Placeholder, to be reviewed. This text is a draft and has not been checked by a lawyer. It is not yet legally binding.
Privacy policy
Last updated: [PLACEHOLDER date]
This policy explains how savemya** handles personal data under the EU General Data Protection Regulation (GDPR).
Controller
The controller is [PLACEHOLDER: legal entity name and address]. Contact: support@example.com.
Data we collect
- Account: your email address (and, if you sign in with Google, the basic profile Google shares with us).
- Purchases: what you bought, the tier, the date, the amount and the Polar order ID. We never see or store your card details.
- Study progress: topics visited and completed, best quiz scores and flashcard status.
- Language preference: the language you choose for study notes.
Why we use it (legal bases)
- Performance of a contract (Art. 6(1)(b)): to create your account, give you access to what you bought and save your progress.
- Legal obligation (Art. 6(1)(c)): to keep records of transactions where the law requires it.
- Legitimate interests (Art. 6(1)(f)): to keep the service secure and to measure aggregate, cookieless page usage so we can improve it.
Processors
- Supabase: authentication and database hosting.
- Polar: payment processing as Merchant of Record. Polar processes billing details under its own privacy policy.
- Vercel: website hosting, including Vercel Web Analytics, which is cookieless and does not track you across sites.
[PLACEHOLDER: data locations and the safeguards used for any transfer outside the EEA.]
How long we keep it
Account and progress data are kept while your account exists and deleted when you ask us to delete it. Purchase records are kept for as long as tax and accounting law requires. [PLACEHOLDER: exact retention periods.]
Your rights
You can ask for access to, correction of, deletion of, restriction of or a copy of your data, and you can object to processing based on legitimate interests. Email us to use these rights. You can also complain to your data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).
Cookies
We only use strictly necessary cookies: a sign-in session cookie set by our authentication provider, and a cookie that remembers your study-notes language. We do not use advertising or tracking cookies, so we do not need a cookie banner.