Privacy Policy
Last updated:
This Privacy Policy explains how Latvian Exam Prep, acting as the controller of data processed for this Service, collects and uses personal data. It also explains your rights under the General Data Protection Regulation (GDPR) and other applicable law.
The Service can be used partly without an account. Signed-out learning progress is stored locally in your browser. When you sign in, eligible progress is synchronised to your account so it can be used on other devices.
Friend Pass
We store offer deadlines, purchase and gift links, and limited sharing activity to operate this campaign and prevent abuse. A protected identifier derived from your verified email preserves one-time eligibility after account deletion; it is not used for advertising. Campaign event details are removed after 90 days, while eligibility and purchase records are retained for as long as needed to administer your access and prevent repeat claims.
1. Data we process
- Account data: Google account identifier, email address, and basic profile information returned during sign-in.
- Learning data: attempts, answers, scores, self-assessments, vocabulary progress, grammar progress, timestamps, language preference, and saved drafts.
- Payment data: Stripe customer identifier, plan, entitlement, subscription status, renewal or cancellation status, and transaction references. Stripe—not us—processes full card details.
- Technical and security data: request information, session identifiers, browser/device information, error records, and security events made available by our infrastructure providers.
- Communications: information you include in support, privacy, or refund requests.
2. Purposes and legal bases
- Contract: provide accounts, synchronise progress, deliver paid content, process purchases, and provide customer support.
- Legitimate interests: secure the Service, prevent abuse, diagnose errors, maintain educational quality, and understand aggregate product operation where those interests do not override your rights.
- Legal obligation: retain and disclose transaction, tax, accounting, fraud, or consumer-rights information where the law requires it.
- Consent: used only where required for an optional activity. You may withdraw consent without affecting earlier lawful processing.
3. Processors and recipients
We use Supabase for authentication and database services, Google for sign-in, and Stripe for checkout, billing, refunds, invoices, and fraud prevention. Google Cloud Text-to-Speech is used to produce Latvian learning audio from authored course text; it is not supplied with learner account data for that purpose.
Each provider processes data under its own terms and privacy documentation. We do not sell personal data and do not share it for third-party behavioural advertising.
4. International transfers
Some providers may process data outside your country or the EEA. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard described by the provider.
5. Retention
Account and learning data are normally retained while your account is active and deleted when you delete the account, subject to backup cycles, security needs, disputes, and legal obligations. Signed-out local data remains on the device until you clear it.
Payment and accounting records may be retained by Stripe and by the operator for the period required by tax, accounting, fraud-prevention, and consumer-protection law. Support records are retained only as long as needed to resolve and document the request.
6. Your rights
- Access your personal data and receive a copy.
- Correct inaccurate or incomplete data.
- Request deletion, restriction, or objection where the legal conditions apply.
- Receive eligible data in a portable, machine-readable format.
- Withdraw consent where processing is based on consent.
- Complain to the Latvian Data State Inspectorate or the competent authority where you live.
7. Account deletion and security
The profile page includes account deletion. Active subscriptions are cancelled first to prevent future charges, then the Supabase account and linked learning records are deleted. Stripe financial records may remain where law requires them.
We use encrypted transport, access controls, row-level database security, signed webhook verification, and operational safeguards. No online system is completely risk-free.
8. Children and automated decisions
The Service is not directed to children under 16 without appropriate parent or guardian involvement. We do not use personal data to make solely automated decisions that produce legal or similarly significant effects.
9. Policy changes
We may update this Policy when the Service, providers, or law changes. The current version and update date will be published here, and material changes will be communicated where required.
Contact
For questions, privacy requests, or billing corrections, contact us at the address below. We may ask for information needed to identify the account or payment.
Email: support@latvianexam.com