Who handles the data?
Y Innovation Lab Kft. · 1103 Budapest, Gergely utca 112/C S2/1. · HU32543003. Contact and data protection requests: szundi@gmail.com. This notice applies to the plan selection and the launch notification on the marketing website. The app's data handling is described in a separate notice.
What do we record when you choose a plan?
The selected plan, the trial, monthly or annual period, the price of the offer, the language and the time. The selection gets a random identifier. We save it even if you do not give an email address. The purpose is to measure interest in the offers. We do not connect it to an app account, and we do not store an IP address, a device fingerprint or a browsing history with it. We keep a selection without an email address for a maximum of 90 days. The total number of interested people can remain after that. The legal basis of this measurement is our legitimate interest in developing the offers; you can object at the contact address.
What happens when you ask for a notification?
We add your email address, the time of your consent and the version of the notice to the selection. We use the data to tell you about the launch, based on your consent. We do not start a payment or a subscription, and we do not create an app account. We keep the data for a maximum of 12 months, or until you withdraw your consent earlier. You can ask for deletion or withdrawal at the contact address; withdrawal does not affect the lawfulness of the earlier data handling.
Where is the data?
Cloudflare, Inc. (United States) operates the website and the signup database with its Workers and D1 services. To serve requests and to limit abuse, Cloudflare handles network data, including the IP address. We do not copy the IP address into the signup database. Cloudflare can process data internationally; the provider's data processing terms and transfer safeguards apply. The authorised staff of the operator can access the list; it cannot be queried publicly.
Cookies and tracking
This signup process does not use analytics or advertising cookies, browser tracking identifiers, advertising pixels or session replay. We record only the plan selection that you send and the notification signup that you give voluntarily. The provider can apply network security measures.
What are your rights?
You can ask for access, correction, deletion and restriction of the data handling. You can withdraw your consent, and you can object to data handling based on legitimate interest. Under the applicable conditions, you can also ask for data portability. You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu), or go to court. The address of the notification page contains the random identifier of the plan selection; to identify a selection without an email address, give this identifier.
szundi@gmail.com · Privacy · Cloudflare DPA · NAIH
The voice assistant of the website
We can also save experiences and claims about other apps in a separate table for market research and product development. In this case, we store the full text transcript of that utterance without change, so it can also contain personal details. These are not verified facts, and they are not anonymous question records. We keep the quote without a time limit, also after the call and the transcript are deleted. While the transcript is kept, its random link key can lead back to the call; deleting the call removes this link, but it does not delete the text of the quote. You can also separately ask us to delete personal data in the quote, at the contact address above.
You can ask for the conversation with the start button, after the information in advance. The AI assistant presents the product and answers your questions. Do not give personal health information.
The website links the plan selection and the successful submission of the notification form to the active call. So the assistant can help with the next step. We do not send the email address that you give in the form to the voice model.
xAI processes the sound of the microphone. Cloudflare relays the connection, and we store in a D1 database the text transcript, the times of the utterances, the duration of the call, its close reason, its technical error signals and the identifier of the AI settings used. Oregano Prime does not save raw audio. The operator also receives the full transcript at szundi@gmail.com, through Resend. We use the data to understand the questions, to analyse errors and to improve the assistant. The AI and the transcript can make mistakes.
A random visitor identifier made from the session and the plan chosen during the call link the calls. If you give an email address in the notification form, the call can also be linked to that address. This is not a login, not a verified identity, and we do not link it to your app account. The email address does not go to the voice model.
We keep the transcript and the linkable call data for 90 days; the daily deletion task removes them within at most one more day. After a successful database and email save, the temporary transcript of the call handler is deleted. If the email fails, we try to send it again for at most 23 hours. If the database fails, the durable save queue can keep the transcript until the 90-day limit. The sent email is a separate copy in the operator's mailbox. You can ask for deletion at the contact address above.
We record unanswered product questions separately for the developers, in a general form, without names, contact details and personal health details. The question record does not contain a visitor or email identifier. While the transcript is kept, its random link key can lead back to the call. After the call is deleted, this link stops; the general question can stay to improve the product.
To limit misuse, the system uses a temporary session cookie and an IP fingerprint that changes every day and is made with a secret salt. The providers' own data processing also applies; the voice connection does not mean a zero-retention promise from the providers. You can end the conversation at any time.