Privacy Policy
Maturzysta app · last updated: 2026-09-13
English translation for convenience. The Polish version is the binding one.
1. Data controller
Roman Kot, ul. Szafarnia 11/F8, 80-755 Gdańsk, NIP 5832896340, REGON 220879358: a natural person carrying on a business activity, entered in CEIDG (the Polish Central Register and Information on Economic Activity). Contact in matters of personal data: prywatnosc@romankot.pl.
2. The app does not ask you to create an account
We do not ask for an e-mail address, a name, a phone number or a sign-in. On first launch the app creates an anonymous technical account: a random identifier that lets it save your progress and recover it after the app is restarted. This identifier is the only link between you and the data on our side. We do not know who you are, and we cannot find out.
We do not show ads, do not use advertising networks, do not profile anyone for advertising, and do not sell or share data with third parties for marketing purposes.
3. What data we process
| Data | Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|---|
| Anonymous account and session identifier | Saving your progress and linking it to the device | Point (b): performance of the contract for the provision of the service |
| Learning progress: completed sets, answers, scores, XP points, day streaks, active days, generated Training rounds | Running the app: scores, statistics, revision | Point (b) |
| Content error reports you send from a question screen: the reason you choose and, if you write one, your comment | Correcting wrong questions and answer keys | Point (f): our legitimate interest in correct content |
| Technical request data (IP address in server logs, rate-limit counters) | Security, and protecting the content from bulk downloading | Point (f) |
| Install key: on iPhone a random value assigned by the app itself; on Android derived by a one-way hash from the system device identifier, which itself never leaves the phone. Stored on our side only as a further hash, next to a counter of the free access already used | To keep the one-off free access (one Training round, the first days of the daily challenge) one-off | Point (f): preventing abuse; the entry is not linked to the account |
| Push notification token, platform, app version, chosen language and level | Sending the morning daily challenge, only if you turn notifications on | Point (a): consent, which you can withdraw at any time |
| AI tutor: the content of your questions and the model's answers | Answering, and remembering the conversation | Point (b) |
| Product analytics: events such as “app opened” and “session completed”, linked to the anonymous identifier | Seeing which screens work and which do not | Point (f): you can turn this off in Profile → Privacy |
| Crash reports: error message, device model, operating system and app version, anonymous identifier | Fixing crashes | Point (f): turned off with the same switch |
We do not collect location, contacts, photos, microphone input or anything from the device's storage. The app does not have access to these permissions.
4. Who processes data on our behalf
We use service providers that process data solely on our instructions (they are processors, not recipients who could use the data for their own purposes):
| Provider category | Purpose | Where |
|---|---|---|
| Application hosting and database | Handling requests from the app and storing progress | European Union |
| File storage | Images and recordings from exam papers, with no personal data | European Union |
| Product analytics | App usage statistics | European Union |
| Crash reporting | App error reports | European Union |
| Push notification service, and the Apple and Google notification systems | Delivering the notification to the device | USA: standard contractual clauses |
| Language model provider | Generating the tutor's answers; the content is not used to train models | USA: standard contractual clauses |
Apart from the exceptions listed above, data is stored and processed in the European Union. If a provider accesses the data from outside the European Economic Area (for example, its technical support), this takes place on the basis of standard contractual clauses approved by the European Commission. We will give you the current list of the specific providers on request: write to prywatnosc@romankot.pl.
5. How long we keep data
We keep your progress until you delete your data (section 7). Rate-limit counters expire within a few hours. We delete the notification token when you turn notifications off, or when the operating system reports that the device no longer accepts it. We also keep content error reports after your data has been deleted, but without any link to you: they are information about our mistake, not about you.
After deletion, one more thing remains: the free-access counter alone, stored against the random install key. It holds nothing about a person (neither the account identifier nor anything you wrote), and without it, deleting your data would simply be a way to get the free access again.
6. Your rights
You have the right of access to your data, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interests (GDPR Art. 15–21). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).
One caveat that follows from anonymity: we cannot recognise you by your e-mail address, because we never had it. The practical way to exercise the right to erasure is the button in the app.
7. How to delete your data
In the app: Profile → Privacy → Delete my data. We then erase the anonymous account and everything linked to it, immediately and irreversibly. The app starts over, as it did after the first installation, except for the free access already used (section 5).
Uninstalling the app on its own does not delete the data from the server. Details and contact: data deletion.
8. Children
The app is for preparing for a school exam, so it is also used by minors. That is why we do not create accounts, do not collect contact details, do not show ads and do not allow contact between users. A parent or guardian can delete all the data at any time with the button described in section 7.
9. Changes
We will announce material changes in the app before they take effect. The date of the last update is at the top of the page.