Data Privacy

1. Data controller

The controller responsible for processing personal data in connection with this website and the app services is:

Email: kontakt@neuroo.de

For questions about this privacy statement or to exercise your rights, please contact us at the email address above.

2. Scope

This statement applies to data we process when you:

• visit our website at neuroo.ch (or related domains);
• create or use a neuroo account (website or mobile app);
• contact us via email, live chat, or contact form;
• subscribe to updates or newsletters
• use neuroo app features (quizzes, exercise generation, focus tracking, study scheduling, and related tools).

3. Categories of personal data

Depending on how you interact with neuroo, we may process the following categories of data:

• Identity and contact data: name, email address, school or institution (if provided).
• Account data: login credentials (stored in encrypted form), account preferences, and usage settings.
• Communication data: messages you send us, support tickets, and chat transcripts.
• Learning and usage data: study activity, quiz results, focus sessions, schedules, and content you generate in the app.
• Technical data: IP address, browser type, device information, timestamps, and server log files collected when you access our website.

4. Purposes of processing

We process data mainly for the following purposes:

• provide, operate, and improve our services and products;
• create and manage user accounts and user authentication;
• marketing and service-related communication (e.g. account confirmations, security notices);
• troubleshoot technical issues and ensure security of our users' accounts;
• comply with legal obligations.

5. Legal basis

Under the FADP, we process personal data where:

• processing is necessary to perform a contract with you or to take steps at your request before entering a contract;
• we have a legitimate interest that is not overridden by your rights (e.g. securing our services, improving products, responding to support requests);
• processing is required by law.

6. Third party services

We do not use third-party services to collect or analyse data for marketing or tracking purposes.

We use a hosting provider to operate this website. The hosting provider may automatically process technical information—such as IP addresses, request times, browser details, or error logs—as part of normal server operation and security. This processing is limited to what is necessary to deliver and protect our website.

We distribute our apps through the Apple App Store and Google Play Store. For our mobile apps and related backend services, we use Google Firebase as a provider (e.g. for authentication, app infrastructure, and service delivery). We require these services for our technical infrastructure.

7. Data transfers outside Switzerland

Some of the service providers listed above—including Google Firebase, the Apple App Store, and the Google Play Store—are not based in Switzerland or the European Union. We are aware that data transfers to non-EU providers are not ideal regarding data privacy and we aim to work towards alternative solutions once our business has grown.

8. Retention

We retain personal data for as long as necessary for the provision of our services, unless a longer period is required by law.

• Account data is kept for the duration of your account and deleted or anonymised within a reasonable period after account closure, unless legal retention duties apply.
• Support and contact messages are typically retained for up to 12 months after the enquiry is resolved.
• Server logs are generally retained for up to 90 days for technical reasons.

9. Your rights

Under the FADP, you have the right to:

• request information about whether and how we process your personal data;
• request access to data we hold about you;
• request correction of inaccurate data;
• request deletion of data where applicable;
• request that processing be restricted in certain circumstances; and
• receive data you provided in a commonly used electronic format, where technically feasible (data portability).

To exercise these rights, please send us an email at kontakt@neuroo.de.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. We encourage you to use a strong, unique password for your neuroo account and to keep it secret.

11. Children

neuroo is designed for learners and educational use. If you are under 14, please use our services with the involvement of a parent, guardian, or teacher. If you believe we have collected data from a child without appropriate consent, contact us and we will take steps to delete it.

12. Changes to this statement

We may update this privacy policy to reflect changes in our services or legal requirements. The current version will always be available on this page.