Privacy Policy

This policy explains how NeuroReset (neuro-reset.eu) collects, uses and protects your personal data, in accordance with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is Mateusz P., Poland (the "Operator"). For any privacy matter, contact kontakt@neuro-reset.eu.

2. What data we collect and why

• Account data — your name, email address and a securely hashed password. Purpose: providing your account and access to purchased content. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Onboarding answers — your responses to the short questionnaire (goals, usage preferences). Purpose: understanding your needs and improving the service. Legal basis: legitimate interest (Art. 6(1)(f)); answering is voluntary.
• Subscription data — your subscription status, plan, billing period and payment-provider identifiers. Purpose: granting access you paid for. Legal basis: performance of a contract.
• Technical data — standard server logs (IP address, browser type, timestamps) kept briefly by our hosting provider for security and reliability. Legal basis: legitimate interest.

We never see or store your card details. Payments are processed entirely by Lemon Squeezy (see below).

3. Who processes data on our behalf

• Lemon Squeezy (Lemon Squeezy LLC) — payment processing and subscription billing, acting as Merchant of Record. Card data is handled solely by them.
• Vercel — website hosting and file storage (audio, images).
• MongoDB Atlas — database hosting (EU region, Frankfurt).
• Resend — transactional email (e.g. password resets), EU region.

Some providers may process data outside the EEA; where that happens it is covered by appropriate safeguards (EU Standard Contractual Clauses or adequacy decisions).

4. Cookies

We use a single essential authentication cookie to keep you logged in. We do not use advertising or cross-site tracking cookies, which is why you do not see a cookie consent banner.

5. How long we keep your data

Account data is kept for as long as your account exists. If you delete your account, your personal data and questionnaire answers are erased immediately; payment records are retained by the payment provider as required by tax and accounting law.

6. Your rights

• Access, rectification and erasure of your data;
• Restriction of, or objection to, processing;
• Data portability;
• Lodging a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).

You can delete your account (and with it your personal data) at any time on your account page, or by emailing kontakt@neuro-reset.eu.

7. Changes

We may update this policy as the service evolves; material changes will be announced on this page with an updated date.