Your data, handled with care
Privacy notice
Last updated: 26 September 2026
This site is a concept for the Lovable x Contra competition, not an active practice. Please don't enter real sensitive information about your child or family — use made-up examples instead.
Families trust us with personal things. This notice explains, in plain words, what data this site processes, why, and what rights you have under the General Data Protection Regulation (GDPR).
Who is responsible
The controller is Tine Vanherle, Neyora Connect, Herk-de-Stad, Belgium. Questions or requests: hello@neyoraconnect.live.
What we collect
Booking details: parent name, email, phone number (optional), preferred time and language.
Intakes: the parent's and the child's or teen's answers, and the parent's consent.
Family space: practice activity answers, drawings and figure boards made in a session.
Accounts: email address and login data for parents and practitioners.
Payments: handled by Stripe. We never see or store card numbers.
Technical data: basic logs needed to keep the site secure and working.
Why and on what basis
To arrange and prepare a session (performing an agreement, Art. 6(1)(b) GDPR).
To process intake answers about a child, which we only do with a parent's explicit consent (Art. 6(1)(a), Art. 9(2)(a) and Art. 8 GDPR). In Belgium, children under 13 need a parent or guardian to consent for them.
To keep the site safe and prevent misuse (legitimate interest, Art. 6(1)(f)).
We never use your data for advertising and never sell it.
Who helps us
Hosting and database (Lovable Cloud), email delivery, Stripe for payments, and an AI service that helps phrase intake follow-up questions. They only process data on our instructions, under data-processing agreements. Where data leaves the EU, standard contractual clauses apply.
How long we keep it
Demo data may be deleted at any time. In a real practice, session records would be kept only as long as needed and as the law requires, and deleted on request where possible.
How we protect it
Private storage, access limited to the practitioner and the family, encrypted connections, and short-lived codes for a child's device instead of separate child accounts.
Your rights
You can ask to see, correct, delete or export your data, limit or object to its use, and withdraw consent at any time. Email hello@neyoraconnect.live and we'll reply within one month.
You may also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.
Cookies
We only use cookies and local storage that are needed to keep you signed in and remember your language. No tracking or advertising cookies.