Privacy Policy

1. Data Controller

Responsible for data processing on this website and within the myweekend.ai platform:

myweekend.ai
Justus Schölch
Albert-Schweitzer-Straße 76
81735 München
Germany
Email: support@myweekend.ai

2. Collection and Processing of Personal Data

(1) We process personal data of our users insofar as this is necessary for the provision and operation of the platform and its modules (myweekend.ai, myfood.ai, mytrip.ai, mysport.ai).

(2) We collect and process the following data:

a) During registration:

  • Email address
  • Name (optional)
  • City and country
  • Interests and preferences (e.g. event categories, diet type, sports, travel preferences)
  • Postal code (optional)

b) During use of the modules:

  • Usage data (viewed recommendations, generated plans)
  • Preference settings (e.g. cooking time, budget, allergies, training goals)
  • Generated content (weekend events, meal plans, travel itineraries)

c) During payment:

  • Payment data is processed by our payment service provider Stripe. We do not receive full credit card details, only a confirmation of payment.

d) Technical data:

  • IP addresses are processed at platform level by our infrastructure provider (Base44) for connection establishment and security. The app itself does not store IP addresses.
  • Browser type and operating system
  • Access time

3. Legal Basis for Data Processing

(1) Processing is carried out on the basis of the following legal bases:

  • Art. 6 (1) (b) GDPR: Performance of contract — provision of personalized recommendations and plans according to the respective module subscription.
  • Art. 6 (1) (a) GDPR: Consent — processing of preferences and interests for personalization that goes beyond the contractual service.
  • Art. 6 (1) (f) GDPR: Legitimate interests — ensuring the security and functionality of the platform, preventing abuse.

(2) Consent can be withdrawn at any time by deleting the corresponding preferences in the dashboard or by request via email.

4. Purpose of Data Processing

(1) The collected data is used exclusively for the following purposes:

  • Providing personalized event recommendations (myweekend.ai)
  • Generating meal plans and shopping lists (myfood.ai)
  • Creating travel itineraries and budget tracking (mytrip.ai, if available)
  • Creating training plans (mysport.ai, if available)
  • Managing user accounts and subscriptions
  • Communication with the user (e.g. welcome email, change notifications)
  • Security and abuse prevention

(2) Data is not passed on to third parties for marketing purposes.

5. AI-supported Data Processing and Profiling

(1) The platform uses Artificial Intelligence (AI) to generate personalized recommendations. The preferences entered by the user (interests, diet type, budget, sports, etc.) are automatically processed and matched with available data (events, recipes, travel destinations).

(2) This automated processing is carried out in accordance with Art. 22 GDPR. The user has the right not to be subject to a decision based solely on automated processing that produces legal effects concerning them or similarly significantly affects them. Since the platform's recommendations do not produce legal effects and the user can intervene manually at any time, AI-supported recommendation generation does not constitute such a decision.

(3) The user can change or delete their preferences in the dashboard at any time, which adjusts the AI generation accordingly.

6. Data Sharing with Third Parties

(1) We use the following service providers for the operation of the platform, who act as processors (Art. 28 GDPR):

a) Base44 (Platform Infrastructure)

  • Purpose: Hosting, database, backend infrastructure, authentication
  • Provider: Base44 Ltd.
  • Data: Email address, preferences, generated content, IP address (at platform level)
  • Location: EU/Israel

b) Stripe (Payment Processing)

  • Purpose: Processing subscription payments
  • Provider: Stripe Inc.
  • Data: Payment data (credit card, etc.), email address
  • Location: USA/EU (Standard Contractual Clauses)

c) AI Service Provider (Content Generation)

  • Purpose: Generation of recommendations, texts, and images
  • Data: Preferences, interests, request context (no personal master data)
  • Location: USA (Standard Contractual Clauses)

(2) Sharing with further third parties only occurs where we are legally obliged to do so or where it is necessary to enforce our rights.

7. Storage Duration and Deletion

(1) Personal data is stored as long as the user has an active account.

(2) Upon cancellation of all subscriptions without account deletion: Data is retained for 12 months to prevent potential free trial abuse (abuse prevention). After 12 months, the data is automatically deleted.

(3) Upon account deletion by the user: All personal data (profile, preferences, generated content) is permanently and irrevocably deleted (Art. 17 GDPR). Exceptions apply to data required to fulfill legal retention obligations (e.g. accounting records).

(4) IP addresses are not stored by the app itself, but are processed at platform level by our infrastructure provider (Base44). The storage duration and deletion is the responsibility of the infrastructure provider in accordance with its own data protection policies.

8. Your Rights

As a data subject, you have the following rights:

  • Right of access (Art. 15 GDPR): You can request information about the data processed about you.
  • Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data.
  • Right to erasure (Art. 17 GDPR): You can request the deletion of your data — directly via account deletion in the dashboard.
  • Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing.
  • Right to data portability (Art. 20 GDPR): You can receive your data in a structured format.
  • Right to object (Art. 21 GDPR): You can object to the processing.
  • Withdrawal of consent (Art. 7 (3) GDPR): You can withdraw given consent at any time.

To exercise your rights, contact us at support@myweekend.ai.

9. Cookies

(1) This website uses exclusively technically necessary cookies that are required for the operation of the platform (e.g. authentication, session management).

(2) No tracking cookies, marketing cookies, or analytics cookies from third parties are used.

(3) You can manage or disable cookies in your browser settings. This may limit the functionality of the platform.

10. Security

(1) We take technical and organizational measures to protect your data:

  • Encryption of data transmission (TLS/SSL)
  • Access restriction to authorized persons
  • Regular security reviews by the infrastructure provider

(2) However, 100% security cannot be guaranteed.

11. Changes to this Privacy Policy

(1) We reserve the right to adjust this privacy policy to adapt it to changed legal situations, new services, or new modules.

(2) We will inform users of significant changes by email.

12. Right to Complain to the Supervisory Authority

(1) You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

(2) The competent authority is the supervisory authority at your place of residence or at the place of the alleged violation. For Munich:

Bavarian State Office for Data Protection Supervision (BayLDA)
Postfach 1349
91504 Ansbach
Email: poststelle@lda.bayern.de