Terms & privacy
The agreements that cover your Cortico account. Last updated 2 July 2026.
- Cortico is responsible for your account data; your club is responsible for its membership records, which we process on the club's behalf.
- Stripe handles card data — we never see your full card number.
- We don't sell personal data, and children's profiles are managed by a parent or guardian.
1. Who is responsible for your data
Cortico B.V. (Amsterdam, the Netherlands) is the controller for your account and for the operation of the platform. For membership records a Club keeps about you (enrolment, attendance, grading, notes and billing status) the Club is the controller and Cortico is its processor under a data processing agreement. Requests about that data are best directed to your Club; we assist them in fulfilling your rights.
2. What we collect
- Account: name, email address, password (stored hashed).
- Family profiles: member names and dates of birth, needed for age-appropriate classes and grading.
- Activity: bookings, attendance, membership plans and payment status.
- Payments: handled by Stripe. We receive confirmation and status, never your full card number.
- Technical: device, browser and usage data for security and to improve the product.
3. Why we use it
- To provide the service — accounts, bookings, memberships, payments (performance of a contract).
- To keep it secure and make it better (legitimate interests).
- To send product updates — only with your consent, and you can opt out at any time.
- To meet legal obligations, such as financial record-keeping.
4. Children
Children's profiles are created and managed by a parent or legal guardian. Children under 16 do not get their own login unless a guardian enables it. We collect no more data about children than is needed to run their classes.
5. Who we share data with
Your Club(s) see the data needed to run your membership. We use a small number of processors — Stripe for payments, and EU-based hosting and email providers — each bound by a data processing agreement. We disclose data to authorities only where legally required. We never sell personal data.
6. International transfers
Data is stored in the EEA. Where a provider processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.
7. How long we keep it
Account data is kept while your account is active and deleted or anonymised within 24 months after closure. Financial records are kept for 7 years as required by Dutch tax law. Data controlled by your Club is retained according to the Club's own policy.
8. Your rights
You can access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time. Email privacy@cortico.app. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your own country.
9. Cookies
We use essential cookies for login and security, and privacy-friendly analytics to understand how the product is used. We do not use advertising trackers.
10. Changes and contact
We'll post updates to this policy here and notify you of material changes. Cortico B.V., Amsterdam — privacy@cortico.app.