Privacy Policy

Last updated: 2026-06-04

1. Data controller

S.C. Metis IT&Software S.R.L. (Romania), VAT RO46338515, Trade Register No. J2022000382407, Str. Râmnicu Vâlcea nr. 8, cam. 1, et. 8, ap. 809, Sector 3, București, România, email technical.med.dgc@gmail.com.

2. Data we collect

Account data: email. Usage data: answers, progress, score estimates, interactions with the AI tutor. Payment data: handled by Stripe; we receive only limited information (subscription status), not the card number. Technical data: cookies, basic analytics.

3. Purposes & legal basis

Providing the service (contract performance); improvement & security (legitimate interest); marketing/measurement only with your consent.

4. Processors / third parties

We use: Supabase (database), Vercel (hosting), Stripe (payments), Anthropic (AI processing), ZeptoMail/Zoho (email), Meta (ad measurement, with consent). Some may process data outside the EU (e.g. USA) under appropriate safeguards (Standard Contractual Clauses).

5. Retention

We keep data for as long as your account exists and as required by law. After deletion, data is removed or anonymized.

6. Your rights (GDPR)

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent. Exercise them at technical.med.dgc@gmail.com.

7. Cookies

We use essential cookies and — only with your consent (Consent Mode v2) — measurement/marketing cookies. You can change your choices at any time.

8. Security

We take reasonable technical and organizational protection measures.

9. Complaints

You have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

10. Contact

technical.med.dgc@gmail.com