Privacy Policy
How the Six Human Needs Test collects, uses and protects your information.
Last updated: September 30, 2026
1. Who we are
The Six Human Needs Test at 6-human-needs.sfwalker.com is run by Igor Turkusic, trading as SF Walker, based in Sarajevo, Bosnia and Herzegovina. He is the controller of your personal data. Contact: info@sfwalker.com.
2. What we collect
- What you give us: your first name and email address, your answers to the 84 test questions, your answers to the short survey after the test, and, if you create an account, your password (stored only as a secure hash by our database provider) and any profile details you add.
- What is created from your answers: your need scores and profile. These are calculated from your answers each time you view your results; they are not stored separately.
- Technical information: your country (derived from your connection, used to show the right offer and to block abuse), your IP address (used for rate limiting and bot protection, not stored with your results), campaign tags if you arrived from a link (utm parameters), and the date and time of each step.
- Only with your consent: Google Analytics usage data (pages viewed, general location, device type). See the Cookie Policy.
3. Why we use it, and the legal basis
- To deliver the test and your results — create your attempt, save your answers, calculate your profile, email your results link. Basis: performance of the service you requested.
- To follow up on your results — emails about your profile and our coaching programs, and, where eligible, an invitation to book a call. You can unsubscribe from any email in one click. Basis: our legitimate interest in following up on a service you requested.
- To keep the service safe and working — bot protection, rate limits, abuse blocking, error monitoring, backups. Basis: legitimate interest in security and reliability.
- To understand how the test is used — Google Analytics, only if you accept. Basis: consent, which you can withdraw at any time via "Cookie settings" in the footer.
We do not sell your data, and we do not use it for automated decisions with legal or similarly significant effects. Your profile is an educational self-assessment.
4. Who processes your data for us
We use these providers to run the service. Each processes data only to provide its service to us.
| Provider | What it does | Location |
|---|---|---|
| Supabase | Database and sign-in | United States |
| Vercel | Website hosting | Global network |
| Resend | Sends your results and account emails | United States |
| Flodesk | Follow-up emails; checkout on our program pages | United States |
| Cloudflare | Bot protection (Turnstile), DNS, encrypted backup storage | Global network |
| GitHub | Runs the nightly encrypted backup job | United States |
| Sentry | Error monitoring, configured to receive no personal data | United States |
| Google Analytics | Usage statistics, only with your consent | United States |
| Calendly | Booking a call, if you choose to; receives an internal reference number so we can link your booking to your results | United States |
| Anthropic | AI tools we use to analyze and operate the service | United States |
5. International transfers
Our providers are located mainly in the United States. Where the law requires it, transfers rely on the providers' data processing terms, including the EU Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider participates.
6. How long we keep it
- Unfinished tests: closed automatically after 30 days.
- Completed results and survey answers: kept so you can return to your results, until you ask us to delete them.
- Email list: until you unsubscribe; deleted on request.
- Backups: encrypted, overwritten on a 30-day cycle.
- Error monitoring (Sentry): kept for Sentry's standard retention period, and contains no personal data.
- Google Analytics: 14 months.
When you ask us to delete your data, we delete it within 30 days, and it leaves our backups within 30 days after that.
7. Your rights
You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw consent at any time. Email info@sfwalker.com; we reply within 30 days. If you are in the EU or EEA, you can also complain to your local data protection authority; in Bosnia and Herzegovina, to the Personal Data Protection Agency.
8. Security
Your data is encrypted in transit and at rest. The database refuses direct changes from the browser; only our server can write. Results links are signed and expire. Access is monitored by automated checks. No system is perfectly secure, and we will inform you and the authorities as the law requires if a breach affects you.
9. Age
The test is intended for individuals aged 16 and over. Individuals under 16 may use it only with the consent of a parent or legal guardian, or under a written agreement between SF Walker and their school or other organization, which is then responsible for obtaining any required consent.
10. Changes
We will update this page when our practices change and show the new date at the top. Significant changes will be announced by email.