Terms & privacy
The agreements that cover your Cortico account. Last updated 2 July 2026.
- Cortico is responsible for your account data; your club is responsible for its membership records, which we process on the club's behalf.
- Stripe handles card data — we never see your full card number.
- We don't sell personal data, and children's profiles are managed by a parent or guardian.
1. Who is responsible for your data
Cortico, a sole proprietorship (eenmanszaak) registered in Amsterdam, the Netherlands (KvK no. 98055313), operates this platform and is the controller for your account and for the operation of the platform. For membership records a Club keeps about you (enrolment, attendance, grading, notes and billing status) the Club is the controller and Cortico is its processor under a data processing agreement. Requests about that data are best directed to your Club; we assist them in fulfilling your rights.
2. What we collect
- Account: name, email address, password (stored hashed).
- Family profiles: member names and dates of birth, needed for age-appropriate classes and grading.
- Medical & safety notes: allergies and medical conditions you choose to add for a member, collected with your explicit consent and used only to help the Club keep them safe during activities.
- Activity: bookings, attendance, membership plans and payment status.
- Payments: handled by Stripe. We receive confirmation and status, never your full card number.
- Technical: device, browser and usage data for security and to improve the product.
3. Why we use it
- To provide the service — accounts, bookings, memberships, payments (performance of a contract).
- To keep it secure and make it better (legitimate interests).
- To send product updates — only with your consent, and you can opt out at any time.
- To meet legal obligations, such as financial record-keeping.
4. Children
Children's profiles are created and managed through a parent or legal guardian's own account. A family member does not get a separate login of their own through this platform. We collect no more data about children than is needed to run their classes.
5. Who we share data with
Your Club(s) see the data needed to run your membership. We use a small number of processors — Stripe for payments, and EU-based hosting and email providers — each bound by a data processing agreement. We disclose data to authorities only where legally required. We never sell personal data.
6. International transfers
Data is stored in the EEA. Where a provider processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.
7. How long we keep it
Account data is kept while your account is active and deleted or anonymised within 24 months after closure. Financial records are kept for 7 years as required by Dutch tax law. Data controlled by your Club is retained according to the Club's own policy.
8. Your rights
You can access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time. Email privacy@cortico.app. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your own country.
9. Cookies
We use essential cookies for login and security. We do not use advertising trackers or analytics.
10. Changes and contact
We'll post updates to this policy here and notify you of material changes. Cortico, Amsterdam — privacy@cortico.app.