How we handle your information
Who is responsible?
Lundberg Selection AB, Swedish company registration number 556448-2049, Grevgatan 15, 114 53 Stockholm, Sweden, is responsible for Asanabit’s processing of personal data. Contact contact@asanabit.com about your information or rights.
Accounts and saved plans
We process your email address, account identifier and status, terms acceptances and sign-in sessions to provide the account. Saved plans contain a name, time allowance and selected poses and are linked to your account. Contract is the legal basis for processing necessary for the account, plan storage and purchase. Accepting account terms is not consent to advertising or processing sensitive health data. Do not put health information or information about others in plan names.
Purchases and withdrawal notices
We retain price, currency, accepted terms version, payment references and membership period to administer the purchase. Stripe receives payment and address information needed at checkout. We do not store full card details. Withdrawal notices are encrypted and include the name, purchase identification, time and reference so that we can handle them and meet legal obligations.
Security and cookies
We use necessary cookies for form protection and sign-in. Plan drafts and locally saved plans can also remain in browser storage. They are not transferred to an account without your active choice. Technical information supports operation, troubleshooting and prevention of misuse; legitimate interests are the basis for proportionate security controls. A one-time code lasts 10 minutes and can be used once. A sign-in session normally lasts 12 hours, or up to 30 days if you select Remember me. Sign out on shared devices. Your plans are not sent to Stripe.
Who receives information?
Authorised staff and hosting and email suppliers receive information needed for their tasks. Hosting and mail use Inleed. Customer email to contact@asanabit.com is forwarded to the company’s Gmail address, so Google also processes the content. Stripe processes payments, with its own obligations as well as tasks on our behalf. Authorities may receive information where the law requires it. Payments and customer email can involve processing outside the EU/EEA. This must have an applicable legal basis and transfer safeguards. You can ask us about the safeguards applying to your information.
Retention
Accounts and active plans are retained while the service is used and the information is needed. Deleting a plan initially marks it as deleted, so it may remain in storage until purged. We handle deletion requests with regard to your other connected services and legal requirements. Withdrawal receipts can be downloaded for 24 hours; the underlying case is not deleted then. Records required for OSS VAT are retained for ten years after the transaction year ends. Other accounting records are retained under accounting law. Information needed for a current claim or dispute may need to remain until the matter is resolved. Backups follow operational recovery and deletion procedures.
Your rights
You can request access, correction, erasure and restriction and, where the conditions are met, data portability. You can object to processing based on legitimate interests. We must retain some information by law. Contact contact@asanabit.com. You can complain to the Swedish Authority for Privacy Protection, imy.se. We do not use your plans for automated decisions having legal or similarly significant effects on you.
Version: asanabit-privacy-20261028-v3-en