Psyque.net ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use OriginDot, including any mobile, web, or API interfaces (collectively, the "Platform"). By accessing or using OriginDot, you agree to this Policy.

1. Our Guiding Principles

Privacy by design. Our systems are built from the ground up to protect your information.
We do not sell your data. Ever.
We do not profile you for advertisers. Our business model is subscription-based, so we do not need to.
We practice data minimization. We only collect the data necessary to provide and improve our service.
We are transparent. We aim to be clear about our data practices.

2. Information We Collect

We collect the following types of information:

Account Information: When you create an account, we collect a username, primary email address, and a hashed password. We also collect account settings and preferences, plus subscription status and related billing state (not full payment card details).
Age Verification Information (Roadmap): Where required by law and/or when enabled in the future, your email address or other identifiers may be used to initiate a third-party age verification check. Data used for age verification is processed only for that purpose and legal compliance, and we may retain verification records as required by law or for fraud prevention.
User-Generated Content: Any content you create or share on the Platform, such as posts, messages, comments, profile information, uploaded media, and documents.
Well-being Dashboard Data: You may have access to a well-being dashboard to monitor your digital habits. This data is for your use, stored locally on your device, and is not used by us for any other purpose.
Technical & Usage Information: We may collect basic log data for security and operational purposes, such as your IP address, browser type, and interactions with the Platform. This data is used for troubleshooting, security monitoring, and performance diagnostics.
Analytics (Consent-Based): We use Google Analytics 4 only if you provide explicit consent through our cookie banner. When enabled, analytics may process data such as truncated IP address, approximate location, device/browser information, pages visited, and interaction events to help us improve the Platform. If you reject analytics cookies, this processing does not occur.

3. How We Use Your Information

We use your information for the following purposes:

To Provide and Maintain the Service: To operate the Platform, authenticate you, and display your content.
To Manage Accounts and Subscriptions: To manage your account settings, subscription status, and billing state.
To Communicate With You: To send you service-related notifications, updates, or respond to your support requests.
For Security and Safety: To protect the Platform and our users from fraud, abuse, and security risks.
To Improve the Platform: We may use aggregated and anonymized data to understand how our Platform is used and how we can improve it.
Tracking: We do not use device identifiers, advertising identifiers, or any personal data for cross-app or cross-website tracking purposes. We do not sell user data or share it with third parties for advertising.

4. Legal Basis for Processing (GDPR)

If you are in the EU/EEA or UK, we process personal data under one or more of the following legal bases:

Performance of a contract (Art. 6(1)(b) GDPR): to provide your account and the Platform services you request.
Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable legal and regulatory requirements.
Legitimate interests (Art. 6(1)(f) GDPR): for platform security, fraud prevention, service integrity, and operational diagnostics.
Consent (Art. 6(1)(a) GDPR): for non-essential cookies and analytics (Google Analytics 4). You may withdraw consent at any time via Cookie Settings without affecting processing carried out before withdrawal.

4.1 Data Controller Information

Controller: Felix Cabello

Registered address: Torrevieja, Calle Los Gases 52, Spain

Tax/VAT ID: Z2853462H

General privacy contact: privacy@psyque.net

Data Protection Officer (if appointed): dpo@psyque.net

5. How We Share Your Information

We do not share your personal data with third parties, except in the following limited circumstances:

With Your Consent: We may share information if you give us your explicit consent to do so.
Service Providers: We may use third-party service providers for functions like payment processing, hosting, email delivery, or age verification (if enabled). These providers are contractually obligated to protect your data and are not permitted to use it for their own purposes.
For Legal Reasons: We may disclose your information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request.

6. International Data Transfers

Some of our providers may process personal data outside the EU/EEA, including in the United States. Where this occurs, we apply appropriate safeguards under GDPR Chapter V, such as an adequacy decision (including the EU-US Data Privacy Framework, where applicable) and/or Standard Contractual Clauses with supplementary measures when required.

7. Data Security

We implement modern technical and organizational measures to protect your information and reduce the risk of unauthorized access, loss, or misuse.

8. Data Retention

We retain personal data as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Operational logs are retained for up to 90 days unless a longer period is required for security or legal compliance. If you delete your account, we will delete or de-identify your personal data, except where retention is required by law or for legitimate business purposes (e.g., security or fraud prevention).

9. Your Rights (GDPR Compliance)

As a user, you have rights over your personal data. In line with GDPR, these rights include:

The right to access: You can request a copy of the personal data we hold about you.
The right to rectification: You can request that we correct any inaccurate or incomplete data.
The right to erasure ("right to be forgotten"): You can request that we delete your personal data.
The right to restrict processing: You can request that we limit the processing of your personal data.
The right to data portability: You can request that we provide you with your data in a structured, commonly used format.

You also have the right to withdraw consent at any time for consent-based processing (for example, analytics cookies) through Cookie Settings.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with your local supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es.

To exercise your rights, please contact us at privacy@psyque.net.

10. Age Requirements and Verification

OriginDot does not allow users below the minimum legal age (16 or the applicable local legal minimum, whichever is higher). Age verification is on our roadmap. If required by law and/or if enabled in the future, you may be asked to complete a third-party age verification process to access certain features. If verification is completed, we may retain a record of verification as required by law or for fraud prevention.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, through a notification on the Platform.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at privacy@psyque.net.

Data Protection Officer (Spain/EU): dpo@psyque.net for GDPR and data residency inquiries.

Privacy Policy for OriginDot