Privacy Policy
You entrust us with sensitive information: your financial situation. This page states who processes your data, which data, on what basis, for how long, and what we will never do with it. It is written to be read, not to cover ourselves.
Who is responsible for your data
The data controller is Tuki Academy, published by Alex Lamy. For any question about your data, a single address, answered by an actual person: bonjour@tuki-academy.fr.
Your account data
Your email, your name and, if you add one, your profile picture. They are used to sign you in, secure your account and write to you when necessary (invitation, password recovery). Nothing else.
What you enter
Your budget, your goals, your projects and your onboarding answers belong to you. If you are supported by a coach, they access this data only as part of your coaching, and that sharing relies on explicit consent you give before any pairing. To go back on that consent, write to us: we unpair your account and remove the sharing.
Journey usage measurement
To improve the journeys during the beta, we measure your progress server-side: journey started, furthest step reached, start and completion dates. This measurement is tied only to your account's technical identifier: it contains neither your name, nor your email, nor any of the financial data you enter.
The feedback you give us
At the end of a journey, we ask you for a score out of ten and, if you feel like it, a few words. Answering is optional: you can skip, and the question does not come back. Your score and your text are stored with your account's technical identifier, which lets us connect them to your journey to understand what worked. They are used only to improve the journeys. If we quote feedback publicly, we always do so anonymously.
The legal basis for processing
Your account and the data you enter are processed to deliver the service you asked for. Sharing your profile with a coach relies on your consent. Journey usage measurement, error monitoring and performance measurement rely on our legitimate interest in running and improving a product still under construction. You can object to those last purposes by writing to us.
How long we keep it
Your account data is kept for as long as your account exists, then deleted within 30 days of your deletion request. Technical error and performance logs are kept a few months at most, following our providers' default retention. Consent records are kept for three years after the end of the relationship, because we must be able to prove that you did consent.
What we never do
Your data is never sold or rented, to anyone. No ad network, no profiling, no tracking for marketing or commercial purposes, no advertising cookies. Our only revenue comes from the prices we display, not from your data.
Where your data lives
It is hosted by our technical providers: Supabase (database and authentication), Vercel (application hosting and page load performance measurement via Speed Insights), Sentry (error monitoring, performance measurement and recording of a share of browsing sessions, with text and images masked), Resend (email delivery) and Upstash (abuse protection). They process this data on our behalf and are not allowed to use it for themselves.
Your rights
You have the right to access, rectify, erase, port, object to and restrict the processing of your data, and you can withdraw at any time a consent you gave us. An email from your account address is enough, and we answer within one month: bonjour@tuki-academy.fr
If our answer does not satisfy you, you can lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.