Privacy Policy

1. Data controller

Name: Michael Scott-Barrett
Email: mike@studyboards.me
Address: ul. Lucjana Rydla 32/79, Kraków, Poland 30-087

2. Data collected and purposes

We process:

• Email address, first name, surname and preferred language are required to use the platform.
• Records of boards visited, tasks accessed, answers submitted, revision activity, user IDs and associated timestamps.

We use this data to operate StudyBoards, authenticate users, provide content in their preferred language, record board and task activity, and calculate usage statistics.

3. Legal bases and service providers

Processing necessary to provide the service is based on Article 6(1)(b) GDPR. Where applicable, security and service improvement activities may be based on legitimate interests under Article 6(1)(f) GDPR.

4. Service providers

The application and MySQL and MongoDB databases are hosted on a virtual private server provided by mydevil.net in Warsaw, Poland.

We use Resend to deliver login emails. For this purpose, Resend receives the recipient's email address and the information required to send the login link. Resend may process associated delivery data and logs.

5. Retention and deletion

Personal data is retained for the period necessary for the purposes described in this policy. Specific retention periods or criteria must be established for account data, activity records and relevant technical logs.

To request account deletion, contact mike@studyboards.me. We will handle your request under applicable data-protection law.

Study records, including submitted answers, may be retained for statistics only where they have been irreversibly anonymised. Records that remain identifiable are treated as personal data.

6. Your rights

You have the right to access, rectify and request erasure of your personal data, and to request restriction of processing. You have the right to data portability where the GDPR provides for it, and the right to object to processing based on legitimate interests.

You have the right to lodge a complaint with a competent data-protection supervisory authority, including the Polish Personal Data Protection Office (UODO).