Privacy Policy

ADAQNO is a trading name of ADAQNO Kft., a limited liability company established in Hungary.

ADAQNO Kft. is the data controller for the personal data described on this page, and answerable for it. That includes students who come to us through a partner university: you have your own account with us, and we decide how your data is used, not the university. For anything to do with your data, write to privacy@adaqno.com. We have not appointed a Data Protection Officer, because the GDPR does not require one for what we do.

We offer the service to people in many countries. We are established in Hungary, in the European Union, so the EU General Data Protection Regulation (GDPR) governs how we handle your data wherever you live, and the Hungarian data protection authority, NAIH, is our lead supervisory authority. Where the law of your own country also protects your data, you keep that protection too — see Your rights.

• Your email address, so you can sign in and so we can send you receipts, sign-in links and a note when your report is ready. If you sign in with Google, we receive your email address from Google — not your password.
• Your assessment answers, including the free-text answers about your interests, values and ambitions, and your answers to the follow-up questionnaire if you take it.
• The reports we generate for you, so you can read them again later from your history.
• Ratings and comments you choose to leave about how accurate a report felt.
• Your purchase history — what you bought, when, and for how much. We never see or store your card number; Stripe handles that.
• Which partner university you joined through, if any. We work this out from the domain of your confirmed email address (the part after the @), and we use it to give you the university’s free access and to count you in its anonymous totals.
• Your language — English or Spanish — so the site and your report are written in it. If you pick one with the language switch, a cookie remembers it.
• Your approximate country, worked out by our hosting provider from your connection, used only to show the right helplines if your answers suggest you may be struggling. We do not store it.
• Technical records — your IP address and browser details, in server and error logs. We use these to keep the service running and to stop abuse.

We do not ask for your date of birth, your home address, or any identity documents, and you should not put them in a free-text answer.

The free-text questions ask what you have struggled with, what you are afraid of, and what you want your life to look like. Some people answer those with information that counts as special category data under Article 9 of the GDPR — most often about health or disability.

We do not ask for it, we do not want it, and nothing in the scoring model looks for it. But if you volunteer it, we necessarily process it in order to produce the report you asked for.

Where that happens we rely on your explicit consent under Article 9(2)(a), given by choosing to include that information after being asked here not to. You can withdraw it at any time by deleting the answer or your account. None of it ever reaches your university.

A questionnaire that asks students what they have failed at will sometimes receive answers describing real distress. So that the service does not respond to a disclosure of that kind by cheerfully listing job clusters, your free-text answers are checked against a fixed list of phrases, in English and in Spanish, that may indicate self-harm or suicidal thoughts. If one matches, we show support information above your report and instruct the AI to write in a gentler register.

You should know exactly what this is and is not:

• It is a keyword check, not an assessment. It will miss things, and it will sometimes fire on innocent phrasing.
• The result is never stored. It exists for the length of one request and is then gone — not written to our database, not attached to your account, not visible to anyone, and never passed to your university.
• It does not block or delay your report, and it does not change your career results.
• It does not alert us, and no human is notified. We do not monitor individuals.

The helplines we show depend on where you are: the country of your partner university if you have one, otherwise the approximate country of your connection. Where we have no local list we show an international directory.

We designed it this way deliberately: an inference about someone’s mental health is special category data, and storing one would create a record about you that you never asked us to make.

If you are in danger right now, call your local emergency number — 112 anywhere in Europe, 999 in the UK.

Your answers are processed by an artificial intelligence system. When you ask for a report, we send OpenAI your assessment answers, including the free text, your career scores, and the language you use the site in. For the follow-up roadmap we also send your follow-up answers and the first report, so the roadmap can build on it. If you came through a university, we tell the AI which country the university is in, so that its advice fits where you study. This is the core of what the product does, so there is no way to use the service without it.

We do not send your name, your email address, your payment details, your account identifier or your IP address.

OpenAI processes this data on our instructions, as our processor, under its Data Processing Addendum. Under its API terms, data sent through the API is not used to train its models; OpenAI keeps it for up to 30 days to detect abuse, and then deletes it. Its processing takes place in the United States.

AI-generated text can be wrong, and sometimes confidently so. Your report is information to think about, not professional careers advice, and never a prediction of what will happen to you. See our Terms of Service for what that means.

A career questionnaire is only as good as the evidence behind it. The only evidence we have is what people actually answered and what they thought of the reports, so we study the answers and results we already hold in order to make the service better. We would rather say so plainly here than describe it vaguely as “analytics”.

