Privacy policy (draft)
Draft policy — pending legal review
What we collect
When you book a diagnostic or enrol, we collect the student’s name and email (or a parent/guardian’s, where the student is under 18), country and time zone, curriculum and examination session, programming language used at school, a short description of your current challenge and goal, any accessibility or learning-support information you choose to share, and consent timestamps. We do not ask for a full date of birth.
How we use it
We use this information to deliver diagnostics and coaching, tailor feedback, communicate about bookings and payments, and meet our own record-keeping obligations. We do not sell personal data.
Where it is stored
Data is stored with our database and authentication provider (Supabase) and, once payments are enabled, our payment processor (Stripe). Hosting region and sub-processor details will be confirmed here as [HOSTING AND SUB-PROCESSOR DETAILS] before launch.
Retention
We keep personal data only as long as needed to provide the service and meet legal obligations. A specific retention schedule will be published here as [RETENTION SCHEDULE] before launch.
Your rights
As a Poland-based service handling data under EU law, you have the right to access, correct, delete or export your personal data, and to complain to the Polish data protection authority (UODO) or your local supervisory authority. To exercise these rights, contact us at hello@eddysons.com. A dedicated privacy contact may be published separately as [PRIVACY CONTACT] before launch.
Children’s data
For students under 18, we require a parent or guardian to provide contact details and consent as part of enrolment.