Last updated: 9/19/2026
This policy explains what personal data we collect through the SolviroX app, how we use it, how it is protected, and your rights under the General Data Protection Regulation (GDPR, EU 2016/679) and Belgian data-protection law.
1. Data controller
SolviroX, based in Belgium. Data-protection contact: privacy@solvirox.be.
2. Data we collect
- Account data: email address and username.
- Module progress: completed modules, quiz scores, XP, daily streak and level.
- In-app activity: technical events required for operation (authentication, errors).
- Consent preferences: your choices for cookies, notifications and emails.
- Payment data (if you choose Premium): processed by authorized payment providers; we do not store card data.
3. Purpose of processing and legal basis
- Providing the service (performance of contract).
- Saving progress and personalising the experience (performance of contract).
- Training and marketing communications (only with your consent).
- Security, fraud prevention and legal compliance (legitimate interest / legal obligation).
4. Storage and transfer
Data is stored securely on our cloud provider's infrastructure within the European Union. Connections are encrypted (HTTPS/TLS), passwords are hashed with secure algorithms, and database access is protected by strict access policies (Row-Level Security).
5. Retention period
We keep your data for as long as your account is active. When you delete your account, your personal data is irreversibly removed within a reasonable period, except for data we are legally required to keep (e.g. invoicing).
6. Your GDPR rights
- Right of access to your data.
- Right to rectification of inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to data portability.
- Right to object and to withdraw consent at any time.
- Right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA).
7. Account deletion
You can delete your account and all associated data at any time from Settings → Danger zone → Delete account. This action is irreversible.
8. Cookies
We use strictly necessary cookies for authentication. Analytics or marketing cookies are only enabled after your explicit consent. See Cookie Policy.
9. Product analytics and UX improvement (PostHog)
To understand how the app is used and to improve the user experience (UX), we use PostHog EU (PostHog BV / infrastructure hosted in the European Union, Germany). PostHog is enabled only if you accepted the Analytics cookies in the consent banner.
- What we collect: pages visited, interaction events (clicks, training-session progress), device and browser type, and anonymised session recordings (Session Replay).
- Identification: if you are signed in and have consented, we link events to your account ID and email address so we can correlate progress with usability issues.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Storage: exclusively on PostHog servers in the European Union (Germany). No transfer outside the EU.
- Withdrawing consent: you can disable analytics at any time from the cookie banner/settings. On withdrawal, collection stops immediately, PostHog cookies are cleared and identification is reset.
- No automated decisions: the data is not used for profiling with legal effects or for advertising.
10. Minimum age
The service is intended for people at least 16 years old.
11. Support contact
For any request regarding your data, write to privacy@solvirox.be. We reply within 30 days.