Legal
PVCE Privacy Policy
Effective date: 13 September 2026
PVCE is a personal performance companion for competitive gamers. It builds a continuing record around competitive play, Match Feel, routines, schedule, recovery context, Patterns, experiments, and conversations with PVCE.
This Privacy Policy explains what information PVCE handles, why it is used, who receives it, how long it is kept, and the choices and rights available to you.
1. Who is responsible for your information
PVCE is currently operated by William Jalkner, operating PVCE, at S:t Göransgatan 95, 112 45 Stockholm, Sweden. William Jalkner is the controller of personal data processed through PVCE unless a separate agreement says otherwise.
Privacy questions and requests: privacy@pvce.gg
General support: support@pvce.gg
2. Who may use PVCE
PVCE is not available to children under 16.
If you are 16 or 17, you may create an account and use PVCE, subject to applicable law. Where PVCE relies on consent to process health-related information, PVCE asks you for a separate, explicit consent presented in clear language. If applicable law requires authorization from a parent or legal guardian for particular processing, PVCE will obtain that authorization before the processing begins.
If we learn that an ineligible child has created an account, we will disable the account and delete the information unless we must retain limited information by law.
3. Information PVCE handles
The information available in your account depends on which features and integrations you choose to use.
Account and profile information
This may include your name, email address, authentication records, username, profile image, birth date or age status, home city, preferred time zone, primary game, competitive level, height, and weight.
Competitive gaming information
PVCE may receive or generate information about your competitive play, including FACEIT identity and public match history, matches, Runs, maps, scores, match times, player statistics, rankings, ELO changes, Match Feel responses, debriefs, gaming goals, and links between matches in the same playing session.
Conversations, notes, and memory
PVCE processes messages you send through the app or Discord, check-ins, plans, journal-style entries, feedback, and other information you choose to tell PVCE. It may derive structured memories from your own messages so that later conversations can remain consistent. You can review or delete your information through the controls made available in PVCE or by contacting us.
Health, wellbeing, and performance context
If you choose to provide it, PVCE may process sleep, energy, mood, focus, stress, soreness, recovery, activity, training, routines, habits, schedule, and similar information. PVCE may also produce related indicators or inferences, including Form, Patterns, correlations, recurring contexts, and suggested experiments.
Some of this information may be health data or reveal information about your physical or mental wellbeing. PVCE processes this category only with your explicit consent, which is requested separately from acceptance of the Terms. PVCE requires this consent to provide the product; without it the product is paused, while your account, data export, deletion and billing management remain available.
Calendar information
If you connect Google Calendar, PVCE may read events from your primary calendar for the period shown in the product, including event title, description, location, time, time zone, status, link, and recurrence information. When you ask PVCE to schedule or change something, PVCE may create, update, or delete calendar events on your behalf. You can disconnect Google Calendar at any time.
Discord information
If you connect Discord, PVCE receives the Discord account information needed to link your identity, such as your Discord user ID, username, display name, avatar, and direct-message channel. PVCE processes messages and button interactions you exchange with PVCE so it can provide its companion features and keep the app and Discord record synchronized. PVCE does not request access to unrelated Discord servers or private conversations.
Location and weather information
If you provide a home city, PVCE may convert it to approximate latitude and longitude and use that approximate location to retrieve local weather. If a connected activity provider supplies route location and that use is permitted, PVCE may use a recent approximate location for the same purpose. PVCE does not use precise location for advertising or geofencing.
Billing information
Stripe processes payment-card and billing details. PVCE receives limited subscription information such as Stripe customer and subscription identifiers, payment status, invoices, trial status, plan, renewal, cancellation, and currency. PVCE does not receive your full card number.
Technical, security, and support information
This may include sign-in events, IP address, device and browser information, timestamps, request identifiers, error and security events, integration status, consent records, support messages, and bounded AI usage telemetry such as model name, token count, latency, and error class. PVCE does not intentionally place full conversation content in operational telemetry.
Information PVCE derives
PVCE combines permitted information to organize your record and generate summaries, Form, Patterns, comparisons, correlations, recommendations, reminders, and experiments. These are performance-support features, not medical diagnoses or decisions about your legal rights.
