Privacy Policy
Last updated: 30 September 2026
In short: we collect what the app needs to work — your account, your learning progress, and the texts you submit for marking. We send your texts to our AI provider only to mark them. We use no advertising, no tracking and no analytics tools, and we never sell your data. You can delete everything from inside the app at any time.
1. Who is responsible for your data
The controller of your personal data is [FULL NAME OR BUSINESS NAME], [POSTAL ADDRESS], Poland (“we”, “us”).
For anything about your data, write to privacy@polishexamprep.pl.
This policy covers the Polish Exam Prep app for iPhone and the website polishexamprep.pl.
2. What we collect and why
Your account
- If you sign up with email: your email address and your password, which we store only in a protected (hashed) form we cannot read.
- If you sign in with Apple: an identifier Apple gives us for you, the email address Apple shares (which may be a private relay address if you chose to hide yours), your name if you chose to share it, and a token that lets us disconnect the app from your Apple ID when you delete your account.
- If you sign in with Google: an identifier Google gives us for you, your email address and your name.
- Your settings: the exam level you are preparing for, the language you use the app in, and your practice preferences.
Your learning
- Your progress on words and grammar exercises, including when each is next due for review.
- The days you studied, used to count your streak.
- Collections and words you create yourself.
- The grammar drills you start, used to count the free plan's daily allowance.
Your writing
- The texts you submit for marking, when you started and submitted them, and how long you took.
- The feedback you receive: scores, corrections, comments and the improved version of your text.
Please don't put sensitive personal information — about your health, beliefs or other people, for example — into your practice texts. Nothing in the exam requires it, and it would then be processed like any other text.
Your subscription
Payments are made to Apple, not to us. We never see your card or payment details. When you subscribe or renew, Apple sends us a record of the purchase: which plan, when it started and ends, whether it will renew, whether it was refunded, and a transaction number. When you buy, the app attaches your account's internal identifier to the purchase so that Pro goes to the right account.
Technical data
Like any server, ours records basic technical information about requests — such as IP address, time and the address requested — to keep the service running and secure. These logs are kept for up to [NUMBER] days.
What we don't collect
The app contains no advertising, no analytics or tracking tools, and no third-party SDKs other than Google Sign-In. It does not access your location, contacts, photos, camera or microphone. The website uses no cookies and no analytics.
3. Why we are allowed to use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, providing lessons, drills and progress, and marking your writing | Performing our contract with you — Art. 6(1)(b) |
| Checking your subscription and applying the free plan's limits | Performing our contract with you — Art. 6(1)(b) |
| Keeping the service secure, preventing abuse and fixing faults | Our legitimate interest in running a safe, working service — Art. 6(1)(f) |
| Keeping records the law requires, for example for tax | Legal obligation — Art. 6(1)(c) |
We do not use your data for advertising or profiling, and no decision with legal or similarly significant effects is made about you by automated means. The AI marking of your writing is practice feedback only.
4. Who we share it with
Only with the service providers we need to run the app, each acting on our instructions:
- Anthropic, PBC (United States) — provides the AI model that marks your writing. We send it the text you submitted, the task you answered and, for picture tasks, the task's picture. We do not send your name or email address. Under its commercial terms, Anthropic may not use this data to train its models.
- [HOSTING PROVIDER] — hosts our servers and database, in [REGION].
- Apple — processes payments, handles Sign in with Apple, and forwards our emails to private relay addresses. Apple's own privacy policy applies to what you share with Apple directly.
- Google — if you use Sign in with Google. Google's privacy policy applies to your Google account.
- Microsoft — hosts our support mailbox, so emails you send us are stored there.
We never sell your personal data. We would disclose it to authorities only where the law requires us to.
Transfers outside the EU
Anthropic, and possibly other providers above, process data in the United States. Where that happens, the transfer is protected by the safeguards the GDPR requires — the EU–US Data Privacy Framework where the provider is certified under it, or the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Your account and everything in it — for as long as you have an account. When you delete it, we erase your account, progress, collections, texts and feedback straight away, and disconnect the app from your Apple ID if you used Sign in with Apple. Copies in our backups are overwritten within [NUMBER] days.
- Purchase records — as long as your account exists, and longer only where tax or accounting law requires.
- Server logs — up to [NUMBER] days.
- Emails to support — as long as needed to deal with your request, and then up to 2 years in case you write again about the same thing.
6. Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- correct data that is wrong;
- delete your data — you can do this yourself in the app under Profile → Delete Account;
- restrict how we use your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests.
To use any of these rights, write to privacy@polishexamprep.pl. We will answer within one month.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl — or to the authority in the EU country where you live.
7. Security
Data travels between the app and our servers encrypted. Passwords are stored only in hashed form. Access to our systems is limited to what is needed to run the service.
8. Children
The app is meant for adults preparing for a certificate exam. It is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
9. Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will tell you in the app before it takes effect.