Privacy

Your data is yours. Here we explain what we store and why.

Last updated: 8 August 2026. An honest 5-minute read.

1. Data controller

Startidea — Mario Pablo Sánchez Barrón.
Granada, Spain.
Email: hola@startidea.es

2. What data we collect

Account: name, email, encrypted password.
Optional profile: city, age, interests, goals.
Platform use: diagnostics, roadmaps, messages with the AI mentor, check-ins, goals, challenges.
Billing: if you activate Pro, Stripe handles the payment data. We only store the customer ID and the subscription status.
Technical: IP address, browser, access date. Anonymised after 90 days.

We do not collect data from minors under 14. We do not process special categories of data (health, religion, etc.).

3. What we use it for

To provide the service you have contracted (mentoring, mentor, community).
So the AI mentor gets to know you and personalises its support.
To send you transactional notices (welcome, sessions, streak).
To improve the method using aggregated, anonymous data.
To measure visits, sign-ups and completed diagnostics attributable to the Spotify campaign, only with your consent.

Legal basis: performance of the contract (art. 6.1.b GDPR) and informed consent for optional communications.

Transparency about artificial intelligence

In compliance with the European AI Regulation (Regulation (EU) 2024/1689, art. 50), we inform you that:

You are talking to an AI: the mentor is an artificial intelligence system, not a person. This is clearly indicated when you start using it.
AI-generated content: the letters, portraits, summaries, game questions and other texts or audio produced by the system are marked as AI-generated. They may contain errors.
Signals from your conversations: we use AI to analyse the text of your conversations with the mentor to detect topics and interests that help us support you better. We do not use biometric emotion recognition (neither by voice nor by image). We do not infer or store data about sexuality, childhood or clinical health.
It does not replace professional help: the mentor is not a medical, psychological or legal service.
Your rights: you can object to this processing, ask us not to generate signals, and request the deletion of existing ones by writing to us.

Legal basis for signal analysis: legitimate interest and/or your consent (art. 6 GDPR), revocable at any time.

4. Who we share it with

Strict data processors needed to provide the service:

Hostinger (server hosting, Europe).
Stripe (payments, US, under Standard Contractual Clauses).
Resend (email sending).
OpenRouter / Anthropic / OpenAI (processing of AI mentor messages, no retention).
UploadThing (file storage where applicable).
Spotify (attribution of visits, sign-ups and completed diagnostics for the campaign, only if you accept all cookies).

We do not sell your data. After your consent, Spotify may receive your IP and, for sign-ups or diagnostics linked to an account, your email normalised and protected with SHA-256. It never receives your diagnostic answers, profile, journal, goals or conversations with the mentor.

5. How long

For as long as your account is active. If you delete it, we remove your data within a maximum of 30 days, except for what the law requires us to keep (billing: 6 years).

6. Your rights

Access, rectification and erasure: directly from your profile.
Portability: download your data in JSON from your profile.
Objection and restriction: write to us at hola@startidea.es.
Withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
Lodge a complaint with the AEPD (Spanish Data Protection Agency, aepd.es).

7. Cookies

We use cookies that are strictly necessary to keep your session active. We do not use marketing or third-party cookies without your consent. See the cookie policy for more detail.

8. Changes

If we change something important, we will notify you by email. The current version is always available at this URL with its date.

2. What data we collect

Account: name, email, encrypted password.

Optional profile: city, age, interests, goals.

Platform use: diagnostics, roadmaps, messages with the AI mentor, check-ins, goals, challenges.

Billing: if you activate Pro, Stripe handles the payment data. We only store the customer ID and the subscription status.

Technical: IP address, browser, access date. Anonymised after 90 days.

We do not collect data from minors under 14. We do not process special categories of data (health, religion, etc.).

3. What we use it for

To provide the service you have contracted (mentoring, mentor, community).

So the AI mentor gets to know you and personalises its support.

To send you transactional notices (welcome, sessions, streak).

To improve the method using aggregated, anonymous data.

To measure visits, sign-ups and completed diagnostics attributable to the Spotify campaign, only with your consent.

Legal basis: performance of the contract (art. 6.1.b GDPR) and informed consent for optional communications.

Transparency about artificial intelligence

In compliance with the European AI Regulation (Regulation (EU) 2024/1689, art. 50), we inform you that:

You are talking to an AI: the mentor is an artificial intelligence system, not a person. This is clearly indicated when you start using it.

AI-generated content: the letters, portraits, summaries, game questions and other texts or audio produced by the system are marked as AI-generated. They may contain errors.

Signals from your conversations: we use AI to analyse the text of your conversations with the mentor to detect topics and interests that help us support you better. We do not use biometric emotion recognition (neither by voice nor by image). We do not infer or store data about sexuality, childhood or clinical health.

It does not replace professional help: the mentor is not a medical, psychological or legal service.

Your rights: you can object to this processing, ask us not to generate signals, and request the deletion of existing ones by writing to us.

Legal basis for signal analysis: legitimate interest and/or your consent (art. 6 GDPR), revocable at any time.

4. Who we share it with

Strict data processors needed to provide the service:

Hostinger (server hosting, Europe).

Stripe (payments, US, under Standard Contractual Clauses).

Resend (email sending).

OpenRouter / Anthropic / OpenAI (processing of AI mentor messages, no retention).

UploadThing (file storage where applicable).

Spotify (attribution of visits, sign-ups and completed diagnostics for the campaign, only if you accept all cookies).

6. Your rights

Access, rectification and erasure: directly from your profile.

Portability: download your data in JSON from your profile.

Objection and restriction: write to us at hola@startidea.es.

Withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

Lodge a complaint with the AEPD (Spanish Data Protection Agency, aepd.es).