Privacy Notice

A) Controller & contact

B) What data we process

• Account data (for example: email, authentication identifiers)
• Circle and content data (for example: items, notes, metadata)
• Usage data (for example: basic logs)
• Device/technical data (for example: IP address, user agent), if applicable

C) Purposes of processing

• Provide the service (authentication, circles, storage and retrieval) — legal basis: <Art. 6 basis>
• Security and abuse prevention — legal basis: <Art. 6 basis>
• Support requests — legal basis: <Art. 6 basis>
• Product improvement and analytics (only if used) — legal basis: <Art. 6 basis>

D) Legal bases (GDPR Art. 6)

• Contract (service delivery)
• Legitimate interests (for example: security, limited analytics) with balancing assessment
• Consent (for optional cookies or analytics, if used)
• Legal obligation (if applicable)

E) Cookies & similar technologies

We use strictly necessary cookies for authentication and session continuity. If non-essential analytics cookies are used, we ask for consent before setting them.

• Cookie banner / consent manager: <status or link>
• Cookie preferences page: <link, if implemented>

F) Sharing / processors

We may use service providers to operate Moryen, such as hosting providers, authentication/email providers, and analytics providers (if used).

• Subprocessors list: <link or section to maintain>

G) International transfers

If personal data is processed outside the EEA, we apply appropriate safeguards (for example, Standard Contractual Clauses), as applicable.

H) Retention

We keep data as long as needed to provide the service and meet legal obligations. Specific retention rules: <retention periods for account data, support data, backups, and deletion timelines>.

I) User rights (EEA)

Depending on your circumstances, you may have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent where processing is based on consent.

• Request channel: <privacy contact email>
• Response timeline target: <for example, within 1 month>
• You also have the right to lodge a complaint with your supervisory authority (for example: Finland, Office of the Data Protection Ombudsman).

We aim to respond to privacy requests within one month, as required by applicable data protection laws.

J) Security

We use reasonable technical and organizational measures to protect personal data. No method is perfectly secure, but we continuously work to reduce risk.

K) Children

Moryen is not intended for children under <minimum age>. If you believe a child provided personal data, contact us.

L) Changes to this notice

We may update this notice as the product evolves. We will post updates on this page and update the date below.