Privacy Policy
1. Data Controller
The data controller responsible for processing your personal and biological performance data is Stitchverse. For all privacy-related inquiries, including data subject access requests, consent withdrawal, and data deletion, contact:
2. What Data We Collect
MYCAPACITI collects the following categories of data, all stored exclusively in your browser's localStorage on your own device:
Account Identifiers: Your full name and email address, used to authenticate your local session and to notify you of system activation. Your password is hashed locally and is never transmitted to any server.
Biological Performance Data (Special Category — GDPR Art. 9): Your daily calibration inputs across 5 sensors: Biological Reserve, Nervous System Load, Cognitive Clarity, Emotional Weight, and Calendar Extraction Load. These self-reported values, along with your computed Capacity Score, Nervous System Debt, and System Ledger (biological equity history), constitute health-adjacent special category data under GDPR Article 9.
Preference Data: Your selected language, baseline architecture (neurotype), OS tier, fixation mode setting, and session state. This data is used solely to personalise your experience.
Technical Communication Data: Upon account creation, your name and email address are transmitted to Stitchverse's notification system (info@stitchverse.net) via a secure server-side process for the sole purpose of system activation confirmation. No biological data is included in this transmission.
3. GDPR Article 9 — Special Category Biological Data
Under Article 9 of the General Data Protection Regulation (GDPR), data concerning health — including health-adjacent biometric self-assessments — constitutes special category data. MYCAPACITI's 5-sensor calibration, Nervous System Debt tracking, and Capacity Score calculation qualify as processing of special category health-adjacent data.
Legal basis: We process your Biological Performance Data exclusively on the basis of your explicit, informed, freely-given consent (GDPR Art. 9(2)(a)), obtained at the point of account creation via a dedicated, un-ticked, standalone checkbox.
Purpose limitation: This data is used for one purpose and one purpose only: to deliver your personal capacity calibration metrics within MYCAPACITI. It is never aggregated, profiled, sold, licensed, or used for insurance, employment, advertising, or any commercial purpose.
Right to withdraw: You may withdraw your Article 9 consent at any time via your profile settings within the app. Withdrawal triggers immediate deletion of all stored Biological Performance Data from your device.
4. How We Use Your Data
Biological Performance Data is used solely to compute and display your daily Capacity Score, operational mode recommendation, Nervous System Debt indicator, and System Ledger entries.
Account Identifiers are used to authenticate your local session and to send you a one-time "Identity Confirmed" email upon account activation.
Preference Data is used to personalise language, neurotype-specific calibration adjustments, and interface settings.
We do not use your data for advertising, third-party profiling, or machine learning training.
5. Data Storage & Architecture
The only data transmitted externally is your name, email address, consent timestamp, and OS tier selection — sent to Stitchverse's notification endpoint (info@stitchverse.net) at account creation for activation confirmation. No passwords, capacity scores, or biological metrics are ever included in this transmission.
Sessions are maintained via a 30-day rolling expiry token stored in localStorage. Tokens expire after 30 days of inactivity and are deleted immediately upon logout or System Purge.
6. Data Retention & Deletion
Your data is retained on your device for as long as you maintain an active session and do not delete it. You may exercise your Right to Erasure at any time via:
• System Purge (in your profile settings) — immediately erases all data from localStorage and redirects you to the landing page
• Withdraw Biological Consent (in your profile settings) — deletes all biological calibration data while preserving your account
• Clearing your browser's localStorage manually
Stitchverse does not retain copies of your local data. Deletion is immediate and irreversible.
7. Your Rights Under GDPR
- Right of Access (Art. 15): You may request a copy of all data MYCAPACITI holds about you. Since data is stored locally, you can inspect it directly via browser DevTools → Application → localStorage.
- Right to Rectification (Art. 16): You may correct inaccurate data by re-calibrating within the app.
- Right to Erasure (Art. 17): Use System Purge to immediately delete all data from your device.
- Right to Data Portability (Art. 20): Your calibration history can be exported from the System Log. Contact info@stitchverse.net for assistance.
- Right to Withdraw Consent (Art. 7/9): Withdraw your Article 9 biological data consent at any time via your profile settings. This triggers immediate deletion of all biological performance records.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority if you believe your data rights have been violated.
8. Third Parties & Data Sharing
Stitchverse does not sell, rent, share, or license your personal or biological data to any third party. Ever.
The application uses Google Fonts (Nunito) and an optional Google Sign-In component. Google's own privacy policy applies to these services. No biological performance data is shared with Google or any other provider.
9. Security
All pages are served over HTTPS. Passwords are never transmitted to Stitchverse servers. Session tokens are scoped to localStorage with a 30-day rolling expiry. We recommend using a private browser session on shared devices.
10. Changes to This Policy
Stitchverse will notify users of material changes to this Privacy Policy via the application interface. The effective date at the top of this document reflects the most recent revision.
11. Contact & DPO
For all privacy inquiries, data subject access requests, consent withdrawal, or complaints: