Privacy Policy

1. Data controller

myNode Technologies B.V. ("myNode", "we", "us") is the data controller responsible for your personal data. Contact: privacy@mynode.social.

2. What we collect

• Account data: email, display name, date of birth, password (hashed), and for under-18s the parent's email.
• Profile data: handle, avatar, bio.
• Activity data: posts you publish, friends, messages, and the topics you view (used for your personal Interests view).
• Billing data: Stripe customer ID and subscription status. Card details are handled by Stripe — we never see them.
• Consent record: timestamp and policy version when you accept the Privacy Policy and Terms.
• Technical data: session cookies (essential), and minimal logs for security and abuse prevention.

3. Why we use it (legal bases)

• Performance of contract (Art. 6(1)(b) GDPR): running your account, delivering the service, processing your €0.99/month subscription.
• Legal obligation (Art. 6(1)(c)): tax, accounting, lawful requests.
• Legitimate interest (Art. 6(1)(f)): abuse prevention, account security.
• Consent (Art. 6(1)(a)): for under-18s, processing parent confirmation.

Interest tracking: we record which topics you view to build your personal "Your Interests" view. This is a core product feature you knowingly use, processed under contract performance. We do not sell or share this data.

4. Children

myNode is split into kid (0–12), teen (13–17), and adult (18+) spaces. Users under 18 can only register with a parent's email; the parent must confirm before posting, friending, or messaging is unlocked. We rely on parental consent for under-18 accounts.

5. Sub-processors

• Supabase / Lovable Cloud — database & authentication hosting (EU region).
• Stripe — payment processing & merchant of record (handles VAT for the EU).

6. Your rights

You have the right to: access, rectification, erasure, restriction, portability, and objection. You can:

• Download your data at any time from Settings → Download my data.
• Cancel and delete your account at any time from Settings → Cancel & delete — this erases all your data and ends your subscription.
• Contact privacy@mynode.social for any other request.
• Lodge a complaint with your local data protection authority.

7. Retention

We keep your data while your account is active. When you delete your account, we erase your profile, posts, friendships, and interest history immediately. Billing records may be retained for up to 7 years to satisfy tax and accounting obligations.

8. International transfers

Data is stored in the EU. Stripe may transfer billing data outside the EU under Standard Contractual Clauses.

9. Changes

If we materially change this policy, we will notify you in-app and ask you to re-accept.