Privacy notice

Last updated [date]

Who we are

Mindshelf is run by [business name], [registered address, Cyprus], [company number]. We are the controller of the personal data described here. Contact: [privacy email].

What we collect and why

• Your account: your email address and a password, which our provider stores only in hashed form. We need these to give you your own account (contract).
• Your progress: the lessons you complete, quiz and exam results, Briefs you write and your settings. We store this so your learning follows you between devices (contract). Nobody else using Mindshelf can see it.
• Payments: if you subscribe, Stripe processes your payment details. We see your subscription status and a customer reference, not your card number (contract and legal obligations such as tax records).

We do not use advertising trackers or analytics cookies, and we do not sell your data.

Who processes it for us

• Supabase (accounts and saved progress), hosted in [EU region].
• Stripe (payments).
• Netlify (hosting the website).
• Google Fonts and jsDelivr deliver the typefaces and a code library, which means your browser contacts their servers. [Consider hosting these files ourselves before launch.]
• Lesson videos are embedded from YouTube and load only when you open a lesson that has them.

How long we keep it

For as long as you have an account. Delete your account from the Me page and your account and progress are erased. Payment records are kept for as long as tax law requires.

Your rights

You can ask for a copy of your data, correct it, delete it, object or restrict how it is used, and take it with you. The Me page lets you back up your progress and delete your account yourself. You can also complain to the Commissioner for Personal Data Protection in Cyprus, or your local regulator.