Privacy policy

At Startcat App Development, S.L. (hereafter, «Startcat») we treat your personal data as what it is: the foundation of our product's trust. This policy explains what information we collect when you visit lyn.cat or sign up for the Lyncat Niu pre-launch, what we do with it and how you can exercise your rights at any time.

1. Data controller

Contact email and rights requests: hola@lyn.cat.

Startcat is not legally required to appoint a Data Protection Officer (DPO) given the nature and volume of current processing activities. Even so, the controller will personally respond to any inquiry through the address above.

2. Data we collect

2.1 Newsletter

• Email address.
• Website language (ca, es, en).
• Version of the consent text you accepted.
• UTM parameters, referrer and signup timestamp (campaign analytics).

2.2 Early access waitlist or demo request

Same as the newsletter, plus:

• Name.
• Centre or nursery name.
• Optional message.

2.3 Technical logs

When you visit the website we record strictly necessary technical data: IP address, user agent, requested URL and timestamp. We use it to detect abuse, prevent fraud and keep the service secure.

3. Purposes and legal basis

• Sending the newsletter — explicit consent (Art. 6.1.a GDPR).
• Managing your pre-launch signup and any commercial follow-up — explicit consent (Art. 6.1.a) and pre-contract measures at your request (Art. 6.1.b).
• Abuse prevention and service security — legitimate interest (Art. 6.1.f).
• Compliance with legal obligations (LSSI, tax, accounting) — legal obligation (Art. 6.1.c).

4. Retention period

• Newsletter: until you withdraw consent. Then, 1 additional year blocked for defence against possible claims.
• Waitlist / demo: until you withdraw consent or 24 months of inactivity without becoming a customer.
• Technical logs: 12 months.
• If you become a Lyncat Niu customer, data will be kept according to the service agreement.

5. Who we share your data with

We process your data ourselves. To run the service we rely on the following data processors, with whom we have signed the corresponding agreements:

• Clouding S.L. — Infrastructure hosting and self-hosted database. Location: Spain (EU). https://clouding.io
• Resend, Inc. — Transactional email and newsletter delivery. Location: United States (transfer under EU-US Data Privacy Framework). https://resend.com

6. International transfers

Resend, Inc. is based in the United States. The transfer is covered by the EU-US Data Privacy Framework and, as an additional safeguard, by Standard Contractual Clauses approved by the European Commission.

7. Your rights

GDPR and LOPDGDD grant you the following rights:

• Access: know what data of yours we process.
• Rectification: correct inaccurate data.
• Erasure (right to be forgotten): delete your data when no longer necessary.
• Restriction: temporarily halt processing.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent at any time, without retroactive effect.

To exercise them, write to hola@lyn.cat with the details of your request. We may ask for a copy of an identification document only when there is reasonable doubt about your identity.

8. Lodging a complaint

If you believe we have not handled your data correctly, you may file a complaint with the Spanish Data Protection Agency (AEPD): C/ Jorge Juan, 6, 28001 Madrid, or at www.aepd.es.

9. Changes to this policy

We may update this policy to reflect legal or operational changes. When the change is substantial, we will notify subscribers by email. The date of the last update appears at the top of this document.

10. Contact

For any inquiries about this policy or your data, write to hola@lyn.cat.