Privacy policy

You can read the site without an account: it has no ads and no cookies, and we count visits anonymously. We hold data about you only if you sign up for the emails.

Who is responsible

lifkuru OÜ, registry code 17604498, Keldrimäe tn 2, 10144 Tallinn. For anything about your data: info@lifkuru.com.

What we store

Your e-mail address, the company name if you give one, the page language, the time of consent and the exact wording you agreed to. The subscription starts only after you confirm the address with the link in the e-mail we send. If you ask to be told about a particular measure, we also keep which measure.

Why, and on what basis

To send you the emails about support measures you signed up for. The legal basis is your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time, with the link in any email or by writing to us.

Offers from lifkuru (only with a separate tick)

If you ticked the separate box saying lifkuru may offer help with an application when you subscribed, lifkuru OÜ may occasionally send you such an offer. Without that tick you get no such emails; the measure emails come as usual. The tick is stored with the consent text. Basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time: reply to the email or write to info@lifkuru.com.

Who else handles it

Only services that store and send data on our behalf: Supabase (subscriber database, data centre in Ireland), MailerLite (sending e-mails, Lithuania) and Cloudflare (hosting, bot protection and e-mail forwarding). The data is stored in the EU, but Supabase and Cloudflare are US companies and their staff or subcontractors may access it from the US. Such transfers are covered by the European Commission's standard contractual clauses and the EU-US Data Privacy Framework. We pass the data to no one else and sell it to no one.

Tracking in e-mails

Open tracking is switched off: our e-mails contain no invisible pixel. Links in the e-mails go through MailerLite, which counts clicks; we only look at these numbers in total, to see which measures interest people. Basis: legitimate interest (GDPR Art. 6(1)(f)).

Visit statistics

We count visits with PostHog (data stored in the EU, in Frankfurt) without cookies and without storing anything in your browser: which pages are opened and which links are clicked. We do not know who you are and do not record the screen. To tell visits apart, PostHog derives an anonymous code from your IP address and browser that changes every day. Basis: legitimate interest in knowing which pages are useful (Art. 6(1)(f)). PostHog is a US company; the transfer is covered by the European Commission's standard contractual clauses.

“My businesses” on the match page

If you save businesses on the match page, their names and answers are kept only in your browser (localStorage) and are not sent to us. Delete them with the × button or by clearing this site's data in your browser. The match answers are in the page address so the link can be shared; the business name never goes into the address. Exception: the link in the weekly e-mail (see below) carries your businesses after the # sign, a part of the address that never reaches a server; the page saves them in the browser and removes them from the address at once.

Weekly overview of your businesses

If you subscribed to the overview of your businesses, we keep your e-mail address, language, the business names (up to 40 characters, up to 10 businesses) and the match answers, plus the consent wording and time. They are kept where newsletter subscriptions are kept and passed to MailerLite to send the e-mails. Basis: your consent (Art. 6(1)(a)). The e-mail only comes when there is news; unsubscribe with the link in any e-mail, and ask info@lifkuru.com to delete the data completely.

The register assistant

If you use the assistant in the corner of the page, your messages and the page language are sent to our Cloudflare service and from there to Anthropic's language model (USA; transfer basis: the European Commission's standard contractual clauses). Basis for processing: legitimate interest in answering your question (Art. 6(1)(f)). We do not store the conversation and create no account or cookie. Anthropic keeps messages for a limited time, no longer than 30 days, and does not train models on them. Please do not give the assistant personal data: to find a measure, your field, region and plan are enough.

Bot protection and logs

Before the chat and before a sign-up form is sent, Cloudflare Turnstile checks the page, and the host keeps a technical log like any website (IP address, browser, time). This protects the site from abuse; basis: legitimate interest (Art. 6(1)(f)). Logs are kept as long as Cloudflare keeps them. Cloudflare also uses Turnstile signals in part on its own to recognise bots better: see its Turnstile privacy policy.

Data on grant recipients

On the measure pages we show how many times the funder has awarded the measure and a few recipients from its public list (for example the EIS list): company name, amount and year. Basis: legitimate interest in showing how public money is used (Art. 6(1)(f)); the data comes from public sources, not from you. We do not show the names of sole traders (FIE). Want a record removed or corrected? Write to info@lifkuru.com: a natural person's record is removed at once, an error corrected within a few days.

If you write to us

An e-mail to info@lifkuru.com (a question, an error report, a request to delete data) stays in the mailbox while we deal with it and for up to a year after, so we can return to the history of the matter. Basis: legitimate interest in answering you (Art. 6(1)(f)), and for GDPR requests our legal obligation (Art. 6(1)(c)).

How long we keep it

As long as you are subscribed. After you unsubscribe we keep only the address and the date of unsubscribing for up to three years: proof that consent was given and withdrawn, and a guard against writing to you again. If you ask us to delete it, we remove the address completely from the database and the mailing service.

Your rights

You can ask what data we hold about you, have it corrected or deleted, receive it in a machine-readable form, object to processing based on legitimate interest and withdraw consent (this does not make earlier processing unlawful). Write to info@lifkuru.com; we answer within a month. We make no automated decisions with legal effects. You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Updated 06.11.2026