Privacy policy

The controller of your personal data is

CCNRmethod s.r.o.
Nové sady 988/2, 602 00 Brno, Czech Republic
Company ID 301 00 020, registered at the Regional Court in Brno, file C 154019
Represented by Valerie Baráková, the author of the CCNRmethod®

For anything about your data, write to valerie@ccnrmethod.com.

CCNRmethod AI is a training environment. You talk with AI assistants, in depth, about how you think, decide and act, and the assistants remember you between sessions. To do that, the app must store what you write and what the assistants write about you.

Because of what you talk about here, the content of your sessions is treated as a special category of personal data (data about your health, mental state, family, relationships or similar). We process it only with your explicit consent, which you give before your first session and can withdraw at any time.

The app is cognitive training, not therapy. It does not provide medical advice of any kind. The assistants do not diagnose, treat or advise on health, and their replies are not medical, psychological, legal or financial advice. If you are dealing with a mental health condition, a personality disorder or another diagnosis, or if your state is critical, work with a qualified professional; this app is not a substitute for that care.

The app is for adults (18+). We do not knowingly process children's data. Please do not enter personal data about other people beyond what your own work requires.

Your account. E-mail address, name, the validity of your access, your subscription and payment status (through Stripe; your card details never reach us), the date and version of your consent, and the date of your last visit. Legal basis: performance of the contract with you.

Your sessions. Every message you write and every reply an assistant gives, with the time it was sent. Documents and images you attach to a session. Legal basis: your explicit consent (special-category data).

The assistants’ records about you. After each session the assistant writes a record: what it found, your own words that mattered, your progress, and what the next assistant should know. Over time these records build your profile: your pattern, your goal, your life context, your preferences, where you are now. They also produce your training plan, the overview of your pattern, the areas of life it touches and the sequences in which it runs, and the text on your home screen. This is how the method follows you between sessions. Legal basis: your explicit consent.

What you write yourself. Your notebook (fracts, moments, notes), your workshop (the places where you get lost and what you made with the Builder), and your goal. Legal basis: your explicit consent.

Voice. When you dictate, the recording is sent for transcription and is never stored anywhere: only the text remains. When you ask for a reply to be read aloud, the generated audio is stored with that message so that replaying it costs nothing. Legal basis: your explicit consent.

Sharing, referrals and case studies. Everything here is voluntary. If you answer the monthly form, we store your answers; they are published only if you allow it in that form, word for word, signed as you chose, and you can withdraw that permission at any time from your account. If you volunteer for a case study and are chosen, Valerie reads your sessions for that purpose; anything published is anonymised and shown to you first. If a friend joins through your link, we record that they joined and credit you: you see only how many people joined, never who, and they are never told who invited them. Legal basis: separate consent for publication and for the case study; performance of the contract for credit and referrals.

Security and operation. To protect your account we keep, for 24 hours, the e-mail address and IP address of each sign-in attempt and a hash (never the link itself) of each sign-in link. If the app fails, we record the error with the page it happened on and your account ID, for 30 days, so we can fix it. Every time the operator of the service accesses your data, the access is logged with who, whose data and when. Legal basis: our legitimate interest in a secure, working service, and in being able to prove how your data was handled.

What we do not do. No analytics or advertising trackers, no profiling for marketing, no sale of data, no cookies beyond the one that keeps you signed in and the one that remembers your light/dark theme. No decision with legal effect on you is made automatically: the assistants' replies are the service itself, not a decision about your rights or your access.

The operator. CCNRmethod s.r.o., in practice Valerie Baráková, can access your data where that is necessary to run, secure and maintain the service, to resolve a problem, or because you asked. Every access to your sessions is logged. Your sessions are not read for any other purpose unless you separately agree to it (see case studies above).

Processors. We use carefully chosen providers who process data only on our instructions:

Where a provider processes data in the United States, the transfer is covered by the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses.

Others. Our accountant sees invoices, not your sessions. Public authorities receive data only when the law requires it. We never share your data with anyone for their own marketing.

When your account is deleted, whether automatically, by you or on your request, everything goes with it: profile, sessions, records, notebook, workshop, plans, logs. Immediately and irreversibly. Only invoices stay, as the law requires.

In the app, on this page when you are signed in, you can

• withdraw your consent: the app closes for you and all processing stops; your data stays stored, unprocessed, so you can come back, or
• delete your account and all its data, immediately and irreversibly.

You can also download a complete copy of your data at any time, below on this page: as a readable file, or as JSON if you want to take it elsewhere. It contains everything we hold about you, including the records the assistants write about you, which you do not otherwise see. Your conversations are, in addition, always open to you in the app under your session history.

By e-mail to valerie@ccnrmethod.com you can ask us to

• correct data that is wrong,
• restrict how we process your data,
• stop processing based on our legitimate interest (object),
• or anything about your data that the controls here do not cover.

We may ask you to confirm your identity first, so that nobody else receives your data. We answer without undue delay and at the latest within one month; for a complex request the law allows us to extend that, and we will tell you.

Withdrawing consent does not affect the lawfulness of processing before you withdrew it.

Complaint. If you believe we handle your data unlawfully, please tell us first. You also have the right to complain to the supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.cz, or to the authority in the country where you live.

Encrypted connections everywhere. Signed sign-in cookies that expire after 30 days without activity. One-time sign-in links, of which only a hash is stored. A limit on sign-in attempts. The application runs under a database role that cannot alter the structure of the data. Every access to your data by the operator is logged. Voice recordings are never stored, and attachments are deleted after a day.

No system is perfectly secure. If a security incident ever puts your rights at risk, we will inform you and the supervisory authority as the law requires.

This section covers live audits and 1:1 mentoring with Valerie Baráková, arranged by e-mail or through the contact form, whether or not you also use the app.

Arranging the session and invoicing. Your name, e-mail and the contact details you give us, what you write when arranging the session, and the invoice. Legal basis: the contract; for invoices, accounting and tax law.

Recording. When you order a session, we ask you once for your consent to recording. With it, every session is recorded and its content is captured with Plaud, an AI recording and transcription tool. The recording is for you, so that you have the session to come back to, and so that Valerie can follow up on it in your work together. It is used for nothing else; a case study only ever with your separate consent. If you do not consent, nothing is recorded and the sessions go ahead the same way. You can ask for any session not to be recorded, or to stop recording, at any time, and withdraw your consent altogether — the recordings are then deleted. Legal basis: your explicit consent (Art. 9(2)(a) GDPR), given once when you order.

Your rights in section 6 apply here too; for live sessions, write to valerie@ccnrmethod.com.

We may update this policy when the service, our providers or the law change. The current version is always at my.ccnrmethod.com/privacy. If a change affects what you consented to, the app will ask for your consent again before your next session.

This policy is effective from 9 October 2026.