Privacy policy

Data controller

The data controller is GAVI Holali David (holalilabs@gmail.com).

Data collected

Account: email address, nickname (optional), study level (optional), password (hashed). Activity: quiz attempts, scores, XP, badges, streaks. Subscription: status and payment-provider identifier.

Purposes and legal basis

Provide the service and progress tracking (contract performance), manage accounts and subscriptions (contract), improve the service (legitimate interest). No data is sold.

Retention

Data is kept while the account is active, then deleted within a reasonable time after closure, except where a legal obligation applies (e.g. invoicing).

Recipients and processors

Hosting and database: Hostinger (EU). Payment: Merchant of Record provider. Social sign-in (if enabled): Google and Meta/Facebook. These providers act as processors or joint controllers as the case may be, under contractual safeguards (DPA).

Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection. To exercise them: holalilabs@gmail.com.

You may lodge a complaint with the French data protection authority (CNIL, cnil.fr).

Cookies

The site only uses strictly necessary cookies (login session). No advertising or analytics cookies are set.