Service terms and privacy

Sondara service terms

Updated: 15 October 2026.

1. Service provider and contact

Sondara is a free research application provided by Thinqcraft Michał Pawlak, ul. Władysława Trylińskiego 2, 10-683 Olsztyn, Poland. Tax ID: 5361774872. REGON: 380652550. Electronic service address: AE:PL-51805-49235-HDJUR-21.

For support, complaints and privacy requests, contact sondara@thinqcraft.com or +48 880 449 000. Operator website: thinqcraft.com.

2. Using Sondara

Sondara helps researchers create studies, invite participants, collect answers and export results. Access requires a compatible browser and an internet connection. Keep your account details accurate and protect your credentials. Use only accounts, studies and data you are authorized to access. Do not upload unlawful content, malicious software or material that infringes others' rights, or interfere with the security or availability of the service.

3. Research and participation

The research team is responsible for study content, access permissions, required research approvals and the information and permissions needed to collect and use responses. Participants should read the information supplied by their research team before answering and contact that team about study participation, withdrawal or their responses. Accepting these service terms is not consent to take part in a study or to process health data.

Sondara is a research tool. It does not provide medical advice or emergency assistance. Optional integrations are available only when configured and enabled; free access to Sondara does not include third-party services automatically.

4. Content and software rights

Uploading study material does not transfer ownership to Thinqcraft. You permit its processing as needed to provide the study functions you request and must have the rights necessary to use it. Third-party trademarks and content retain their own rights.

Thinqcraft retains copyright in its original Sondara modifications and licenses those modifications under GNU GPL version 3 or later. The application remains licensed under GNU GPL version 3 or later, with existing copyright notices preserved. Read the software licence. These service terms govern use of the hosted service and do not restrict the rights to use, modify or redistribute the software granted by that licence.

5. Availability, account closure and complaints

The service may be interrupted for maintenance or technical reasons. We may restrict access where necessary to address misuse, security threats or legal requirements. Contact us to report a problem, challenge a restriction or request account closure. A closure request is assessed separately from the research team's responsibility for study records and copies it has exported. Nothing in these terms excludes rights or liability that applicable law does not allow to be excluded.

6. Communications and changes

Account verification, security and configured study notifications support the service. These terms do not grant blanket permission for marketing or optional SMS. Material changes to the service terms will be communicated before they apply. Polish law applies subject to mandatory protections available to you.

Privacy notice

1. Responsibility for your data

Thinqcraft Michał Pawlak, at the address above, is the controller for account, service administration and support data. Contact sondara@thinqcraft.com for privacy requests. The organization conducting a study determines its research purposes and must explain its identity, data responsibilities, legal basis and retention rules in the study information. Where Thinqcraft processes responses on its behalf, the applicable processing arrangement governs that processing.

2. Data and purposes

We process account names and email addresses, authentication and permission records, study content and responses, uploaded material, and technical/security records needed to operate the service. Study questions may collect sensitive data; the research team must establish the applicable conditions before doing so. Providing account information is necessary for account-based access; study requirements are described by the research team.

Account and service administration relies on performance of the service agreement (GDPR Article 6(1)(b)). Security and handling service enquiries rely on legitimate interests in protecting and operating the service (Article 6(1)(f)); legal obligations apply where required (Article 6(1)(c)). Where a separate activity relies on consent, it must be requested separately. Checking the service-terms box is not blanket consent to processing.

3. Access, providers and transfers

Study data is accessible according to study permissions. Hosting, storage and email providers may process data to deliver configured services. Optional features can involve additional providers and require their own assessment before use. Study-specific information must describe relevant recipients and any international transfers and safeguards. Do not assume that the platform terms authorize every research use or optional integration.

4. Retention and deletion

Account data is needed while the account provides access to the service. After closure, any continued retention must be justified by applicable legal requirements, security investigations or the establishment, exercise or defence of claims. Support records are needed to handle the enquiry and any related claim. Research-response retention follows the research team's disclosed purpose, applicable obligations and instructions; ask the team for the period or criteria for your study.

Deleting an account does not automatically erase study records or copies already exported by a research team. Backups can contain earlier records; requests must cover their treatment as well as the active system. No automatic expiry period or immediate erasure from every backup is promised. Contact us and, for study responses, the research team to establish the applicable process.

5. Cookies, browser storage and security

We do not use advertising or tracking cookies, behavioural analytics or session replay. We do not sell personal data. Necessary technical logs may be processed to operate the service, diagnose failures and address security issues. These commitments do not prevent the research team from accessing and exporting study responses under its disclosed study purpose and applicable permissions.

Sondara may use necessary session cookies. If you choose to remember your browser when signing in, a verification cookie remembers that browser for 30 days. Browser local storage supports authentication and application state; session storage holds test-link context. Clearing cookies or browser storage can sign you out or interrupt a test session. Access permissions and encryption of response fields help protect data, but no system can guarantee absolute security.

6. Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. We may need to verify your identity. For research responses, contact the responsible research team; we can help identify the appropriate contact.

You may complain to the President of the Polish Personal Data Protection Office (UODO), or another competent supervisory authority. Privacy questions and requests can be sent to sondara@thinqcraft.com.

7. Notice updates

The update date appears above. Changes to this notice do not create new research consent or replace information supplied for a particular study.