Skip to content

Latest commit

 

History

History
164 lines (112 loc) · 7.28 KB

ivy-learn-privacy.md

File metadata and controls

164 lines (112 loc) · 7.28 KB

Privacy Policy for Ivy Learn by Ivy Apps EOOD

Effective Date: November 27, 2024
Last Updated: November 27, 2024

Ivy Apps EOOD ("we," "our," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your data when you use our web application ("Service"). By accessing or using the Service, you agree to the practices described in this policy.

1. Data Controller

Ivy Apps EOOD is the data controller responsible for your personal data.
Contact Information:
Ivy Apps EOOD
Email: iliyan.germanov971@gmail.com
Address: БЪЛГАРИЯ, гр. София, р-н Подуяне, ул. Б. Петков, бл. 84, вх. Б, ет. 5

If you have questions about this policy or your data rights, please contact us.

2. Data We Collect

We collect and process the following types of data:

a. User Data from Google Profile

When you sign in using your Google account, we collect data from your public Google profile, which may include:

  • Name
  • Profile picture
  • Email address

This data is used for authentication and to personalize your experience.

b. Analytics Data

We collect analytics events to understand how you interact with the Service. This data helps us improve the app and provide a better user experience. The data collected includes:

  • Events such as app actions (e.g., "lesson_started," "question_answered").
  • User-specific identifiers (e.g., userId, device type).

Opt-Out: You can disable analytics tracking at any time through Settings > Privacy in the Service.

c. Subscription Data

If you purchase a subscription through Stripe, we collect and process:

  • Subscription status (e.g., active, canceled, trial period).
  • Payment-related data (e.g., transaction ID, subscription plan).
  • Billing-related metadata as provided by Stripe.

We do not store or process your full payment details (e.g., credit card numbers). Payment processing is handled securely by Stripe as our payment provider. For more details, refer to Stripe’s Privacy Policy.

d. Progress-Related Data

The Service may collect and store data related to your progress (e.g., lesson completion).
Note: The collection of progress-related data is not guaranteed to be fully implemented and may vary based on updates to the Service.

3. How We Use Your Data

We process your data for the following purposes:

  1. Providing the Service: Authenticate your account, personalize content, and deliver app features.
  2. Subscription Management: Track and manage your subscription status and payments.
  3. Analytics: Improve the functionality and user experience of the Service.
  4. Compliance: Fulfill legal obligations under applicable laws, including GDPR.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Consent: For analytics and tracking, we rely on your explicit consent.
  • Contractual Necessity: To provide the Service and manage your subscriptions.
  • Legal Obligations: To comply with applicable laws and regulations.

5. Data Sharing

We do not sell your data. However, we may share data with the following third parties to operate the Service:

a. Service Providers:

  • Google: For authentication (Google Sign-In).
  • Stripe: For processing subscriptions and payments securely.

b. Legal Obligations:

We may share your data if required by law or to protect the rights and safety of Ivy Apps EOOD, its users, or others.

6. Data Retention

  • User Data: Retained as long as your account is active.
  • Analytics Data: Retained for a maximum of 24 months, unless otherwise required by law.
  • Subscription Data: Retained as long as required to comply with financial and legal obligations.
  • Progress Data: Retained based on Service functionality and user activity.

When you delete your account, your personal data is permanently deleted, except where retention is required by legal obligations (e.g., financial records).

7. Account Deletion

You can delete your account at any time by navigating to Settings > Delete Account in the Service. Upon deletion:

  • All associated personal data, including your profile, progress, and analytics data, will be permanently deleted.
  • Subscription-related data may be retained for legal compliance (e.g., tax and financial record-keeping).
  • Some non-personally identifiable data may be anonymized and retained for statistical purposes.

If you have issues deleting your account, contact us at iliyan.germanov971@gmail.com.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your data:

a. Right to Access:

You can request a copy of the personal data we hold about you.

b. Right to Rectification:

You can request the correction of inaccurate or incomplete data.

c. Right to Erasure:

You can request the deletion of your data under certain conditions.

d. Right to Restriction:

You can request a limitation on the processing of your data.

e. Right to Object:

You can object to the processing of your data, including analytics tracking.

f. Right to Data Portability:

You can request a copy of your data in a structured, commonly used format.

To exercise these rights, contact us at iliyan.germanov971@gmail.com. We will respond within 30 days, as required by GDPR.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for functionality and analytics purposes.

  • Essential Cookies: Necessary for the Service to function (e.g., login sessions). No consent is required for these cookies.
  • Analytics Cookies: Used to collect app usage data. Consent is required before using these cookies, which can be managed in Settings > Privacy.

By continuing to use the Service, you agree to our use of cookies in accordance with this Privacy Policy.

10. Data Security

We implement appropriate technical and organizational measures to safeguard your data, including:

  • Encryption of sensitive data during transmission (e.g., via HTTPS).
  • Secure access controls to prevent unauthorized access.

However, no system is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

If we transfer data outside the EEA (e.g., to Google or Stripe servers in the United States), we ensure compliance with GDPR by:

  • Using Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For significant changes, we will provide notice via email or through the Service.

Your continued use of the Service after such changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us at:

Ivy Apps EOOD
Email: iliyan.germanov971@gmail.com
Address: БЪЛГАРИЯ, гр. София, р-н Подуяне, ул. Б. Петков, бл. 84, вх. Б, ет. 5