Privacy
This notice explains what data MODE³ collects, why, and what you can do about it. Plain language, no legal padding.
Controller
The controller for your personal data is M. Brinkhuis Holding B.V., Kerkhofweg 6a, 7031 JE Wehl, the Netherlands, KvK 73010766. Contact for any data question: hi@getmode3.com.
What we collect and why
Account
Your email and first name when you sign up, plus the auth identity (password hash or Apple Sign-in token). Legal basis: performance of contract.
Session and reflection data
When you log a PRIME, PERFORM or UNWIND session, we store what you enter: state, time of day, context, feelings before/after, intentions, notes, optional sleep and movement context. This is your tracking history. Legal basis: performance of contract.
Optional Apple Health context
If you connect HealthKit (subscription tier), we read sleep, HRV, resting heart rate and recent workouts from your device to surface them next to your session log. HealthKit data stays on your device unless you explicitly include workout metadata in a session. Legal basis: consent (you toggle this on).
Coach conversations
Messages to the AI coach are sent to Anthropic's Claude API for processing, then stored alongside your session history so you can re-read past conversations. Legal basis: performance of contract.
Order data
Name, billing email, payment confirmation, and order reference for any purchase. Legal basis: performance of contract + legal obligation (tax records).
Notifications
If you opt in to push reminders, they are sent via the Apple Push Notification service from our server. For that we store a device token. The token is removed when it stops working, when you leave THE LEAGUE, or when you delete your account; you can stop the reminders at any time in your iOS notification settings. Legal basis: consent.
Test results
When you take one of the tests on getmode3.com we store your score, the test name and the time. Your email only if you leave it, for one Monday mail with your result. Legal basis: consent. Stored in Supabase, the email is synced to MailBlue. Every mail has an unsubscribe link.
Founders Drop reservation
When you reserve a number we store your email, optional first name, your reservation number, the campaign source (UTM parameters and the referring page) and a hashed IP address for abuse prevention. The hash (truncated SHA-256) is used only for a per-hour rate limit, lives in a separate counter table that is not linked to your reservation, and cannot be turned back into your address. Legal basis: steps prior to entering into a contract. Reservation data is kept until the drop closes plus 12 months, or until you ask us to delete it.
THE LEAGUE
If you join THE LEAGUE we store your display name or number and your test scores and results. Weekly results and the top 10 may be shown on the site, by email and on our Instagram, by number or display name only, never your email. Legal basis: consent (you join the League).
Who we share data with
We use a small number of processors. None of them sell your data.
- Supabase (database + auth): EU North region, Stockholm.
- Anthropic (Claude API for the AI coach): your coach messages are sent here for processing.
- MailBlue (transactional + product update email).
- Plug & Pay (checkout flow): handles your purchase before it reaches the payment processor.
- Mollie (payment processor): processes iDEAL / Wero / Klarna / SEPA / card payments.
- Apple: Sign in with Apple identity flow, push notification delivery on iOS.
- Cloudflare (hosting + CDN for getmode3.com and app.getmode3.com).
- Meta (Instagram): publishing League results, by number or display name only.
Tracking and cookies
We do not run analytics or advertising tracking on app.getmode3.com, and none on getmode3.com without your consent. Our checkout pages (under /checkout/) are served by Plug & Pay and may include conversion tracking. See Plug & Pay's own privacy notice for that surface.
On getmode3.com we use the Meta Pixel only after you accept it in the cookie bar. It tells us which of our ads brought you here and what you did next (page views, the games, the checkout button), so we can measure and improve our ads. Decline, and no pixel loads and nothing is sent to Meta. You can change your choice at any time via “Cookie settings” in the footer. Legal basis: consent.
How long we keep data
Account, session and reflection data is kept for as long as your account is active. If you delete your account from Settings, all your data is removed within 30 days. Order and invoice data is retained for seven years to comply with Dutch tax law (Artikel 52 AWR).
If you hold a Pay-Per-Use entitlement (Founders Drop or Operator Quarterly without renewal), your in-app analytics window rolls back to 90 days after the entitlement expires; subscription brings the full lifetime view back.
Your rights
Under the GDPR (Algemene Verordening Gegevensbescherming) you have the right to:
- Access: request a copy of the data we hold about you.
- Rectification: correct anything that's wrong.
- Erasure: delete your account and all associated data.
- Portability: receive your data in a machine-readable export.
- Withdraw consent: turn off HealthKit, marketing email, or any opt-in feature at any time.
- Object: to processing based on legitimate interest.
- Lodge a complaint: with the Dutch DPA (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Email hi@getmode3.com for any of these. We aim to respond within seven days.
Security
Auth and database access are gated by row-level security policies; only you can read your own session data. All traffic is HTTPS. Backups are encrypted at rest.
Children
MODE³ is not intended for users under 16. We do not knowingly collect data from minors.
Changes
If we change this notice we'll update the date at the top and notify active accounts by email at least 14 days before the change takes effect.
← Back to MODE³