01Who is responsible
- Trading name
- LALICIC METHOD
- Controller
- Branko Lalicic
- Address
- Mojkovačka 89, 81250 Cetinje, Montenegro
02What is collected
When you buy
Your name, email address and payment details go to our payment provider, Creem (Armitage Labs OÜ, Estonia). Card numbers never reach us — we see only the name, contact address and which program was bought, so a code can be issued to you.
When you use the app
- Your name and contact address, as given at purchase.
- Your access code, which program it opens, and when it was redeemed.
- A random device identifier stored on your phone, so your code works on your phone and not on someone else's. It is not linked to your phone number, your advertising ID or anything Apple or Google holds.
- Your training log: sets, weights, repetitions and effort ratings, with the date.
- Your weekly check-in answers: sleep, energy, soreness, bodyweight and any notes you write.
When you message
If you contact Branko on WhatsApp, that conversation is kept in his WhatsApp account so he can follow your training over time. If you would rather it were deleted, say so and it will be.
There is no analytics on this site, no advertising pixel, no tracking cookie and no newsletter list. Nothing about you is sold, rented or shared for marketing.
03Why, and on what legal basis
- To deliver what you bought — issuing your code, opening your program, keeping your training log. Basis: performance of our contract with you.
- To coach you — reading your check-ins and adjusting advice. Basis: performance of our contract, and your consent for anything you volunteer in a message.
- To stop code sharing — the device identifier. Basis: our legitimate interest in not having the programs handed around for free.
- To keep records — proof of purchase and tax records. Basis: legal obligation.
04Who else processes it
These companies handle data on our behalf so the app can work. Each is bound to process it only for that purpose.
- Creem
- Payments, invoicing and sales tax. Armitage Labs OÜ, Estonia — acts as merchant of record for card purchases and is named on the checkout and on your receipt.
- Supabase
- The database holding your code, training log and check-ins.
- Netlify
- Hosting for this site and the app.
- Bunny.net
- Delivery of the exercise videos.
- WhatsApp (Meta)
- Messaging, if you choose to use it.
Some of these operate servers outside Montenegro, including in the EU and the United States. Where data leaves the country it is transferred under the standard contractual protections those providers offer.
05How long it is kept
- Training logs and check-ins: for as long as your access lasts, then up to 12 months, so your history is still there if you buy a second program.
- Purchase records: as long as tax law requires.
- WhatsApp conversations: until you ask for them to be deleted.
06Your rights
You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, object to how it is used, or ask us to send it to you in a portable file. Write to the email above and expect an answer within 30 days. There is no charge.
Deleting your training data ends your ability to use the app, since the code and the log are the same record. We will tell you before doing it.
If you are unhappy with how we handle your data you can complain to the Agency for Personal Data Protection and Free Access to Information of Montenegro, or to the data protection authority where you live.
07Storage on your phone
The app saves a few things locally so it opens where you left off: your device identifier, which program you are in, and your position in the current session. This sits in your browser's own storage, not in a cookie, and clearing your browser data removes it.
08Changes
If this policy changes, the date at the top changes with it. If a change materially affects what happens to your data, we will tell you by email.