For questions or requests about your data:
buntpodcast@gmail.comData needed to provide the service
- Website and security. Hostinger receives technical visit data (IP address, date, page and browser) to deliver the site, count requests, prevent abuse and investigate faults. Limited technical logs and app-integrity tokens also protect the app. Legal basis: our legitimate interest in operating and securing the service.
- Exercises and reminders. Website exercise answers stay in your browser. App reminders are scheduled on your device: the time and permission stay local, without remote notifications. Legal basis: providing the feature you request.
- Optional Patreon connection. Patreon provides your identifier and membership status to verify access. The code and access token are used temporarily; a secure session cookie keeps your membership status and a pseudonymous security fingerprint for seven days. Legal bases: performing your request and session security.
- App account. Your email, Apple, Google or Firebase identifiers, preferences, progress, favourites, personal cards and decks operate your account and synchronise your learning. If you create a sharing link, a copy of the deck and its cards is accessible to anyone with the link for seven days, including when shared without an account. Legal basis: providing the service you request.
- Purchases and support. Apple or Google handles payments; RevenueCat supplies transaction identifiers and entitlements to activate and restore subscriptions. We do not receive full payment-card details. Support uses information you send to answer your request. Legal bases: contract, accounting duties and our legitimate interest in fraud prevention.
This data is necessary for the relevant features: without it, we cannot provide those features. You can browse the public website without an account, and optional analytics never controls access.
How long do we keep data?
- Account and learning
- While the account is used, then deleted or anonymised on account deletion, except for legal obligations or claims. Isolated backups are purged according to the provider’s cycle. Mobile sessions expire after 30 inactive days and no later than 90 days.
- Local data and sharing
- Exercises and reminders: until cleared or browser/app data is removed. Shared decks and Patreon sessions: up to seven days; signing out removes the Patreon session.
- Analytics
- Cookie choice: up to 183 days. Google Analytics data: according to the property’s settings and Google’s retention rules. PostHog events: up to 12 months. Active consent proof: up to two years; after withdrawal, minimal proof of consent, withdrawal and deletion: five years for compliance and legal claims.
- Security and purchases
- Application audit and webhook logs: 90 days. Infrastructure logs: as needed for incidents and security, extended only for an incident or legal duty; provider-specific details are available by email. Purchase entitlements: account operation and restoration; legally required accounting records: up to ten years.
Who may receive data?
Only authorised people and providers needed for the feature used have access: Hostinger (website and logs), Railway (API and database), Backblaze B2 (media), Apple, Google and Firebase (sign-in, purchases and integrity), RevenueCat (subscriptions), Patreon (optional connection), Google Analytics and PostHog Cloud EU (analytics after consent). We do not sell your data.
Some providers or their teams may process data outside the European Economic Area, including in the United States. Transfers must rely on an applicable adequacy decision or recognised safeguards, including Standard Contractual Clauses and supplementary measures where necessary. You can request the countries concerned and a copy or summary of safeguards by email. External services opened through a link apply their own privacy policies.
Your rights and choices
Depending on your situation, you have rights of access, correction, erasure, restriction and portability, and may object to processing based on legitimate interests. You can withdraw consent at any time, without affecting earlier lawful processing.
Use app settings to withdraw consent or request account deletion, or email buntpodcast@gmail.com. We normally reply within one month and may request the minimum information needed to verify your identity. A parent can contact us to exercise a child’s rights. You may also complain to the CNIL or your competent supervisory authority.
We protect data through encrypted communications, access controls and deletion procedures. This policy changes with the service; the date above identifies its version.