What we actually do with it

• Find questions that are confusing, badly worded, or that nobody answers, and rewrite or remove them.
• Check whether the scoring model produces sensible results, and change the weights behind it where it does not.
• Look at where reports are weak, repetitive or unhelpful, and improve the instructions we give the AI that writes them.
• Read the ratings and comments people leave on reports, and work out what they have in common.
• Understand which parts of the service people give up on, and fix those parts.

How we do it

• Wherever the question can be answered with figures, we use figures — counts, averages and patterns across many people, not a tour through individual accounts.
• Where we do need to look at the content of answers, we work from data with the identifying details stripped out: no email address, no name, no account identifier, no payment record.
• We may use AI tools to do this reading. It is not practical to read thousands of free-text answers by hand, so we may ask an AI system to summarise themes and patterns across them. That goes to the same provider listed below, under the same terms, and it sees the answers without the details that identify you.
• Nothing we learn is published in a form that could identify you, and no individual report or answer is ever shown to anyone outside ADAQNO.

Sensitive information is left out

If you volunteered special category information in a free-text answer — most often about health or disability — that is used only to write your own report, and is excluded from this work. You gave explicit consent for the first purpose and not for the second, and we are not going to treat the one as covering the other.

Why we are allowed to, and how to say no

We rely on legitimate interests. Our interest is in building a questionnaire that works; yours is in not being studied without being told. We have weighed them and concluded this does not override your rights, because the work runs on stripped or aggregated data, nothing about you is published, nobody outside ADAQNO sees your answers, and no decision is made about you.

You can object, and we will stop. Write to privacy@adaqno.com and we will exclude your answers and results from this work. It costs you nothing: your reports, your history and your access are unaffected, and we will not ask you to justify it.

This applies to everyone in the same way, whether you pay for your own access or a university pays for it. It is a separate thing from the anonymous totals your university sees, which are explained next, and objecting to one does not object to the other — tell us if you want out of both.

Some universities pay for their students to use ADAQNO. If you sign up with a confirmed email address on one of a partner university’s domains, you are given that university’s free access automatically. We use the domain of your email address to do this, and nothing else about you.

Your university never sees your answers, your reports, your comments or your name. The staff it names to us see a dashboard of totals for all of its students together: how many have joined, how many reports and roadmaps were generated and in which months, which career areas come up most often as students’ strongest, and the average rating students gave their reports. Any figure based on fewer than five students is hidden, so a number cannot point at one person. These totals are anonymous: they do not identify you and they are not personal data about you.

Your university is not given a way to look you up, and we do not send it anything about you individually — not whether you joined, not whether you finished, and not what you were advised. Our contract with each university forbids it from trying to identify students from the totals, and from using ADAQNO to make any decision about a student, such as admission, grading or discipline.

Why we may do this

• Linking your account to your university, so you get the access it pays for, is part of providing the service you signed up for (contract).
• Counting you in the anonymous totals is in our legitimate interests and the university’s: it shows the university that the access it pays for is being used, and which careers its students lean towards, without telling it anything about any one student.

You can object to being counted. Write to privacy@adaqno.com and we will take your results out of your university’s figures; you keep your free access. If you would rather have no link to your university at all, use a personal email address and buy access yourself.

Separately from the totals, your answers and results are also used to improve the service, in exactly the same way as for anyone who pays for their own access — no more because a university is involved, and no less. How that works, and how to object.

When a licence ends, your account and your reports stay yours. Only the free attempts stop; anything you bought yourself is unaffected.

If your university has named you as someone who may see its dashboard, it gave us your work email address. We use it only to let you sign in to that dashboard and to contact you about the university’s licence. We rely on our legitimate interest in performing our agreement with your university.

We keep your address until the university asks us to remove you, and for no more than 12 months after its agreement with us ends. You have the same rights as anyone else on this page.

These are every third party we send personal data to, and what each of them gets. We do not sell your data, and none of these companies may use it for their own purposes.

Partner universities are not on this list because they receive no personal data from us, only the anonymous totals described above.

Some of these companies process data outside the European Economic Area, mainly in the United States. Each transfer is covered by a recognised safeguard under Chapter V of the GDPR: an adequacy decision where one exists (including the EU–US Data Privacy Framework, where the company is certified), or otherwise the European Commission’s standard contractual clauses. Where the law of another country also governs your data — for example if you live in the United Kingdom or Switzerland — we rely on that country’s matching safeguards as well. Ask us for a copy of the safeguard that applies.

