Privacy policy

1. Data controller

The controller entity is still to be confirmed. Once it is decided, its full name, address and contact email will appear here.

2. What we process, and why

• Your email address. To create your account and send you access links and purchase receipts. Legal basis: performance of the contract.
• Your course progress. Which sessions and exercises you have completed and your practice-paper results, so you do not lose your place. Legal basis: performance of the contract.
• Purchase records. Amount, date, course and plan bought. Legal basis: legal obligation (invoicing and accounting).

We do not process your card: payment details are collected and processed by Stripe directly. We do not sell data and we do not advertise with it.

3. The AI tutor and your conversations

The AI tutor is optional and runs on your own key from an AI provider. The key is stored only in your browser. Your conversations with the tutor go straight from your browser to your AI provider and never touch our servers: we do not receive them, do not store them and cannot read them. Processing of those conversations is governed by your AI provider's privacy policy.

4. Providers (processors)

We use these providers to run the platform:

• Vercel: hosting for the web application.
• Neon: database (account, progress, purchases).
• Cloudflare: storage for course content (recordings and images) and content delivery.
• Stripe: payments and receipts. Stripe processes your payment data as its own controller.
• [Email provider - to be decided]: sending access links. It will be named here once chosen.

Some providers may process data outside the European Economic Area; where they do, they rely on standard contractual clauses or other valid transfer mechanisms.

5. How long we keep things

• Account and progress: for as long as your account exists.
• Sales records: for as long as tax and accounting law requires, even if you delete your account.
• AI corrections: if you ask for an automatic correction, the result is stored alongside your exam attempt, so that it is still there when you come back and so a teacher can see it if you book a session. The request is made by your browser with your own key: we neither send it nor see it.
• Usage statistics: study time per session and the country you sign in from, anonymously. If you delete your account the link to you is cut and only the aggregate count remains, which can no longer identify you.

No access is indefinite, so your data is not either. If two years pass from the end of your last access without you signing in, we delete your account, your progress and your results automatically. Only the sales records the law requires are kept, with no account attached.

You can delete your account sooner, whenever you like, from your account page, without asking us or giving a reason.

6. Your rights

You can request access, rectification, erasure, restriction, portability and objection by writing to us. If you delete your account we remove your email, your progress and your sessions; we keep only the sales records the law requires us to keep, with no account name attached. You can also complain to your data protection authority.

7. Cookies

We use a single technical session cookie to keep you signed in. We use no advertising cookies and no third-party tracking cookies.

To improve the course we measure how long is spent on each session and which country it is opened from. The country comes from the delivery network already reduced to two letters: we store no IP addresses, we use no third-party analytics, and there is no external script on the site.

8. Changes to this policy

If we change this policy in any significant way, we will announce it on the platform before the change takes effect.