Privacy Policy - Website

Only the German version is legally binding. The English translation is provided for convenience and is not legally binding.

1. Information on the Collection of Personal Data

This privacy policy describes how we collect, use, and share your personal data when you use our website. Our aim is to inform you about our data processing activities and to fulfill our legal obligations, particularly those under the EU General Data Protection Regulation (GDPR).

Personal data refers to any information that can be related to you personally.

The controller pursuant to Art. 4 (7) GDPR is Pyros Labs – Marijan Divkovic, Cotheniusstraße 4, 10407 Berlin, support@pyroslabs.com (see our imprint: https://www.prayfocus.app/de/imprint) (hereinafter also referred to as "we," "us," or "our").

2. Your Rights

2.1 You have the following rights with regard to your personal data that we process:

2.1.1 Right of access (Art. 15 GDPR)

2.1.2 Right to rectification (Art. 16 GDPR)

2.1.3 Right to erasure ("right to be forgotten") (Art. 17 GDPR)

2.1.4 Right to restriction of processing (Art. 18 GDPR)

2.1.5 Right to data portability (Art. 20 GDPR)

2.1.6 Right to object to processing (Art. 21 GDPR)

2.1.7 Right to protection against automated decision-making (Art. 22 GDPR)

2.1.8 Right to withdraw consent under data protection law

2.1.9 Right to lodge a complaint with a supervisory authority regarding our processing of your data

2.2 You are welcome to contact us regarding these matters at support@pyroslabs.com.

3. Data Security

We implement appropriate technical and organizational measures to protect your data from manipulation, loss, destruction, or unauthorized access. In doing so, we take into account the state of the art, implementation costs, as well as the nature, scope, context, and purpose of processing. We also regularly assess the risks of potential data breaches, including their likelihood and possible impact. Our security measures are continuously updated in line with technological advancements.

4. Objection or Withdrawal of Consent to Data Processing

4.1 If you have consented to the processing of your data, you may withdraw this consent at any time. The withdrawal takes effect from the time you inform us and applies to the future processing of your data. The lawfulness of processing carried out up to the time of your withdrawal remains unaffected.

4.2 If we process your personal data on the basis of a balancing of interests, you may object to this processing. We perform such a balancing in particular when we process your data in the public interest or on the basis of our legitimate interests. Please state the reasons in your objection as to why you oppose the processing of your data in its current form. We will review your objection and either cease or adjust the processing, or explain our compelling legitimate grounds that justify continuing the processing.

4.3 You may, of course, object at any time to the processing of your personal data for advertising and data analysis purposes.

4.4 To submit an objection or withdraw consent, please contact us at support@pyroslabs.com.

5. Retention Period of Your Personal Data

5.1 Unless a more specific retention period is stated in this privacy policy, we store your personal data only for as long as necessary to fulfill the purposes for which it was collected. This includes compliance with legal, tax, and accounting obligations. In determining the appropriate retention period, we consider the scope, nature, and sensitivity of the data, the potential risk of unauthorized use or disclosure, the purposes of processing, whether those purposes can be achieved by other means, and applicable legal requirements.

5.2 Your personal data is always anonymized so that it can no longer be linked to you. In such cases, we may use this data without further notice to you.

5.3 If you have any questions regarding the storage of your personal data, please feel free to contact us at support@pyroslabs.com.

6. Data Processing by Third Parties

6.1 We may engage external service providers to process your data, for example, providers responsible for operating the website, handling data processing, or managing payments. These service providers are carefully selected, bound by our instructions, and regularly monitored.

6.2 The legal basis for engaging external service providers is Art. 6(1)(b) or (f) GDPR, or, where consent has been obtained, your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

6.3 If any of our service providers are located outside the European Union (so-called third countries), we will inform you of this in the respective function description below. Some third countries have a level of data protection deemed adequate by the European Commission. A list of these countries and copies of the adequacy decisions can be found here: Adequacy decisions. In other third countries, a consistently high level of data protection may not be guaranteed. In such cases, we ensure that appropriate safeguards are in place, for example, through the European Commission's Standard Contractual Clauses pursuant to Art. 46(1) and (2)(c) GDPR.

