Privacy Policy

1. Data controller

LEDTIME SOFTWARE PRO Ltd, Chytron 12, Block B, Office 305, 1075, Nicosia, Cyprus, is the controller of personal data processed through MATRIX HEALTH (the "Service").

For any privacy question or request, write to TimeSoftwarepPRO@gmail.com.

2. Data we process

Account data: your name, email address, profile picture and account identifier received from Google when you sign in, plus a username and optional specialties you choose yourself.

Service data: your training history, completed sessions, app settings, language, vocabulary progress, reviews and ratings you publish, roles (for example moderator) and subscription status.

Sign-in log: date and time of sign-in, a device identifier generated by the app, and a general device label (for example phone, tablet, laptop). This lets you see where your account is used.

Usage statistics: anonymised page views with referrer, campaign parameters, general device type and country. They are not used to identify you personally.

If you use the Service without signing in, training history and settings stay on your device and are not sent to us.

3. Why we process it and on what legal basis

To provide the Service and sync your data across devices — performance of our contract with you (Art. 6(1)(b) GDPR).

To publish your reviews and show your public profile in the community — performance of our contract and your consent (Art. 6(1)(a)-(b) GDPR).

To keep the Service secure, prevent abuse and moderate content — our legitimate interests (Art. 6(1)(f) GDPR).

To measure aggregated usage and improve the Service — our legitimate interests (Art. 6(1)(f) GDPR).

To process Premium subscriptions and comply with accounting duties — contract and legal obligation (Art. 6(1)(b)-(c) GDPR).

4. Who we share data with

Google, when you choose to sign in with Google, processes your sign-in according to its own privacy policy.

Our hosting and cloud database providers process data on our behalf as processors, under agreements that include the safeguards required by the GDPR.

Where personal data is transferred outside the European Economic Area, the transfer relies on adequacy decisions or Standard Contractual Clauses.

We do not sell your personal data and do not use it for third-party advertising.

5. How long we keep it

Account and service data are kept while your account exists. When you delete your account, your profile, training history, settings, reviews, roles and subscription records are deleted, normally within 30 days, except where we must keep limited records to comply with legal obligations.

Sign-in log entries are kept for a limited period for security purposes. Aggregated usage statistics are kept in anonymised form.

6. Your rights

Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to withdraw consent at any time, and to receive your data in a portable format.

You can delete your account and data yourself at any time from the profile screen. For any other request, write to us and we will reply within one month.

If you believe your data is processed unlawfully, you may lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or with the supervisory authority of your country of residence.

7. Cookies and local storage

We use only technically necessary storage: a session cookie or token that keeps you signed in, and browser local storage that keeps your settings, offline training history and a device identifier. We do not use advertising or third-party tracking cookies.

Clearing your browser storage removes locally stored data, including the training history of a guest session.

8. Children

The Service is not intended for children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Security

Data is transmitted over encrypted connections and access to it is restricted by row-level access rules and role-based permissions. No online service can be guaranteed to be completely secure, but we take reasonable technical and organisational measures to protect your data.

10. Changes to this policy

We may update this Privacy Policy. Material changes will be announced in the Service, and the date below will be updated.

11. Contact

LEDTIME SOFTWARE PRO Ltd, Chytron 12, Block B, Office 305, 1075, Nicosia, Cyprus. Email: TimeSoftwarepPRO@gmail.com.