics | Global Edge | ISO 27001, SOC 2 Type II, SCCs |
| PostHog Inc. | Website analytics on superiorman.co (cookieless by default; device identifier and masked session recordings only after consent) | EU (Frankfurt) | Data Processing Agreement, EU hosting, SCCs |
| RevenueCat Inc. | Store purchase receipt validation & sync | USA | SOC 2 Type II, DPA, SCCs |
| Apple Inc. / Google LLC | In-App Purchases, billing, payment processing | USA / Global | PCI-DSS Level 1, Global Store Compliance |
| Polar Technologies Inc. | Web Merchant of Record, global checkout, tax remittance | EU / USA | GDPR Compliant Merchant of Record |
| Loops Software Inc. | Transactional onboarding emails and system alerts | USA | DPA, Standard Contractual Clauses |
| GitHub, Inc. | Internal tracking of bug reports you submit (message, app version, technical logs) | USA | DPA, Standard Contractual Clauses |
5. Your Sovereign Data Rights (GDPR & CCPA/CPRA)
Under international privacy legislation, you have irrevocable legal rights:
- Right of Access & Portability: Request an export of your stored personal profile and streak data in machine-readable JSON format.
- Right to Rectification: Update or correct your email address and profile preferences at any time.
- Right to Erasure ("Right to be Forgotten"): Permanently wipe your identity and all data either instantly in the mobile app via
Settings → My Account → Delete Accountor via our Web Deletion Portal. - Right to Restrict or Object: Restrict automated processing or withdraw marketing communications without penalty.
- California "Do Not Sell or Share": We do not sell or share consumer data. California residents enjoy full protection under Cal. Civ. Code § 1798.100 without discriminatory pricing.
6. Age Verification & Child Safety (COPPA Compliance)
The Superior Man operating system contains advanced psychological conditioning, discipline architectures, and physical protocols engineered strictly for adult men aged 17 and older (App Store: 17+ / Google Play: 18+). We do not knowingly solicit or collect personal information from individuals under 16 years of age. If we learn an account belongs to a minor under 16, it is immediately purged.
7. Official Data Protection Contact
To exercise any privacy right, or ask about data transfers, contact us directly: