This policy explains what data NeuroRenova collects, why it collects it, who it is shared with, and what you can request at any time.
The data controller is [to be set in the admin panel], tax ID [to be set in the admin panel], located at [to be set in the admin panel]. For any privacy matter, write to [to be set in the admin panel].
1. The data we collect
Account data. Your email address — the same one used at checkout — and the name you want to be called. Your email is what identifies you: we do not use passwords.
Data you give the app. Age, weight and height, when you fill in the ritual calculator, and your answers to the memory profile questionnaire.
Usage data. Protocol days completed, tasks checked, memory exercise results, lessons watched, and your language and text size preferences.
Technical data. IP address and the time of sign-in attempts, kept to stop brute-force attacks against your account.
Purchase data. The payment platform tells us that a purchase was approved, the order identifier and the product bought. We never receive or store card details.
2. Sensitive data: why we ask for it
Age, weight, height and your memory answers are health-related personal data. They exist for one reason only: to calculate your ritual and show your progress inside the app.
The legal basis is your consent, given when you fill those fields in. Filling them is optional — the app works without them, using a general ritual range.
This data is never sold, rented, shared for advertising, or used to target ads.
3. Why we process each type of data
Performance of a contract: giving you access to what you bought, saving your progress and keeping the app running.
Consent: health data from the calculator and the questionnaire; any communication that is not about your access.
Legitimate interest: access security, fraud prevention, and improving the product using aggregate data that does not identify anyone.
Legal obligation: keeping the records required by applicable law.
4. Who we share it with
We share the minimum necessary, and only with those who run the service: the payment platform, the hosting provider, the email service that delivers your access code, and the video service that delivers the lessons.
We may also share data when ordered by a court or a competent authority.
We do not sell your data. We do not trade it. We do not hand it to third parties so they can advertise to you.
5. Cookies and measurement
We use strictly necessary cookies to keep you signed in, remember your chosen language and enforce the sign-in attempt limit. The app does not work without them.
Audience and advertising measurement tools on the public sales pages only load after you accept them. Declining does not stop you from using the app.
6. How long we keep it
Account and progress: while your access is active, and for up to 12 months afterwards.
Access codes: 15 minutes, deleted once used.
Sign-in records (IP and time): 6 months.
Purchase records: for the period required by tax law.
7. Your rights
At any time, free of charge, you can: confirm whether we process your data; access it; correct it; request deletion of data processed on the basis of consent; request portability; withdraw consent; and object to processing you consider unlawful.
To exercise any of these, write to [to be set in the admin panel]. We reply within 15 days.
You may also complain to the data protection authority in your country.
8. Security
Access always travels over HTTPS. The session lives in a signed cookie that page scripts cannot read. Every database query is parameterised, and sign-in is rate limited by email and by IP address.
No system is perfect. If an incident could pose a meaningful risk to you, we will notify you and the competent authority.
9. Minors
NeuroRenova is not intended for people under 18 and does not knowingly collect data from minors. Any such account we find will be removed.
10. Changes to this policy
If this policy changes in a meaningful way, we will tell you in the app or by email before the change takes effect. The date at the top shows the current version.