Privacy Policy

If you're looking for a service or a product

• No account is needed. We don't use advertising or analytics cookies, or trackers from other companies.
• Your search and filters are kept in the page address so you can go back or share them. We don't store them.
• What you tell Discover (the kind of service, city and budget), your deck and your shortlist are kept only in your browser, on your device. We don't receive them.
• For you picks are worked out in your browser from your Discover answers, your deck and your shortlist. We don't receive them, and you can turn them off on You.
• Your health: we don't ask about it and don't collect it. Discover asks only what kind of treatment, where and for how much. Please leave health details out of anything you send us.
• Speaking instead of typing: if you use the microphone, your browser turns your speech into text. Some browsers, such as Chrome, do this on their maker's servers. Enrize Wellness never receives the recording, and the text stays on your device.
• Photos of places that aren't partners yet load from the place's own website, so your browser connects to that site, which sees your IP address, as when you visit a website. We tell it nothing else: not the page you're on, and not who you are.
• Your language is remembered in a small cookie on your device for a year, if you choose one.
• Going to a provider's site: we count how many times each listing's “Book” or “Buy” button is used, without recording who used it. The link we send you to includes “utm_source=enrize-wellness” so the provider can see the visit came from Enrize Wellness. Once you're on the provider's site, their privacy policy applies, including for your booking or order.

If you list a service or a product (providers)

• The listing you write, including the name you list under (your business's or your own) and its photo, which are shown publicly once approved, and the version of the terms you accepted.
• Your photo, if you add one. Your browser makes it smaller and saves it again before it's sent, which removes the location and camera details a photo file can carry. We keep it with your listing and delete it when you replace it or delete the listing.
• Your email, which is never shown publicly. We use it only to contact you about your listing: for example, to tell you why if we send it back or take it down, and about changes to the Provider Terms. It's required, because without it we couldn't reach you.
• Your private manage link. We store only a scrambled form of it (a hash), so we can check it but can't read it back.
• An account, if you make one after listing: your email and a password, which our sign-in provider keeps only in scrambled form, and which listings are yours. It's optional: your private link works without it.
• How many people clicked through to your site, which we show you once it reaches 10; below that we show “fewer than 10”. The same goes for how many members took your code.
• Our decisions about your listing: if we send it back or take it down, the ground in the Provider Terms and what we saw. We show them on your manage page, email them to you and keep them with the listing.
• Fill it in with AI: if you use it, the link or description you give, and the text of that page, go to our AI provider to draft your listing. We don't keep them, and nothing is listed until you check it and send it.

If you sign in for member deals

• We never sell or share your personal details.
• You sign in with a link we email you, no password. We keep your email and sign-in details. Your email is required: it's how you sign in.
• Member accounts are for people aged 16 and over, who confirm it and agree to the Terms when they join, after reading this Privacy Policy. We record which version they agreed to, and when.
• If we learn that a member is under 16, we close the account and delete its data.
• When you take a listing's code, we record that you took it, once, so we can tell the provider how many members took their code. Providers see only the number, and only once at least 10 members have taken the code, never who you are.
• We don't send you marketing or offers by email.
• Signing in is also how the Enrize Wellness team and connected AI agents use Enrize Wellness.

If you report a listing or write to us

• Your message, your name and email, and what we did about it. We use them to deal with your message and to reply.
• If you report a listing, we don't tell the provider who you are, unless that's needed (for example, for a copyright claim) or the law requires it.

Stored on your device

Besides your language, your Discover answers, your deck and your shortlist (see above), Enrize Wellness keeps these on your device:

• whether you chose a light or dark appearance;
• whether For you is on or off, until you change it or clear your browser;
• if you sign in, your sign-in session, until you sign out;
• after you tick the box to agree to the Terms, which version you agreed to, until it's recorded with your account;
• while you sign in, the page to bring you back to, until you close the tab.

Each one is needed for something you asked for, so none of them needs your consent. You can delete them in your browser's settings at any time; “Start over” on You clears your Discover answers.

Why, and on what basis

• Showing listings, running the listing service and member deals, and drafting a listing with “Fill it in with AI” when a provider asks: to provide the service (contract).
• Telling providers why we send back or take down a listing, handling reports of illegal content, and keeping records of both: our legal obligations under the EU Digital Services Act and the Platform-to-Business Regulation.
• Counting click-throughs: our legitimate interest in showing providers, with numbers that never identify anyone, that Enrize Wellness brings them visitors.
• Security and abuse prevention: our legitimate interest in keeping Enrize Wellness safe and working.
• Keeping records of accepted terms: our legitimate interest in being able to show what was agreed, and when.
• Answering your messages: our legitimate interest in replying to you, or our legal obligation when you use your rights below.

Your right to object

Where we rely on our legitimate interest, you can object at any time, for reasons to do with your particular situation: write to hello@enrize.com. We then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims. Click counts never record who you are, so there's nothing in them about you.

Who processes it for us

• Hosting, database, photo storage and sign-in: Supabase, through Lovable Cloud.
• Drafting providers' listings with “Fill it in with AI”: Lovable AI, which uses OpenAI models.
• Receiving and answering emails to hello@enrize.com, including reports: our email provider.

Some of them are outside the EEA, in the United States (OpenAI, for example); for those we rely on adequacy decisions or Standard Contractual Clauses. You can ask us for a copy of these safeguards at hello@enrize.com.

Nobody else gets your personal details. Providers see only counts of 10 or more, never who you are. We give personal details to authorities only where the law requires it, for example if something suggests that someone's life or safety is in danger.

How long we keep it

Listings and the provider's email: while the listing exists. Delete it from your manage link, or ask us, and it's deleted; copies in backups expire within 30 days. A listing that isn't live and hasn't changed for 3 years is deleted automatically, with its photo. Sign-in accounts, with the record of codes you took and of the terms you agreed to: until you ask us to close your account, or 3 years after you last signed in, whichever comes first (an account with a live listing stays while the listing does); then they're deleted.

Our decisions about a listing stay with it and are deleted with it. Messages and reports you send us, and our replies: until the matter is closed, then no longer than 3 years. On your device: the language cookie for a year, the rest until you clear it, sign out or close the tab, as described above.

Your rights

You can ask to see, correct, export or delete your data, and to restrict how we use it, and you can object to it as explained above: write to hello@enrize.com. We answer within a month; if a request is complex, we may take up to two more months and tell you why. You can also complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt) or to the data protection authority where you live or work.

If you live in France, you can also leave us instructions about what should happen to your data after your death, and we'll follow them.

Changes to this policy

If we change this policy in a way that matters, we explain it here before it applies, and the date at the top shows the latest version. Members confirm the new version when they next sign in.