Last updated: 25.08.2026
1.1. This Privacy Policy describes how we process your personal data when you use our website and the services we offer through it. We respect your privacy and are committed to protecting your personal data.
1.2. When registering on the site, including via Google login, you are required to review this Privacy Policy and our Terms of Service.
1.3. By using the site, you confirm that you have read this Privacy Policy. Where applicable, you accept the Terms of Service and provide necessary consents through the relevant checkboxes or buttons on the site. Your provided consents are duly stored by the Site Owner.
1.4. Processing of personal data necessary for registration, authentication, maintaining a user profile, security, and provision of services is carried out on an applicable legal basis under the GDPR.
1.5. When you provide special categories of personal data in the course of using the services, including data related to your psychological or emotional state or personal experiences, such data is processed based on your explicit consent where required by applicable law.
1.6. If we have requested your consent for specific processing, you may withdraw it at any time by contacting us at: iaroslav.iatsenko@human.study. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
1.7. The Services are not intended for persons under 16 years of age. If you are under 16, you should not use the site or provide us with personal data. Should you fail to comply with this condition, we shall not be liable for the protection of your personal data to the extent that it has been provided in violation of our documents.
2.1. The Data Controller pursuant to Art. 4(7) of the GDPR is a natural or legal person who determines the purposes and means of processing personal data. The Data Controller of this website is:
Human Study Hub EOOD, UIC 2082679752.2. A data processor within the meaning of Art. 4(8) of the GDPR is a natural or legal person who processes personal data on behalf of the controller. For hosting of the server infrastructure and database, the controller uses the services of Amazon Web Services EMEA SARL, Ireland (eu-west-1), acting as a data processor on behalf of the controller.
3.1. Processing of personal data means, pursuant to Art. 4(2) of the GDPR, any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage and use of such data for a specific purpose.
3.2. When you use our platform, we process the following categories of personal data within the meaning of Art. 4(1) of the GDPR:
When you create an account, we collect your username and email address. This information is used to authenticate your identity and provide our services.
We process the content you create or enter while using the tools on the platform, including desires, reflections, beliefs, and other similar content.
This content is processed in order to provide you with our service.
We process technical data related to the use of the platform, such as browser and device information, user session data, and cookies as described in our Cookie Policy.
We use your personal data for the following purposes:
5.1. We do not sell your personal data or use it for marketing purposes. We may share personal data only in the cases described below, and with the application of appropriate technical and organisational measures for their protection.
5.2. We may share personal data with service providers who assist us in delivering, maintaining, and securing the platform, including providers of hosting infrastructure, authentication services, and email, to the extent necessary for the functioning of the relevant services.
5.3. We may disclose personal data when required by applicable law, by a competent public authority, or when necessary to establish, exercise, or defend our legal rights.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100 % secure.
8.1. We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
8.2. Your account data is retained for the duration of your account's existence.
8.3. User content that you create or enter into the platform is retained for the duration of your account's existence, unless it is deleted by you or by us on an applicable legal basis.
8.4. Technical data is retained for the period necessary for the operation, security, and maintenance of the platform, in accordance with the nature of the respective data.
Our website uses cookies as described in our Cookie Policy.
10.1. We may update our Privacy Policy from time to time.
10.2. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date.
We process your personal data on the following legal bases:
If you believe that your personal data is not being processed lawfully or in accordance with this Privacy Policy or in accordance with your written consent, you have the right to lodge a complaint with the Bulgarian data protection authority:
Commission for Personal Data ProtectionIf you have any questions about this Privacy Policy, please contact us at: Contact Us