Privacy Policy for Mindyro

Effective Date: June 30, 2025
Last Updated: June 30, 2025

Riveat Software S.R.L. ("we", "us", "our") operates the Mindyro mobile application (the "App"), which provides guided meditations and summaries of non-fiction books. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

1. Information We Collect

We collect several types of information from and about users of our App, including:

  • Personal Information: When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect payment information through our third-party payment processor.
  • Usage Data: We collect information about how you use the App, such as which meditations or book summaries you access, the time and duration of your sessions, and your interactions with the App's features.
  • Device Information: We collect information about the device you use to access the App, including the device type, operating system, unique device identifiers, and mobile network information.
  • Location Information: With your consent, we may collect your precise location to provide location-based services.

2. How We Use Your Information

We use the information we collect for various purposes, including:

  • To provide and maintain the App's functionality.
  • To process your subscriptions and payments.
  • To personalize your experience and recommend content.
  • To improve the App and develop new features.
  • To send you updates, newsletters, and promotional materials (you can opt-out at any time).
  • To comply with legal obligations and protect our rights.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Contractual Necessity: To provide the services you have requested, such as account creation and subscription management.
  • Consent: For certain data processing activities, such as sending marketing communications or collecting location data.
  • Legitimate Interests: For purposes such as improving the App, preventing fraud, and ensuring network security.

4. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party companies that provide services on our behalf, such as payment processing, data analysis, and hosting.
  • Legal Authorities: If required by law or to protect our rights, we may disclose your information to law enforcement or other governmental authorities.

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. For example, account information is kept as long as your account is active, and usage data may be retained for analytics purposes.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data under certain conditions.
  • Restriction: Request restriction of processing under certain conditions.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to processing based on legitimate interests or for direct marketing.

To exercise these rights, please contact us at support@mindyro.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure that such transfers comply with GDPR requirements, such as using Standard Contractual Clauses or relying on adequacy decisions.

9. Special Categories of Data

The App may collect and process special categories of personal data, such as data concerning health, if you choose to provide such information. For example, if you track your meditation sessions or mood, this may be considered health data.

We process this data based on your explicit consent, which you provide when you agree to this Privacy Policy and use the App's features that collect such data.

You can withdraw your consent at any time by contacting us at support@mindyro.com, but this may affect your ability to use certain features of the App.

10. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 16, you must have parental consent to use the App. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete that information.

11. Tracking Technologies

The App may use tracking technologies, such as analytics tools, to collect usage data. These technologies help us understand how users interact with the App and improve our services.

You can manage your preferences for these technologies through the App's settings or by adjusting your device settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Riveat Software S.R.L.
Email: support@mindyro.com
Address: Str. Dambovitei, Nr.48a, Et.2, 310001 Arad, Romania

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local supervisory authority.