LEGAL

Privacy Policy

Last updated: 19 July 2026 · Version 1.0
⚠️ Draft — pending legal review

A complete base document, but it must be reviewed by a lawyer before publication. This is especially important here because cognitive results may be considered health data (a special category) and because there is a programme for minors.

At Neuro Sports Solutions ("NSS") we treat your personal data with the care it deserves. This policy explains what we collect, what for, who we share it with and what rights you have.

01Data controller

02What data we collect

CategoryDataSource
IdentificationFirst name, last name, email, password (encrypted)You, when you register
ProfileAge or date of birth, sport, level, goals (optional)You
Use and performanceExercise results, scores, reaction times, accuracy, progress, completed protocolsGenerated as you use the Platform
BillingPlan purchased, payment history, country. Card details are processed by Stripe; we do not store themStripe
TechnicalIP address, browser, device, date and time of accessAutomatic
CommunicationsEmail if you subscribe to the newsletter; enquiries you send usYou
🧠 About your cognitive data

Exercise results (attention, memory, reaction time, accuracy) describe your cognitive performance. Under applicable law, and especially when use takes place in a rehabilitation or clinical context, they may be considered sensitive data / health-related data and enjoy reinforced protection.

For that reason: we process them with restricted access, we do not sell them, we do not use them for advertising, and we do not share them with third parties except as indicated in section 04. If a professional or institution assesses you through NSS, that professional accesses your results in their capacity as controller or joint controller of the processing.

03What we use your data for and on what legal basis

PurposeLegal basis
Creating and managing your account; providing the service to youPerformance of the contract
Recording results and showing you your progressPerformance of the contract · consent where health data is processed
Charging the subscription and issuing receiptsPerformance of the contract · legal obligation
Support and communications about the servicePerformance of the contract
Newsletter and updatesConsent (revocable at any time)
Security, fraud and abuse preventionLegitimate interest
Statistics and product improvement, using aggregated and anonymised dataLegitimate interest

We do not sell your personal data and we do not transfer it to third parties for advertising purposes.

04Who we share it with

Only with the providers needed to deliver the service, acting as data processors:

International transfers

Some providers are located outside your country of residence. Where the law requires it, those transfers are covered by standard contractual clauses or other valid mechanisms.

05How long we keep it

06Your rights

You may exercise your rights at any time to:

Write to us at info@neurosportssolutions.com. We will reply within the statutory time limits (10 calendar days in Argentina for access requests; 1 month in the EU).

Complaints: in Argentina you may complain to the Agencia de Acceso a la Información Pública (AAIP, the Argentine data protection authority). In the European Union, to the supervisory authority of your country.

07Minors and NSS Kids

The Platform is not intended for minors to purchase on their own. The NSS Kids programme is always purchased and managed by a mother, father or legal guardian, who:

If we detect that a minor has registered without their guardian's authorisation, we will delete the account and its data.

08Cookies and similar technologies

We use only what is essential for the site to work:

TypeWhat forRequires consent?
Technical / sessionKeeping you logged in and securing the formNo (they are necessary)
PaymentStripe uses them to process payment and prevent fraudNo (they are necessary)
Analytics / marketingNot currently usedYes — they will require your prior consent
If you later enable the Meta pixel or Google Analytics

Those tools do require prior consent in the European Union. Before installing them, a real cookie banner must be added (one that blocks the script until the user accepts) and this table must be updated.

09Security

We apply reasonable technical and organisational measures: encrypted connection (HTTPS), passwords stored using hash functions, restricted access to the data and backups. No system is infallible; in the event of a security incident affecting your data, we will notify you in accordance with applicable law.

10Changes to this policy

We may update this policy. If the changes are substantial, we will notify you by email or through a prominent notice on the Platform, at least 15 days in advance.

11Contact