Back to Performance Index

Privacy Policy

Last updated: 21 April 2026

This Privacy Policy describes how we collect, use, and share information about you when you use Performance Index. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Who we are

We are the operator of Performance Index and the data controller for personal data processed through the Service. Contact details are at the bottom of this page.

2. What data we collect

Account information: email address, password (encrypted), date of birth, country.

Performance data: stats you enter such as physical metrics, financial information, cognitive metrics, and lifestyle metrics.

Payment information: we do not store credit card details. Payment data is handled directly by Stripe.

Technical data: IP address, browser type, device information, and essential cookies for authentication.

3. Why we collect it

We use your data to calculate your Performance Index score, benchmark your stats, track progress (Premium), process payments, communicate with you, and comply with legal obligations.

Legal basis under GDPR: performance of a contract and legitimate interest for security and service improvement.

4. Who we share data with

We share data only with GDPR-compliant service providers: Supabase (database, EU region), Stripe (payment processing, Ireland), Vercel (hosting).

We do not sell your data. We do not share data with advertisers.

5. How long we keep your data

Active accounts: as long as your account is active. Inactive accounts: deleted after 3 years of inactivity. Billing records: 5 years (required by Norwegian accounting law). Backup copies: up to 30 days after deletion.

6. Your rights under GDPR

You have the right to access, correct, delete, port, and object to processing of your personal data. You can withdraw consent at any time and lodge a complaint with Datatilsynet. To exercise these rights, contact us using the email below. We respond within 30 days.

7. Cookies

We use only essential cookies required for authentication. We do not use tracking or advertising cookies.

8. Data security

Your password is hashed and never stored in plain text. All data transfers are encrypted with HTTPS. Database access is restricted by Row Level Security policies.

9. Children

Performance Index is intended for users aged 18 and over. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be communicated by email. Continued use of the service after updates constitutes acceptance.

11. Contact

performanceindex0@gmail.com

Performance Index