Hygieniapassi Tutor privacy policy.

01Data controller

02Data we collect

• → Account. Email address and password (stored encrypted via Supabase) when you voluntarily create an account.
• → Name. The name you enter when you start using the app is shown in the app, and while you are signed in it is also stored in your account so it follows you between your devices. If you sign in with Google, the name on your Google account is stored with your sign-in details.
• → Anonymous identifier. If you don't create an account, the app creates a random anonymous identifier on our server. It contains no name or email address. Your study progress stays on your device. On iPhone, a Premium pass bought without an account is recorded against this identifier.
• → Purchase history. Pass type (7-day / 30-day) and purchase date. Payment details (card numbers etc.) are handled by App Store or Google Play — we never see them.
• → App usage data. Studied content, test results, and progress are stored on your device (localStorage). When you are signed in, they are also stored in your account (via Supabase) so your progress follows you between your devices.
• → Ads. The app shows Google AdMob ads. On iPhone, the app asks for your permission (App Tracking Transparency) before your device's advertising identifier may be used for personalised ads; in the EEA, Google also asks for your consent. If you decline, ads are not personalised and every feature still works.
• → Usage analytics. With your consent, we collect events about how the app is used (screens viewed, practice and exam starts and completions) to improve the app. These events do not include your name or email address. While you are signed in they are linked to your account identifier, so they are not anonymous.
• → Crash reports. When the app crashes or runs into an unexpected error, we collect a technical error report (the error message, the screen where it happened, the app version, and technical device details such as device model and operating system version) so we can fix the problem. Crash reports do not include your name, email address or account identifier, and your IP address is not stored. A report carries a random identifier for this app installation, which is not linked to your account, and an approximate location (city and country) worked out from your connection when the report arrives. You can turn crash reports off in Settings.

03Purpose of processing

• →Managing your account and authentication.
• →Syncing your progress across devices.
• →Processing Premium pass purchases via RevenueCat.
• →Showing ads to free users (with GDPR consent).
• →Improving the service and resolving technical issues.

04Legal basis (GDPR)

• →Contract performance: creating an account and delivering premium features.
• →Legitimate interest: technical operation and security of the app.
• →Legitimate interest: crash reports, to find and fix errors in the app (you can object by turning them off in Settings).
• →Consent: ad personalisation (you can withdraw it at any time in the app settings, and on iPhone also in the device's tracking settings).

05Data retention and deletion

Your data is retained as long as your account is active. You can delete your account and all associated data at any time via the Profile screen. Data is deleted within 30 days of the request.

Study progress in an anonymous session stays on your device and is not sent to our servers. The anonymous identifier, and any Premium purchase made without an account, are stored on our server; the identifier contains no name or email address.

Deleting your account also deletes your purchase records at RevenueCat and your usage analytics at PostHog. Crash reports are not linked to your account and are deleted automatically after the retention period. How to delete your account, including without the app →

06Third-party services

• →Supabase (database and authentication) — EU region, data processing agreement in place.
• →RevenueCat (purchase management) — processes purchase events, not payment card details.
• →Google AdMob (ads) — operates in the EEA under GDPR consent.
• →PostHog (usage analytics) — EU region; processes usage events, linked to your account identifier while you are signed in.
• →Sentry (crash reports) — EU region; processes technical error reports that are not linked to your account.
• →Apple App Store / Google Play (purchases) — subject to their own privacy policies.

07Your rights

• →Right to access, correct, delete ("right to be forgotten"), and restrict processing of your data.
• →Right to data portability.
• →Right to lodge a complaint with a supervisory authority.

To exercise any right, email info@kumakart.com.

08Children's privacy

The app is not directed at users under 13. We do not knowingly collect data from minors.

09Changes to this policy

We will notify you of significant changes in the app. Continued use constitutes acceptance of the updated policy.

10Contact

Questions about this policy or your data? Email info@kumakart.com.