4. Where information comes from
PVCE receives information:
- directly from you;
- from services you choose to connect, such as FACEIT, Discord, Google Calendar, and payment services;
- from public competitive-game records associated with the player account you connect;
- from the operation of the product; and
- from calculations and AI-assisted features based on permitted information already in your record.
Oura and Strava status
PVCE contains integration work for Oura and Strava, but these integrations are not currently active or offered to users. PVCE does not maintain live user connections or ingest new API data from them. PVCE will not enable Oura or Strava or send their API data to an AI model unless the relevant provider terms and PVCE's agreements permit the intended use. If either integration is reintroduced, PVCE will update this notice where necessary and obtain any new authorization or consent before processing begins.
5. Why PVCE uses information and its legal bases
Where the GDPR or similar law applies, PVCE relies on the following legal bases:
| Purpose | Information used | Legal basis |
|---|---|---|
| Create and secure your account | Account, authentication, technical and security information | Performance of the contract; legitimate interests in protecting the service |
| Import and organize competitive play | Account, FACEIT and gaming information | Performance of the contract |
| Provide Discord, Calendar, weather, billing, and other requested integrations | Relevant account and integration information | Performance of the contract; consent where the integration or information requires it |
| Provide conversations, summaries, reminders, Patterns, experiments, and personalization | Messages, gaming record, permitted memory and context | Performance of the contract for core features; consent for sensitive information |
| Process health or wellbeing information and produce related inferences | Sleep, mood, stress, recovery, activity, health-related context, Form, correlations, and related Patterns | Your explicit consent under Articles 6(1)(a) and 9(2)(a) GDPR where the information is special-category data |
| Process payments and administer subscriptions | Billing and account information | Performance of the contract; compliance with accounting and tax law |
| Prevent abuse, investigate incidents, debug failures, and maintain reliability | Security, technical, audit, and limited product events | Legitimate interests in operating and securing PVCE; legal obligations where applicable |
| Respond to support and legal requests | Contact, account, support, and request records | Performance of the contract; legitimate interests; legal obligations |
| Send product or marketing communications | Email and communication preferences | Consent where required; legitimate interests for strictly service-related notices |
When PVCE asks for consent, the request must be specific and separate from acceptance of the Terms. Refusing or withdrawing health-data consent pauses the product until consent is recorded again; it does not delete your account, and data export, account deletion and billing management remain available.
6. AI-assisted features
PVCE uses AI models to help interpret requests, compose conversational responses, summarize permitted information, and choose which product tools to use. Relevant parts of your record may be sent to an AI processor when necessary to answer you or provide a feature you requested.
PVCE applies these principles:
- PVCE tells users that they are interacting with an AI-powered companion.
- Only context relevant to the task should be sent to a model.
- Sensitive information is sent only where you have given the required consent and PVCE's processor agreement permits that processing.
- PVCE does not authorize customer content to be used to train a general-purpose model.
- AI responses may be incorrect and should not be treated as medical advice, diagnosis, emergency guidance, or a guaranteed way to improve performance.
- PVCE does not use AI to make decisions that produce legal or similarly significant effects about you.
PVCE may store prompts, responses, structured memories, tool results, and related provenance where needed to preserve your history, provide the feature, enforce your choices, and investigate reliability. Operational AI telemetry is kept separate and minimized.
7. Who receives information
PVCE does not sell personal data, consumer health data, or personal information. PVCE does not use your information for targeted or cross-context behavioural advertising.
PVCE uses carefully selected processors and integration providers to operate the service. Depending on the features you use, recipients may include:
| Recipient | Purpose |
|---|---|
| Supabase | Authentication, database, storage, and backend infrastructure |
| Cloudflare | Hosting, delivery, network security, and edge services |
| Lovable | AI gateway and related development or platform services used to operate PVCE |
| Gemini AI model services where configured; Google Calendar when connected | |
| Railway | Infrastructure for the Discord companion gateway |
| Stripe | Subscription billing, payments, invoices, fraud prevention, and tax-related checkout functions |
| Discord | Discord account linking, direct messages, buttons, and companion interactions |
| FACEIT | Player-account linking and competitive match information |
| Open-Meteo | Geocoding and weather information using an approximate location |
| Email delivery provider used by PVCE | Account, security, and service email delivery |
| Professional advisers and authorities | Legal, accounting, security, insurance, or regulatory matters when necessary |
Each connected provider also processes information under its own terms and privacy notice. PVCE requires processors to use personal data only to provide contracted services, protect it appropriately, and delete or return it as required by the applicable agreement.
