Academos Privacy Policy
Version 1.0, effective 12 October 2026.
This policy explains what personal data we process when you use the Academos app, why, how long we keep it and what rights you have. We have written it as simply as we can, because many of our users are students. If you are under 16, read it together with a parent or guardian. This English text is a translation; if it differs from the Romanian version, the Romanian version prevails.
1. In short
- We collect only what the app needs to work: your account, study plan, progress, friends and subscription.
- We use no ads, no analytics or tracking tools, and we do not sell your data.
- We never ask for your photo, school, location or contacts.
- Your friends see only your display name, avatar and points.
- You can delete your account at any time from Profil > Datele mele.
2. Who the controller is
The controller of your data is Academos, a Dutch sole proprietorship (eenmanszaak), established at Tegelseweg 107A, 5912 BC Venlo, the Netherlands, registered with the Netherlands Chamber of Commerce (KvK) under no. 42150842, VAT ID NL005535526B24. For any question or request about your data, write to [email protected].
3. What data we process, why, and on what basis
| Data | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address and account identifier | To create your account and sign you in with a one-time code | Performance of contract, (b) |
| Your Apple or Google identifier, the email they send us and, if the provider sends them, your name and profile picture address | Sign in with Apple or Google; we do not display or use the name or picture | Performance of contract, (b) |
| Display name and an avatar chosen from those Academos provides | Your profile, visible to friends | Performance of contract, (b) |
| Study plan: exam, year, session, subjects, variant, Bacalaureat track and target grade | To show you the right study path | Performance of contract, (b) |
| Exercise answers, progress, XP, hearts, streak and your phone's time zone | To mark answers, save progress and count study days correctly | Performance of contract, (b) |
| Friendships and invitations | Social features | Performance of contract, (b) |
| Reports about exercises (the reason and the note you write) | To fix mistakes in exercises | Performance of contract, (b) |
| Your phone's notification identifier (Firebase Installation ID on Android, APNs token on iOS) and notification preferences | To send you reminders, only if you turn them on; you can turn them off at any time in Profil > Mementouri | Performance of contract, (b) |
| Purchase data: product, transaction identifier or purchase token, subscription status and expiry, whether it is a trial, and a random identifier linking the purchase to your account | To verify your subscription with Apple or Google and give you access on both platforms | Performance of contract, (b) |
| IP address, app type and server technical logs | Security, abuse prevention and troubleshooting | Legitimate interests, (f) |
| Your correspondence with us | To answer you and handle complaints | Performance of contract, (b), and legal obligation, (c) |
We do not process biometric data, health data or any other special category of data. We never receive or store your card details: payment is handled entirely by Apple or Google.
We have a legitimate interest in protecting our service and users from attacks and fraud. We weighed this interest against your rights, bearing in mind that many users are minors, which is why we keep technical logs only briefly and never use them for profiling or marketing.
4. What we do not do
- We show no ads and do not use your phone's advertising identifier.
- We use no third-party analytics, crash-reporting or tracking tools.
- We do not sell or rent your data.
- We do not send marketing emails.
- We make no decisions based solely on automated processing that have legal or similarly significant effects on you. The app recommends exercises based on your answers, but you decide what to do.
5. What other users see
Your friends see your display name, avatar, XP and weekly activity. They do not see your email address, study plan, answers or subscription. There are no public profiles, user search or messaging.
Please do not use your full name as your display name.
6. Children and teenagers
Academos is for students aged 13 and over. We do not rely on consent to process your data, but on it being necessary to provide the service you asked for, so you do not need a parent's permission to use the app. For purchases, if you are under 18, you need a parent's or guardian's permission. If we learn that an account belongs to a child under 13, we delete it.
Parents and guardians can exercise the rights below on their child's behalf by writing to [email protected].
7. Who we share data with
We work with providers that process data only on our instructions, under contract (processors):
| Provider | What it does | Where |
|---|---|---|
| Supabase, Inc. | Database, authentication and app servers | European Union (Ireland) |
| Cloudflare, Inc. | The service that verifies subscriptions | Cloudflare global network, including the EU and US |
| Our email delivery provider | Sending sign-in codes by email | EU or US, with the safeguards in section 8 |
| Google (Firebase Cloud Messaging) | Delivering notifications on Android | EU and US |
| Apple (Apple Push Notification service) | Delivering notifications on iOS | EU and US |
Apple and Google also act as independent controllers when you sign in with them or buy a subscription through the App Store or Google Play. Their own privacy policies apply in those cases.
We disclose data to authorities only when the law requires it.
8. Transfers outside the European Economic Area
Some providers are US companies or may access data from outside the EEA. In those cases we rely on the EU-US Data Privacy Framework for certified providers, or on the European Commission's standard contractual clauses together with supplementary security measures. You can ask us for a copy of the relevant safeguards.
9. How long we keep data
| Data | How long |
|---|---|
| Account, profile, study plan, progress, answers, friendships, reports and purchase data | While you have an account; deleted immediately when you delete your account |
| Notification identifier | Until you turn notifications off, sign out or delete your account |
| Pseudonymous link to a store purchase | A random purchase identifier, with no email or account, kept while the store can still send notifications about that purchase, so the subscription cannot be linked to another account |
| Database backups | At most 7 days |
| Technical and sign-in logs | At most 30 days |
| Correspondence with us | Up to 3 years after the last message, or longer if the law requires |
10. How we protect your data
- All traffic between the app and our servers is encrypted (HTTPS).
- Sign-in credentials are kept in the phone's secure storage (Android Keystore, iOS Keychain).
- Each user can access only their own data; access is checked on the server for every request.
- Cloud backups of the app are turned off, and notifications contain no personal text.
- Our team's access to data is limited to what is necessary.
If a data breach is likely to affect your rights, we will tell you and the Dutch data protection authority (Autoriteit Persoonsgegevens), as the law requires.
11. Your rights
You have the right to:
- find out what data we hold about you and get a copy (access);
- correct inaccurate data (rectification);
- ask for your data to be deleted (you can do this directly in the app);
- ask us to restrict processing;
- receive your data in a structured format and pass it to someone else (portability);
- object to processing based on legitimate interests;
Write to [email protected] from your account's email address. We reply within one month. We may ask you to confirm that you are the account holder.
You also have the right to complain to the data protection authority in the country where you live. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro. Our lead authority is the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
12. Deleting your account
You can delete your account at any time from Profil > Datele mele or by following the steps at https://academos.online/stergere-cont. Deleting your account does not cancel your App Store or Google Play subscription; cancel it separately in the store.
13. Changes
If we change this policy, we will publish the new version here and tell you in the app before an important change applies.
14. Contact
Academos Tegelseweg 107A, 5912 BC Venlo, the Netherlands Email: [email protected]