Privacy policy

1. Who is responsible

Your data is handled by Minderyx – the operator of minderyx.com, Vilnius, Lithuania (“Minderyx”, “we”). The controller's details are available on request by email; when a legal entity takes over the service, its details will be listed here. For anything about your data write to hello@minderyx.com.

Minderyx and syp.lt run on the same platform and share one account system operated by the same controller.

2. What we collect

Account data: email, password (stored only as a one-way hash), name (if you add one), time zone and language.

Learning settings and progress: chosen topics, goal, daily minutes, completed lessons, answers to checks, review ratings, bookmarks, streak and knowledge-map states.

Tutor conversations: your questions and the answers, so the tutor keeps context.

Technical data: IP address and browser type in server logs (kept up to 30 days), usage events such as “lesson completed” without free text, and security events (sign-ins, failed attempts, password changes).

3. Why and on what basis

To provide the service (GDPR art. 6(1)(b), contract): create your account, choose the next lesson and review time, show progress, answer tutor questions.

Security and quality (art. 6(1)(f), legitimate interest): protect accounts, detect abuse, and measure – in aggregate only – which lessons are understood.

Notifications (art. 6(1)(a), consent): reminders and news only if you turn them on in settings; account emails (verification, password reset) are always sent because the service cannot work without them.

We show no advertising and never sell data.

4. The tutor and your conversations

When you write to the tutor, your message, the current lesson text and your learning goal are sent to a language-model provider to generate the answer. Your email, name or other account data are not sent.

The provider may be outside the EU (currently Groq, Inc., USA); transfers rely on the European Commission’s standard contractual clauses and the provider’s terms prohibit using your prompts to train models. When we run a model on our own server, data does not leave the EU.

Conversations are stored in your account; you can delete any of them, and deleting your account removes them all.

5. Who else sees data

Processors acting only on our instructions: hosting and email – UAB Interneto vizija (Serveriai.lt), Lithuania; the language-model provider – see section 4. We will name the payment provider when paid plans launch.

We disclose data to authorities only under a lawful request.

6. How long we keep it

Account and learning data for as long as you have an account. When you request deletion (Profile → Privacy) the account is locked immediately and all data is erased from every system within 30 days.

Server logs up to 30 days; the security log 12 months; accounting records, once payments exist, as long as Lithuanian law requires (typically 10 years).

Aggregated, de-identified statistics (e.g. how many people answered correctly) are kept indefinitely – they are no longer linked to you.

7. Your rights

You can access your data and get a copy (Profile → Privacy → “Request export” gives you a JSON file immediately), correct it (name and settings in your profile), delete your account (same place), restrict processing, object to processing based on legitimate interest, port your data and withdraw consent at any time.

Send requests to hello@minderyx.com; we reply within 30 days. You may complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or to the supervisory authority of your own EU country.

8. Cookies and browser storage

We use a necessary sign-in session cookie and browser storage for your theme preference. When Google Analytics is configured, visits to public pages are measured only after you allow analytics. You can change your choice using Analytics preferences. Advertising personalization is disabled; account data, URL query parameters and fragments are not included in our analytics events.

9. Age and security

Minderyx is for people aged 16 and over. If we learn that a younger person created an account without parental consent, we remove it.

Data travels only over encrypted connections (TLS), passwords are hashed, server access is restricted, and backups are encrypted and stored in the EU.

10. Changes and contact

When this policy changes we publish the new version here with the date at the top and email you about material changes. Questions: hello@minderyx.com.