Privacy Policy

This policy applies to nkmentor.com and the associated client portal (dashboard.nkmentor.com), operated by Nikodem Kosowski ("Nikodem", "we", "us"). It explains what information we collect from you as a client or applicant, why we collect it, and how it is handled.

Where the UK GDPR or the EU General Data Protection Regulation applies to you, Nikodem processes your health and lifestyle information (special category data) on the basis of your explicit consent, given when you submit it, which you can withdraw at any time by messaging Nikodem, without affecting anything processed before that withdrawal. Account and payment information is processed to perform the contract you enter into by purchasing a protocol, and technical and security logs are processed under Nikodem's legitimate interest in keeping the service secure and resolving disputes. You have the rights described under "Your rights" below, which include, if the GDPR applies to you, the right to lodge a complaint with your local data protection supervisory authority.

Account details: name, email address, password, and phone number if you choose to add one.

Health and lifestyle information: everything you submit through the intake form and daily tracker, including answers about sleep, gut health, hormones, training, diet, and any blood work you choose to upload. This is sensitive personal information you provide voluntarily so Nikodem can build and adjust your protocol.

Messages and media: text messages, photos, and voice notes you send through the portal's messaging feature.

Payment information: processed directly by Stripe. We never see or store your card details ourselves, only what Stripe shares back with us (payment status, amount, and invoice history).

Usage information: when you were last active, your check-in streak, and basic technical logs (IP address, browser, and login timestamps) kept for security purposes such as detecting suspicious login attempts, confirming who accessed an account, and as evidence if a payment is ever disputed.

Your health and lifestyle information is used to write, review, and update your personal protocol, and to generate the daily tracker questions relevant to your situation. Some of this processing is supported by third party text processing software acting under Nikodem's direction. Nikodem reviews all protocol content before it is published to you.

Payment information is used solely to bill you for the service you signed up for.

With your permission, feedback you submit through the tracker may be used as a testimonial or case study in marketing materials. We will only use your name or identifying details if you have told us that is okay, otherwise feedback is used anonymously or not at all.

We do not sell your data. We do not use your health information for advertising, and we do not share it with any third party for marketing purposes.

We rely on a small number of service providers to run the portal. Each only has access to what it needs to do its job:

Supabase hosts our database and file storage.

Vercel hosts the application itself.

A third party text processing service supports drafting of protocol content and tracker questions under Nikodem's direction.

Notion stores the written protocol document itself.

Stripe processes payments and stores your billing details under its own privacy policy.

Some of these providers are located outside the UK, including in the United States. Where this happens, we rely on standard contractual clauses or equivalent legal safeguards to protect your data.

Your data is stored with access controls that restrict it to the systems and to Nikodem directly, nobody else can query it. Passwords and session tokens are never stored in plain text. Admin access to client data is itself password protected and rate limited against repeated guessing.

We keep your information for as long as your account is active, and for a reasonable period afterward in case you return or for legitimate record-keeping (for example, payment history for accounting purposes). You can request deletion at any time, see below.

You can ask to see what information we hold about you, correct anything that is wrong, or request that your account and associated data be deleted. To do any of this, message Nikodem directly through the portal or on WhatsApp.

If this policy changes in a way that matters, we'll let you know through the portal. Continued use of the service after a change means you accept the update.

Questions about this policy or your data can go straight to Nikodem through the portal messaging feature or WhatsApp.