We rely on these grounds under Article 6 of the GDPR, and on the same grounds under the equivalent laws of other countries where they apply to you:

• Contract — for your account, your assessment, your reports, your payments, and the free access a partner university gives you. We cannot deliver the service without processing this data.
• Legitimate interests — for security logging, rate limiting and fixing faults; for studying answers and results to improve the service; for counting you in your university’s anonymous totals; for working out your approximate country to show the right helplines; and for university staff contact details. In each case the data involved is minimal and you can object.
• Legal obligation — for keeping records of sales for tax purposes, for handling and keeping a record of a purchase you cancel, and for answering a complaint and keeping it, with our answer, for the three years Hungarian consumer law requires.
• Explicit consent — only for special category information you choose to write into a free-text answer, as explained above.

Two automated things happen to your answers: a fixed scoring model ranks career clusters, and an AI system writes a report. Both are automated, and together they amount to profiling as data protection law uses that word.

Neither of them makes a decision about you. Nothing here determines whether you get a job, a place on a course, a grade, credit, a benefit or anything else. The output is information for you to consider, every decision stays with you, and partner universities are contractually forbidden from using it to decide anything about a student.

For that reason we do not consider Article 22 — the right not to be subject to a solely automated decision producing legal or similarly significant effects — to be engaged. We are telling you our reasoning rather than asking you to take it on trust, and if you disagree you are entitled to say so.

Regardless of that analysis, and without accepting that we have to:

• we will explain the logic of the scoring model in plain English if you ask;
• you may ask a person here to review a report or a set of scores and give you their own comment on it; and
• you may tell us you think a result is wrong, and we will look at it.

Ask at privacy@adaqno.com. The AI Transparency and Disclaimer Notice explains what the AI can and cannot do.

You can delete your account and everything attached to it from your account settings. It removes your profile, your assessment answers, your saved progress, every report we generated for you, and your link to any partner university. It is immediate and it cannot be undone. Your university’s totals simply stop counting you.

Payment records are the one exception: Hungarian accounting law requires us to keep the records behind each sale for eight years. We strip your name and email from those records where we can, leaving only what the law requires. If you cancelled a purchase, we keep what you sent us for the same time, with your name, because it is the record that you cancelled in time and were refunded.

Under the GDPR — and under similar laws elsewhere, such as the UK GDPR if you live in the United Kingdom — you can ask us to:

• Give you a copy of your data — there is an export button in your account settings
• Correct anything that is wrong
• Delete your data
• Restrict or object to how we use it, including being counted in your university’s totals
• Hand your data to another provider in a portable format

We offer these rights to everyone, wherever you live. Email privacy@adaqno.com and we will respond within one month. If your request is complex, or you have made several, we may extend by up to two further months — and we will tell you within the first month if we do.

Exercising these rights is free. We may charge a reasonable fee, or refuse, only if a request is manifestly unfounded or excessive, and we will explain why if we ever do. If we cannot tell that a request came from you, we may ask you to confirm it from the address on the account — we will not demand identity documents.

Some rights have limits. We cannot delete payment records the law requires us to keep, and we may keep a minimal note that you asked us to delete something, so we can show that we did.

If you think we have handled your data badly, you can complain to a data protection authority at any time, and you do not have to come to us first — though we would rather you told us so we can put it right.

Our lead supervisory authority is Hungary’s Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, the National Authority for Data Protection and Freedom of Information), 1055 Budapest, Falk Miksa utca 9–11, Hungary, ugyfelszolgalat@naih.hu, naih.hu. You can also complain to the authority in the country where you live or work — in Spain, the Agencia Española de Protección de Datos; outside the European Economic Area, your national data protection authority, such as the Information Commissioner’s Office in the United Kingdom. You also have the right to go to court.

We use a small number of strictly necessary cookies to keep you signed in, one that remembers your language if you choose one, and a little browser session storage to carry your answers between pages. We use no advertising cookies and no cross-site tracking, which is why you do not see a cookie banner.

The full list — names, purposes and lifetimes, including the cookies Stripe and Google set on their own pages — is in our Cookie Policy.

You need to be at least 16 to have an account, in every country. Some countries allow younger people to sign up to online services on their own; we have chosen 16 everywhere because the questions are personal and the report is about life decisions. If you are under 16, ask a parent or guardian to set one up and use it with you.

If you believe a child under 16 has given us their data, email privacy@adaqno.com and we will delete it.

If we change how we use your data, we will update this page and change the date at the top. If the change is significant, we will email you about it rather than hoping you notice.