PatternPilot

Privacy policy

Last updated: June 2026

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on the PatternPilot platform.

Controller

Fast Forward Ventures UG (haftungsbeschränkt), Wilsdruffer Straße 17, 01067 Dresden, Germany.

Data we process

  • Account data: email address, optionally your name from Google or Apple sign-in.
  • Health data: weight, nutrition, activity and related entries. This data qualifies as a special category of personal data under Art. 9 GDPR and is provided exclusively by you.
  • Technical data: anonymous usage statistics (only with your consent).

Legal bases

  • Account and use of the platform: Art. 6 (1) (b) GDPR (performance of the service contract).
  • Health data: Art. 9 (2) (a) GDPR – explicit consent, given when you create your account and enter the data. Revocable at any time with effect for the future.
  • Statistics and functional cookies: Art. 6 (1) (a) GDPR (consent via cookie banner).

Storage location

All personal data is stored on servers within the European Union (data centre Frankfurt am Main, Germany, AWS eu-central-1).

Processors

We use the following service providers as processors under Art. 28 GDPR. Data processing agreements (DPA) are in place with both providers.

  • Lovable AB, Sveavägen 24, 111 57 Stockholm, Sweden. Application hosting and edge runtime. The DPA forms part of the Lovable Terms.
  • Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992 (parent company based in the USA). Database, authentication and storage of personal data. Processing takes place on servers in the EU (Frankfurt, AWS eu-central-1). Where occasional access from the USA cannot be ruled out, any such transfer is based on the EU Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.

Third-country transfer

Even though data is stored within the EU, occasional access by affiliates of the above providers from the USA cannot be fully ruled out. In such cases, any transfer to third countries is carried out exclusively on the basis of the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) together with additional technical and organisational measures.

Sign-in with Google or Apple

If you sign in with your Google or Apple account, sign-in data (in particular email address and name) is transmitted to Google Ireland Ltd. or Apple Distribution International Ltd. Legal basis: Art. 6 (1) (b) GDPR. Use of these sign-in options is voluntary; alternatively you can register with email and password.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to revoke any consent with effect for the future. Requests should be sent to the address listed in the imprint. You also have the right to lodge a complaint with a data protection supervisory authority.

Cookies

Details can be found in the cookie settings. You can revoke your consent at any time.

The German version is legally binding.