Here you will find, in plain words, which data RExist processes, why, who it is shared with and how you can control it. It covers the app and the related services (Mentors, Mentor training course, Plus subscription).
1. Who is the controller
The data controller is Mito di Davide Diurisi, sole proprietorship, Via C. Battisti 21, 73016 San Cesario di Lecce (LE), Italy. VAT no. 03271820759.
For any request about your data, write to management@yourexist.com.
2. What data we process
Account: name, email, Google sign-in if used, language, the stage you pick at the start, your confirmation that you are at least 18 and the date you read this notice.
Professional path (three levels): your answers, choices and comments, scenarios and the generated results (summaries, maps, project).
Plus: 30/60/90 plan, completed actions, monthly check-ins and the Mentor dossier.
Personal path: your first answers, the questions you choose and your answers, the portrait, the 7-day diary and the final reading. They may say something about how you feel: that is why we process them only with your explicit consent, asked at the start of the path.
Face to face: the exercises shown, the reactions you mark, the note you write and the feedback. No images.
Saved content and Stories: content you save as favourites. If you tell a story: the name you sign it with (full name, initials only or an alias with a symbol, as you choose), role, sector, type of change, level and text, which other users can see. The reactions you leave on stories, the private notes you write (only you see them) and any reports. Others only see the total number of reactions, never who left them.
Requests and payments: name, email, phone, message, company and number of people (Corporate), amount and payment status, Mentor course enrolment, with CV and years of experience. Card or account details are handled only by the payment provider.
Sessions with a Mentor: date, length, topic, session confirmation and any reports.
Mentor partner invitations: if you sign up with a Mentor partner's personal link, we record which Mentor invited you, to show them at the top of the Mentor list. The Mentor only sees how many people signed up with their link, without names.
Mentors and applicants: photo (if uploaded), role, sector, years of experience, LinkedIn, CV, availability and motivation, answers to the alignment questionnaire. For active Mentors also billing name, VAT or tax code, IBAN, invoices, hours and fees.
Technical data: access logs, device and browser. Some preferences stay on your device (language, intro sound, sign-in).
3. Why and on what basis
Account, paths, results and Plus: needed to provide the service you ask for (contract, art. 6.1.b GDPR).
Personal path: explicit consent (art. 6.1.a and 9.2.a GDPR), which you can withdraw at any time by deleting the path.
Requests, payments, sessions and Mentor course: contract or pre-contract steps you ask for (art. 6.1.b).
Mentor applications and collaboration: pre-contract steps and contract (art. 6.1.b); tax obligations for invoices and fees (art. 6.1.c).
Tax and accounting obligations: legal obligation (art. 6.1.c).
Security and running the app: legitimate interest of the controller (art. 6.1.f).
Mentor partner invitations: legitimate interest of the controller in knowing who introduced RExist to you (art. 6.1.f).
Published stories: consent, which you can withdraw at any time by withdrawing the story (art. 6.1.a). The automatic text check and reports keep the section respectful (legitimate interest, art. 6.1.f).
Marketing messages: only with specific consent. We do not send newsletters today.
4. Artificial intelligence and profiling
Your answers are processed by third-party A.I. models, through the platform the app is built on, only to generate your results. In the app, texts generated by A.I. are marked as such.
By putting your answers together, the app builds a profile of you (summary, portrait, scenarios): this is profiling under art. 4 GDPR. It is used only to give you tailored readings and suggestions. We do not use it for advertising and we do not sell it.
Results are hypotheses and prompts, not judgements. RExist makes no automated decisions with legal or similar effects on you (art. 22 GDPR): the choices stay yours and you can discuss them with a Mentor. If you no longer want this processing, you can archive or delete your paths, or delete your account.
5. Face to face and the camera
Face to face uses the camera only as a mirror. The video stays on your device: it is not recorded, saved, sent or analysed, and there is no face or emotion recognition. We only save what you write or mark yourself.
6. Who we share data with
We do not sell your data. We share it only with those who help provide the service:
Technical providers: Base44, the platform hosting the app, the database and email delivery; the A.I. model providers; Stripe for online payments (Plus subscription and sessions) and PayPal for some payments on request. They act as processors (art. 28 GDPR).
Your Mentor: sees your name, email and sessions. They see your path only if you turn on "Share my journey": they then receive a copy of your Level 1 summary, scenarios, dossier and plan progress. Your personal path and Face to face stay yours only. If you turn sharing off, the copy is deleted.
Your company (Corporate): sees only who has been invited. It does not see your answers, results or progress.
Advisers and authorities: the accountant for tax obligations and the authorities when the law requires it.
Some providers may process data outside the European Union, for example in the United States. In that case the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
7. How long we keep data
Account, paths, diary, Face to face, Plus: as long as the account is active. If you delete the account we remove them from the app straight away.
Archived paths ("Start over"): like the account, until you delete it.
Service requests not completed: 24 months from the last contact.
Mentor applications not accepted: 12 months.
Stories, reactions and notes: until you withdraw the story or delete your account.
Payments, invoices and Mentor fees: 10 years, as required by law.
Technical logs: up to 12 months.
8. Your rights
You can ask to access your data and get a copy, correct it, delete it, restrict its processing, receive it in a readable format to take elsewhere, object to processing based on legitimate interest and withdraw any consent given (art. 15-22 GDPR). Write to management@yourexist.com: we reply within one month.
You can delete your account yourself from Profile → Delete my account.
If you think the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Other information
Minimum age: RExist is for people aged 18 or over. If we find out an account belongs to a minor, we delete it.
Security: encrypted connections and access rules so that each person sees only their own data; the Mentor sees only what you choose to share.
Changes: if we change something important we will tell you in the app and ask you to read the notice again.