7. Processing of Personal Data When Visiting Our Website

7.1 When you use our website purely for informational purposes, that is, when you visit our site without registering or otherwise providing us with information, we automatically collect the following personal data, which your browser transmits to our server:

7.1.1 Your IP address

7.1.2 Date and time of the request

7.1.3 Time zone difference from Greenwich Mean Time (GMT)

7.1.4 Websites accessed by your system through our website

7.1.5 Access status / HTTP status code

7.1.6 Amount of data transferred

7.1.7 Websites from which your system accesses our website

7.1.8 Location data, including data from your mobile device

7.1.9 Information about browser type, as well as language and version of the browser software, and

7.1.10 Your operating system

7.2 These data are technically necessary to display our website to you and to ensure the stability and security of the system.

7.3 The legal basis for processing these data is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a functional and secure website.

7.4 The data are deleted as soon as they are no longer necessary for the purpose for which they were collected.

8. Hosting

8.1 The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States. Vercel is used for website hosting. Details on the data processing carried out by the provider can be found in the provider's privacy policy: https://vercel.com/legal/privacy-policy.

8.2 The legal basis for the processing of the mentioned data is Art. 6(1)(f) GDPR or, where consent has been obtained, your consent pursuant to Art. 6(1)(a) GDPR. Our legitimate interest lies in providing a functional and secure website. Where consent has been obtained, you may withdraw it at any time.

8.3 The data collected by Vercel are generally transmitted to and stored on a server in the United States. For data transfers to the U.S., the European Commission adopted an adequacy decision on July 10, 2023. Vercel is certified under the EU–US Data Privacy Framework.

9. Additional Features and Services of Our Website

In addition to the purely informational use of our website, we offer further features that you may use if interested, which are described in more detail below. As a rule, this requires you to provide additional personal data, which we process in order to provide these features. The general principles outlined above (e.g., regarding retention periods, your rights, and rights of objection or withdrawal) apply to such data processing unless explicitly stated otherwise below.

10. Analytics Tools

10.1 We use analytics tools to design our website according to user needs and to continuously improve its usability and performance.

10.2 Umami Analytics

10.2.1 To improve and optimize our website, we use the privacy-friendly, open-source analytics tool Umami, which we host ourselves on our own infrastructure. More information about Umami: https://umami.is

10.2.2 Umami is cookie-free and does not store any personal data. No IP addresses, unique identifiers, or cookies are used.

10.2.3 Only anonymous, aggregated information is collected, such as:

  • Pages visited and their sequence
  • Referrer (if available)
  • Timestamp and time zone
  • Browser type and device (aggregated)
  • Interactions with page elements (e.g., clicks on buttons or links), without linking them to individual users

10.2.4 The goal is the anonymous measurement of page views and website performance without creating user profiles. Since no personal data is processed, no consent is required. The processing is carried out based on legitimate interest in accordance with Art. 6(1)(f) GDPR (website optimization). As Umami is self-hosted, all analytics data remains on our own infrastructure and is not shared with third parties. For more information: https://umami.is/docs

11. Subscription to Our Newsletter

11.1 If you have expressly consented pursuant to Art. 6(1)(a) GDPR, we use your email address to send you our newsletter regularly.

11.2 Your email address will be deleted once it is no longer necessary for the purpose for which it was collected. Accordingly, your email address will be stored for as long as your newsletter subscription remains active.

11.3 You may unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request by email at any time (preferably with the subject line: "Unsubscribe Newsletter").

12. Contact via Email

When you contact us by email or through a contact form, the data you provide (your email address, and if applicable, your name and phone number) are stored by us in order to respond to your inquiries. The data processing for the purpose of contacting us takes place in accordance with Art. 6(1)(a) GDPR on the basis of your voluntarily given consent.

You may withdraw your consent at any time. The data collected in this context will be deleted once storage is no longer necessary, or, if the inquiry is related to a contract, after the contractual retention periods have expired. If statutory retention obligations exist, we will restrict the processing of the data instead of deleting it.

13. Updates and changes to this privacy policy

As our website and the services we offer continue to develop, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.

Last updated: October 12, 2025

Contact Information:
Marijan Divkovic
Cotheniusstraße 4, 10407 Berlin, Deutschland
E-Mail: support@pyroslabs.com