Privacy policy

Who runs Hootly

Name

Dóczi Adrián Márk (sole trader)

Registered address

6449 Mélykút, Kinizsi utca 13., Magyarország

Registration number

61820539

Tax number

91744496-1-23

Email

tanulopont@mail.com

Phone

+36703150345

What we handle and why

• Account: name, username, email address, encrypted password, a hashed recovery code, and your two-step verification secret if you use it. We need these to provide the service you signed up for (GDPR 6(1)(b)).
• Profile: anything you choose to add, such as a picture, school, grade, location, phone number, date of birth or bio. You control what others see under Privacy.
• Studying and shared content: decks, quizzes, notes, results, streaks and badges (GDPR 6(1)(b)).
• Community: posts, comments, follows, blocks, reports and private messages (GDPR 6(1)(b)).
• Wellbeing: mood entries, gratitude entries, habits, journal entries and questionnaire results. These can reveal information about your health, so we handle them only with your explicit consent (GDPR 9(2)(a)). You can withdraw it at any time by deleting the entries or your account.
• AI conversations: what you send to Hootly AI Agent and its answers.
• Payments: credit balance, plan and payment history, and Stripe identifiers. Stripe handles your card details, and we never see them. We keep billing records to meet our legal obligations (GDPR 6(1)(c)).
• Contact messages: what you send us through the contact form, so we can answer.

Children

If you're under 16, a parent or legal guardian has to give or approve consent to this processing, especially for wellbeing data. We can't fully verify this, so parents and guardians are responsible for giving consent and supervising use.

How long we keep it

• Until you delete it or your account. Deleting your account takes effect immediately.
• When you delete your account, we delete your profile, private entries, results, credits, AI conversations, reviews and contact messages, and replace your name, email and username with anonymous values.
• Notes, decks, posts and comments others can already see stay under the name "Deleted user". Messages you sent stay in the conversations of the people you sent them to.
• Billing records are kept for 8 years under Hungarian accounting law.

Who else processes data

• Stripe Payments Europe Ltd.: payments.
• OpenRouter, Inc. (USA) and the AI model providers it routes to: what you send to Hootly AI Agent and answers you submit for AI feedback. We use free AI models, and their providers may store this text and use it to improve their models. Data may leave the European Economic Area. Do not write personal details there.
• Our hosting provider: stores and serves the service.

We don't use analytics or advertising tools such as Google Analytics or Facebook Pixel.

Security

Passwords are stored with one-way hashing, and traffic is encrypted with HTTPS. Access is limited by role. If a breach is likely to put your rights at risk, we report it to the Hungarian data protection authority (NAIH) within 72 hours. If the risk is high, we also tell you on Hootly.

Your rights

• See the data we hold about you and get a copy. You can download it under Security in Edit profile.
• Correct inaccurate data, most of it directly in Edit profile.
• Delete your data, under Security in Edit profile.
• Take your data elsewhere in a machine-readable format (JSON).
• Object to or restrict processing where the GDPR gives you that right.
• Withdraw consent at any time. This does not affect processing before the withdrawal.

For anything else, write to the email address above. We answer free of charge within one month, which we can extend by two months for complex requests, in which case we'll tell you within the first month.

Complaints

You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or go to the court of your place of residence.

• NAIH, 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu, +36 1 391 1400