Privacy Policy

1. Data controller

The controller of personal data is the operator of the Pravopis app. Contact for data-protection requests: nov.matej+pravopis@gmail.com.

2. What the app does

Pravopis is a mobile learning app for Czech, Slovak, Polish, and Croatian spelling. Practice, progress, and most data stay on your device. Some features (Lektor, sync, subscriptions) may talk to our servers.

3. What data we process

3.1 Data on the device

Locally (SwiftData) we store in particular:

• exercise results and attempt history,
• daily-goal and reminder settings,
• streak, XP, and shards used to save a streak,
• spaced-repetition state (SM-2) for individual items,
• a flag that you finished onboarding / diagnostics.

This data makes the app work offline and is not sent automatically.

3.2 Anonymous analytics

To measure retention and product quality we may send events (for example app open, quiz finished, paywall shown) under a random device identifier. That identifier is not a name, email, or phone number, and we do not intentionally link it to you.

3.3 Sign in with Apple

If you use Sign in with Apple, we process the Apple account identifier (and an email if Apple provides one). It is used to sync progress and verify the subscription across devices.

3.4 Subscription (Pravopis+)

Purchases go through Apple (StoreKit). On the server we store what we need to verify the entitlement (for example transaction id, product, expiry). We do not process card details — Apple does.

3.5 Lektor (artificial intelligence)

Lektor premium features (checking your own text, generating drills from a topic or pasted text) send the content you provide to our servers and then to a language-model provider (OpenAI) so we can build a reply. We do not use the text for ad profiling. A technical cache may temporarily keep similar requests to control cost and speed.

3.6 Notifications

Daily reminders and streak warnings are local notifications on the device. They turn on only with your consent in iOS.

4. Legal bases and purpose

• Performance of a contract — providing the lessons, subscription, and Lektor.
• Legitimate interest — anonymous product analytics, security, and abuse prevention.
• Consent — where the system requires it (for example notifications).

5. Who we share data with

• Apple — sign-in and App Store purchases.
• Hosting and database providers (for example Vercel, Neon) — running the backend.
• OpenAI — processing text for Lektor features.

We do not sell data to third parties or use it to target ads outside the app.

6. Retention

• Local data — until you uninstall the app or delete progress in Settings.
• Account and sync — for the life of the account, or until a deletion request.
• Analytics events — for as long as we need to evaluate the product (typically months, not forever).
• Lektor cache — temporarily, for repeated identical requests.

7. Security

Traffic to our servers uses HTTPS. Access to production systems is limited, and Lektor API keys stay on the server, never in the app.

8. Children

School-age children may use the app, often with a parent. We do not try to collect children’s data beyond what teaching requires. If you are a parent and want data linked to a child’s account deleted, contact us at the email above.

9. Your rights (GDPR)

If European law applies to you, you may in particular:

• request access to your data and have it corrected,
• request erasure or restriction of processing,
• object to processing based on legitimate interest,
• lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ) or your local authority.

Send requests to nov.matej+pravopis@gmail.com. You can delete local progress in the app (Settings → Delete progress). Delete the account and server-side data in Settings → Delete account.

10. Changes

We may update this policy. The new text will be published on this page with a new date. For material changes we also try to notify you in the app.

11. Contact

Email: nov.matej+pravopis@gmail.com