Money Score
Draft

Privacy notice

This notice explains, in plain English, how we handle your data under UK GDPR.

Who we are

The data controller is Kai Hisham Mahjouri-Crommer, a sole trader trading as Mizr. Contact: hello@mizr.co.uk.

What we collect

Your result includes pillar scores, a total and a personality. Individual answers stay in your browser during the quiz and are never sent to or stored in our database.

If you create or complete a partner link, we store these scores and an optional first name or nickname. We store a hash of a secret creator token to recognise the creator; the token stays on your device and in your creator link.

If you unlock your report, we store your email, marketing choice and timestamps, not your personality or total. If you consent to marketing, we keep a record of when and how you consented: the exact checkbox wording, its version and the time, plus whether double opt-in has been confirmed.

If you join the Mizr Home waitlist, we store your email and optional first name.

Why we use it and our legal bases

Showing your result: your answers are processed in your browser. Nothing is stored in our database unless you choose partner comparison or email unlock. Your scores stay in your browser for this session; a local record keeps the same report unlocked after a refresh. Your full report is shown here on screen only, not emailed.

Partner comparison: we store the scores and optional nickname because you asked us to create or complete a link. Our legal basis is legitimate interests in providing the comparison you requested.

Email unlock record: your email is needed to unlock the full report, which is shown here on screen and not emailed. We store your email, marketing choice and timestamps to keep the unlock record. Our legal basis is legitimate interests in keeping that record.

Marketing emails: consent, only if you tick the separate, optional box. We keep a record of when and how you consented. Repeat submissions update the unlock record; leaving the box unticked does not withdraw existing consent. You can withdraw consent at any time by emailing hello@mizr.co.uk. Email sending is not currently enabled; no reports or marketing emails are being sent.

Mizr Home waitlist: consent, given when you choose to join, to tell you about launch. No launch emails are currently being sent. You can withdraw consent at any time.

Your partner link

Anyone who has your partner link can see the nickname(s), personality names and scores for that link, never individual answers. Only share it with your partner. Keep your creator link secret: it identifies you as the creator and is not the link to send to your partner.

We never ask your religion

The quiz never asks about your faith or beliefs.

Data minimisation

We collect only what we need. We never store individual quiz answers. Fonts are self-hosted, so no visitor data goes to Google Fonts.

Who processes data for us

Lovable provides hosting and the database provider is Supabase. They process data on our behalf to run the app.

Where data is stored and international transfers

Our database is provided by Supabase through Lovable Cloud and is hosted on Amazon Web Services in the US East (N. Virginia) region (us-east-1), so your data is transferred to the USA.

Lovable and Supabase process data for us under data processing agreements that include the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of these safeguards at hello@mizr.co.uk.

Hosting and server logs

When you visit, our hosting and database providers (Lovable and Supabase) automatically record technical logs, such as your IP address, browser type, the pages or requests made and the time, to run the service, keep it secure and fix problems. These logs are kept by those providers for a limited period under their own retention policies. Our legal basis is legitimate interests in running a secure service.

How long we keep it

Partner comparisons, email unlock records and waitlist entries are kept for 12 months from when they were created. An automatic daily deletion job removes records older than 12 months; deletion can therefore take up to one extra day.

Your score is stored in your browser for the current tab session. The report unlock marker and creator token remain in your browser's local storage until you clear the site's data; a new quiz has its own unlock marker.

Your rights

You can request access, correction or deletion, object to processing based on legitimate interests, or withdraw marketing or waitlist consent at any time by emailing hello@mizr.co.uk. Withdrawing consent does not affect processing before withdrawal.

You can complain to the Information Commissioner's Office at ico.org.uk.

Your right to object

Where we rely on legitimate interests (partner comparison, the unlock record and server logs), you can object at any time by emailing hello@mizr.co.uk. We will stop processing unless we have compelling grounds to continue.

You can object to direct marketing at any time and we will always stop.

We never sell your data

We don't sell or rent your data to anyone.