PVCE may disclose information if reasonably necessary to comply with law, protect a person from serious harm, investigate fraud or abuse, or establish and defend legal claims. If the operation of PVCE is transferred, personal information may be part of that transaction subject to appropriate confidentiality and notice.
8. International transfers
PVCE is operated from Sweden, while some providers process information in other countries, including the United States. Where European data is transferred outside the EEA, PVCE uses a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required.
Current processor and transfer information is available by contacting privacy@pvce.gg.
9. Retention and deletion
PVCE keeps information only as long as needed for the purposes described above and then deletes or anonymizes it.
| Information | Normal retention |
|---|---|
| Account, gaming record, conversations, memories, Patterns, experiments, plans, and wellbeing information | While your account is active, then deleted when you delete the account or make a valid deletion request, subject to the limited exceptions below |
| Integration access tokens | Until you disconnect the integration, delete the account, or the token expires or is revoked |
| Imported provider information | Until deletion or disconnection where the provider contract requires deletion; otherwise while needed for the feature and your account remains active |
| Consent and Terms acceptance records | For as long as needed to demonstrate compliance and resolve disputes |
| Security and operational logs | Normally no more than 12 months, unless required for an active incident, abuse investigation, or legal claim |
| Support records | Normally up to 24 months after the request is resolved, unless a longer period is needed for a dispute or legal obligation |
| Billing, invoice, and accounting records | As required by Swedish accounting and tax law, generally seven years |
| Email suppression records | The minimum information needed to respect an opt-out or prevent delivery to an invalid or complaining address |
When you delete your account, PVCE starts deletion across the product and connected services and cancels the associated subscription. Limited records may remain where required for accounting, fraud prevention, legal claims, suppression preferences, or proof that deletion occurred. These records are restricted from normal product use. Anonymized statistics that can no longer identify you may be retained.
Encrypted backups are isolated from ordinary product use and are overwritten through the relevant provider's normal backup cycle. If restoration is ever required, deletion instructions are reapplied before restored information returns to ordinary use.
10. Your choices and rights
You can disconnect integrations, change optional settings, cancel your subscription, withdraw health-data consent, export your information, or delete your account through PVCE or by contacting us.
If the GDPR applies, you may have the right to:
- obtain access to and a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion;
- restrict processing;
- receive portable data you provided in a structured format;
- object to processing based on legitimate interests;
- withdraw consent at any time without affecting earlier lawful processing; and
- complain to a supervisory authority.
In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY) at imy.se.
Residents of certain US states may have additional rights concerning personal or consumer health data. These are explained in the separate PVCE US Consumer Health Data Privacy Policy.
To exercise a right, email privacy@pvce.gg from your account email and describe the request. PVCE may ask for proportionate information to verify identity. We normally respond within one month under the GDPR and within the period required by other applicable law. You may appeal a refusal by replying with the word “Appeal” and explaining why you disagree.
11. Security
PVCE uses measures designed to protect personal data, including access controls, encrypted transport, provider-managed encryption at rest where available, token protection, row-level authorization, audit records, limited service credentials, deletion controls, and testing of sensitive data paths. No online service is completely secure. Please use a unique password, protect your connected accounts, and contact security@pvce.gg if you believe your account or information has been compromised.
12. Cookies and similar technologies
PVCE currently uses cookies and local storage needed to sign you in, secure sessions, remember essential settings, and operate the service. PVCE does not currently use third-party advertising cookies or cross-site tracking. If non-essential analytics or marketing technologies are introduced, PVCE will provide the notice and consent controls required by law before using them.
13. Changes to this policy
PVCE may update this Privacy Policy as the product, providers, or law changes. The current version will always show its effective date. If a change materially affects how existing information is used, PVCE will provide reasonable notice and obtain new consent where the law requires it.
14. Contact
William Jalkner, operating PVCE
S:t Göransgatan 95
112 45 Stockholm
Sweden
