Privacy notice

Version 2026-09-25

Who is responsible

The controller is Dimitrije Stopar s.p., Maribor, Slovenia, registration number [REGISTRATION NUMBER], email info@operative-intelligence.com. Contact this address for any privacy question or request.

What we collect and why

• Free quiz. Your quiz answers are evaluated to show your results and are not stored.
• Waitlist. Your email address, whether you asked for the optional newsletter, the time of that choice and the source page. Legal basis: your consent (GDPR Art. 6(1)(a)). The program-availability email and the newsletter are separate choices.
• Account. Your email address, sign-in times, time zone and reminder settings. Legal basis: performance of our contract with you (Art. 6(1)(b)).
• Health information. Your onboarding answers, safety check answers, check-ins, program progress and routine choices are health data. We process them only with your explicit consent (Art. 9(2)(a)), which you give separately from the terms, and only to build and adapt your program. We record the consent text, version and time.
• Payments. If you buy the program, our reseller Lemon Squeezy processes your payment as merchant of record. We receive an order number, amount, status and a link to your account. We never receive card details. Legal basis: contract and legal accounting duties (Art. 6(1)(b) and (c)).

What we never do

• No advertising, tracking pixels or analytics. We use only essential cookies (session and security), so there is no cookie banner.
• No health information in emails, email subjects, links, newsletter tags or server logs.
• We do not sell or share your data for marketing.

Optional AI-written text

If enabled, a short daily introduction and weekly summary may be written by an AI model (Anthropic). It receives only minimal, pseudonymized facts (for example "second week, one change in progress"), never your email, name or free-text answers. AI-written text is labeled "Written with AI". Safety messages are never written by AI.

Processors

• DigitalOcean (server hosting, region [HOSTING REGION]).
• Amazon Web Services, Simple Email Service (sign-in links and reminders, region [SES REGION]).
• Lemon Squeezy (payments, merchant of record).
• Anthropic (optional AI-written text, only if enabled).
• Sendy on our own server with Amazon SES (newsletter, only if you opt in).

Where a processor is outside the EEA, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

How long we keep data

• Health information and your account: until you delete your account. Deletion is immediate and permanent.
• Database backups: up to 14 days, then overwritten.
• Waitlist email: until you unsubscribe or ask us to remove it.
• Order records: as long as accounting law requires; after account deletion they keep no email and no health data.

Your rights

You can access, correct, export and delete your data, withdraw consent at any time (this does not affect earlier processing), object, and restrict processing. In your account you can download all your data as a file and delete your account immediately. You can also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si) or your local supervisory authority.

Age

Florenor is for adults aged 18 or older.