Privacy Notice
Privacy Notice
How Hyphocus handles account, usage, device, and support information, including purposes, security, retention, and user rights.
Updated
1. Controller and scope
The controller for account-related personal data is Hyphocus, operating Hyphocus, reachable at hyphocus.com and hyphocus.com. This notice applies to personal data processed through Hyphocus account features, support, security, and the website. The Privacy Notice is an information document; it is not bundled consent for optional processing.
2. Data Hyphocus processes
For ordinary registration and profile use, Hyphocus processes the nickname, name/surname, and email address you provide. Hyphocus does not ask for a telephone number or government identity number for ordinary account registration. When you use account features, account-linked goals, focus and break sessions, simulations, report inputs, preferences, optional mood labels, and notes may also be processed. Hosting, authentication, and security systems may generate limited technical records such as IP address, browser/device information, timestamps, and security events.
3. Purposes and legal bases
Personal data is processed only for specified purposes such as creating and maintaining the account, saving and synchronizing selected features, authenticating users, providing support, preventing abuse, securing and troubleshooting the service, complying with legal obligations, and improving core functionality with minimized or aggregated measurements. Depending on the applicable law and activity, the legal basis may be performance of the user agreement, compliance with a legal obligation, a legitimate interest that does not override user rights, or consent where consent is required. Optional marketing, sensitive-data processing, or another materially different purpose is not treated as automatically authorized by account creation.
4. Cookies, local storage, and communications
Strictly necessary cookies or similar storage may be used for authentication, security, language, and user-requested preferences. Non-essential analytics, advertising, or tracking technologies are activated only after any consent required by applicable law and must respect the user’s choice. Service and security messages may be sent when necessary for the account. Marketing messages require the separate legal basis or consent required in the relevant jurisdiction and must provide an applicable opt-out.
5. Service providers, legal disclosures, and sale of data
Personal data may be disclosed to service providers that are necessary for hosting, database, authentication, email delivery, security, error monitoring, or support, subject to appropriate contractual and security controls. Data may also be disclosed when legally required or reasonably necessary to establish, exercise, or defend legal claims. Hyphocus does not sell or rent personal data and does not disclose personal data for third-party targeted or cross-context behavioural advertising unless a future practice is first disclosed and all legally required choices or consents are implemented.
6. International transfers
If a provider or infrastructure component processes personal data outside the user’s country, Hyphocus uses the transfer mechanism, contractual safeguard, adequacy mechanism, notice, and/or separate consent required by the applicable law. Where a jurisdiction requires localization, registration, a local representative, a security assessment, or specific standard clauses, Hyphocus must satisfy that requirement before relying on the affected transfer.
7. Retention and security
Account-linked data is kept only for as long as needed to provide the account and the purposes described above, and then deleted or irreversibly anonymized unless a longer period is required for legal obligations, dispute handling, fraud prevention, or security. Backup copies expire according to the documented backup-rotation cycle and are not used for ordinary product activity. Hyphocus applies technical and organizational safeguards appropriate to the nature and risk of the data, but no online service can promise absolute security.
8. Your privacy rights
Depending on applicable law, you may have rights to be informed, access or obtain a copy, correct, delete, restrict or object to processing, withdraw consent, receive portable data, opt out of certain sharing or targeted advertising, and complain to a competent authority. Hyphocus will not discriminate against a user for exercising a right where such discrimination is prohibited. Requests may be submitted through hyphocus.com or the account tools, and identity verification will be limited to what is reasonably necessary for the request.
9. Children, changes, and contact
Hyphocus accounts are available to users who meet the minimum age or legal-capacity requirements that apply to them. If created without required authorization, Hyphocus may restrict the account and delete affected information as required by law. Material privacy changes are notified when required. Contact: hyphocus.com.