Privacy policy

Last updated: 13/10/2026

1. Data controller

Mupi Prime Lda, NIF 517629666 , Rua Augusto Rosa ,nº 79 4000-098 Porto . For any question about your data, write to the email address above.

2. What data we process

  • Account: name, email, password (stored encrypted), language; if you sign in with Google, your Google account identifier.
  • Profile and forms: skills, experience, interests, available time, budget, goals, country and plan language, and your answers for each goal.
  • Plans: the plans generated and your checklist progress.
  • Payments and invoicing: name, address, country, VAT number (if you provide it), payment amounts and status. Card details are handled by Stripe; we never see them.
  • Technical data: IP address and access and error logs, for security and to run the service.

3. What we use the data for and on what legal basis

  • Providing the service (account, plan generation, credits) — performance of the contract.
  • Processing payments, issuing invoices and meeting tax obligations — legal obligation and performance of the contract.
  • Sending service emails (email confirmation, payments, end-of-cycle reminders) — performance of the contract.
  • Security, abuse prevention and service improvement — legitimate interest.

We do not sell your data or use it for third-party advertising.

4. Artificial intelligence

To generate a plan, we send the artificial intelligence provider only your profile answers and the goal form. Your name and email are not sent. We recommend that you do not include sensitive personal data in your answers.

5. Who we share data with (processors)

  • Website and database hosting (hosting provider).
  • Artificial intelligence providers: OpenAI (USA) and DeepSeek (China), depending on the model used for the plan.
  • Stripe (payments).
  • Google (only if you sign in with your Google account).
  • Cloudflare Turnstile (protects sign-up against bots: processes your IP address and technical browser data).
  • Email delivery service.
  • Accountants (invoicing data).

6. Transfers outside the EU

Some providers are located outside the European Economic Area. In those cases, transfers are made with the safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission.

7. How long we keep data

  • Account, profile and plans: while the account exists. When you delete your account, they are deleted.
  • Payments and invoicing: for the period required by tax law (usually 10 years), even after the account is deleted.
  • Technical logs: for a short period, for security.

8. Your rights

You can request access, rectification, erasure, restriction and portability of your data, and object to its processing. You can change your profile and delete your account directly on the website. For other requests, contact us. You also have the right to lodge a complaint with the Portuguese data protection authority, the CNPD, or with the authority of your country.

9. Cookies

We only use cookies that are essential for the website to work (session and security). We do not use advertising or analytics cookies. The videos in the FAQ are only loaded from YouTube (privacy-enhanced mode) when you click them.

10. Changes

We may update this policy. The date of the last update is shown at the top of the page.