Privacy Policy

1. Controller

The controller of personal data processed on LeaderDojo is Aleksandar Vučetić, an individual (natural person) based in the Republic of Serbia, acting on his own behalf as the current operator of LeaderDojo.

Privacy contact: aleksandarvucetic@yahoo.com.

2. Information we collect

• Account and authentication information: your e-mail address, your password in encrypted form, or, if you sign in with Google, the identity information Google returns (e-mail address and basic profile data). Authentication is handled by our authentication provider; we do not store your password in readable form.
• Professional profile information: full name, company, business e-mail, job position, country, industry, optional avatar image, and your verification status within the community.
• User-generated content: success stories and their fields (challenge, industry, company size, implementation steps, difficulties, results, lessons learned, referenced tools, and any photos or documents you attach), comments, ratings and reviews of knowledge objects, knowledge entries you create, and challenge outcome debriefs (whether the challenge was solved, tools used, measurable improvement, implementation time, what did not work, lessons learned, industry).
• Challenge and AI interaction data: the challenge sessions you create, including the title and the challenge text you submit to the AI advisor and to Ask Sensei.
• Academy progress: which house and tool lesson you viewed or marked as learned, and the related timestamps, plus your community rank and experience points.
• Executive Assistant information: the activities you record (kind, title, date, time, duration, priority, recurrence, reminder setting, notes, completion status) and your assistant preferences (habit profile, time zone, last carry-over date).
• Platform activity and analytics: page views, including the page path, an anonymous visitor identifier, a session identifier, your user identifier when signed in, the referring page, your browser language, approximate device type and browser family, and an approximate country and city derived from your browser time zone. No third-party advertising or tracking network is used.
• Legal acceptance records: your user identifier, the Terms of Use version accepted, the Privacy Policy version acknowledged, the language used and the timestamps of each.

3. Why we process this information

• To create and secure your account and to authenticate you (performance of the contract with you).
• To operate the community: display your profile, stories, comments, ratings, ranks and contributions to other members (performance of the contract).
• To provide AI-assisted guidance, the Academy and the Executive Assistant, and to synchronise your data across your devices (performance of the contract).
• To build collective community knowledge from shared implementations and outcomes (legitimate interest in operating a knowledge community; you decide what you share).
• To measure platform usage and improve the service through aggregated analytics shown in the internal Command Center (legitimate interest).
• To moderate content, prevent abuse and keep the community professional and safe (legitimate interest and legal obligation).
• To evidence acceptance of the Terms of Use and acknowledgement of this Privacy Policy (legal obligation and legitimate interest).

4. What is visible to others

Content you choose to publish — such as success stories, comments, ratings and your public profile information — is visible to the community according to the platform's access rules and its publication status. Your Executive Assistant data, your Academy progress and your account information are private to you and accessible to the platform administrator only where necessary for operating and moderating the platform.

5. Storage and processors

• Data is stored in the managed Supabase infrastructure provided through Lovable Cloud (database, authentication and file storage), protected by row-level security rules that restrict each record to the account entitled to it.
• AI features are provided through the Lovable AI Gateway, which routes prompts to the underlying model provider (Google Gemini models). The text you submit to AI features is transmitted for the purpose of generating a response.
• Google is a processor for sign-in only where you choose Google authentication.
• No advertising networks, no social-media pixels and no third-party analytics services are used.

6. Retention

Account, profile, Academy, Executive Assistant and acceptance data are kept while your account exists and are deleted or anonymised after account deletion, except where a longer period is required by law or to defend legal claims.

Published community content may remain available where it has become part of the collective knowledge base; it can be removed or anonymised upon request. Analytics page views are retained in aggregated form for statistical purposes.

7. Your rights

Subject to applicable data-protection law, you have the right to access your data, to rectify inaccurate data, to erasure, to restriction of processing, to object to processing based on legitimate interest, and to data portability. Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, or to request deletion of your account and associated data, contact aleksandarvucetic@yahoo.com. You also have the right to lodge a complaint with your competent supervisory authority.

8. Security

Access to data is protected by authenticated access, role-based permissions and row-level security rules, encrypted transport (HTTPS) and encrypted storage of credentials by the authentication provider. Administrative access is limited to what is necessary for operating and moderating the platform. No system can be guaranteed to be completely secure.

9. Cookies and local storage

• Authentication: your session is stored by the authentication provider in the browser so you stay signed in.
• Language preference: your chosen interface language is stored locally in your browser.
• Analytics identifiers: an anonymous visitor identifier is stored in local storage and a session identifier in session storage, used only for internal usage statistics.
• No advertising or cross-site tracking cookies are used.

10. Children

LeaderDojo is intended for professional use by adults and is not directed at children.

11. Changes to this Policy

This Policy may be updated. The version number and dates at the top of this page always show the current version. Material changes will be communicated through the platform.