Privacy policy
This policy describes what data the website and the app process and why.
Last updated: October 4, 2026
Data controller
The controller is Kazem Ghorbanian, based in Spain. For anything to do with your data, including exercising your rights, write to support@viaready.com.
What this policy covers
It covers the viaready.com website and the ViaReady app for Android and iOS. One thing is worth making clear from the start: the app creates an anonymous account the first time it opens, before you register for anything. That identifier, and everything stored under it, is personal data, and this policy describes it just as it describes an account with an email address.
What the app handles
An anonymous account identifier, created when you first open the app. Your study activity is saved and synchronised under it: lessons and blocks viewed, answers and mistakes, reviews, vocabulary, bookmarks, achievements, points, streaks and active days, mock exams and their results, your readiness estimates, an unfinished onboarding draft, your notification settings along with the permission state and time zone of the device, and the record of your subscription. If you send feedback from the app, the text you write is saved as well, and so is your email address if you choose to add one so we can reply. If you ask the AI explainer about a lesson, your question and its answer are saved as well, as the section on AI explanations describes.
What the website handles
If you create an account: your email address, the name your sign-in provider gives us, how you signed in (Google, Apple or an email link), your language, and the dates you created the account and last used it. If you buy: the plan, the period, the amount, the currency, the status and the payment provider identifiers for the transaction. If you buy without signing in: we keep the purchase on an account for the email address you paid with, together with your language, so it is yours when you sign in with that address. Your card details never pass through our servers. If you use the contact form: your email address and your message. If you ask to be told when the app launches: your email address and a record of your consent. Your IP address is used in the moment to limit abuse and is not kept in our records.
AI explanations
In the app you can ask for more help with a lesson, a practice question or an exam you are reviewing. When you do, we send your question, the text of that lesson and the official sources it cites, and the language you are learning in, to Google’s Gemini model on Vertex AI, which writes the answer. Google may process it outside the European Union. We do not send your name, your email address or your progress. Your question and the answer are stored on our servers for ninety days, so that we can look into an answer you report, and are then deleted automatically. Answers are generated by AI and are not reviewed by a person: the lesson and the law it cites are the authority. Please do not include personal details in what you write. The app asks you to agree to this before the first question you send, and sends nothing until you do.
Analytics, cookies and diagnostics
On the website, analytics and campaign cookies do not load until you accept them, and you can change your mind at any time. Only the language cookie, the session cookie and the one that stores your own choice are strictly necessary. In the app, usage analytics, crash reports and performance measurements are active from the first launch and are tied to the anonymous identifier. Events use a closed vocabulary of identifiers and categories: never lesson text, never anything you typed, never exact timestamps. If you would rather we did not process your data for this purpose, write to support@viaready.com.
What we do not collect
We do not ask for or collect your device location: the app requests no location permission and the site uses no geolocation. We do not touch your contacts, your photos, your camera or your microphone. There is no advertising SDK, no advertising identifier and no cross-app tracking, and we sell data to nobody. Two details, so that this is exact: Google infers an approximate region from the IP address in its own measurement, and the app syncs your device time zone so that reminders arrive at a sensible hour.
What we use the data for, and on what legal basis
To give you the service, keep your account and sync your progress across devices: performance of the contract. To handle your purchase, activate your subscription and issue and keep the receipts: performance of the contract and a legal obligation. To keep the service secure, prevent abuse and diagnose crashes and performance problems: legitimate interests. To answer the questions you ask about a lesson: your consent, which the app asks for before your first question. For website analytics and campaign attribution: your consent. For usage analytics inside the app: our legitimate interest in understanding what works and fixing what does not. To tell you about the launch if you ask us to: your consent. To answer what you write to us: performance of the contract or legitimate interests, depending on the case.
Who we share it with
With providers that process the data on our behalf and on our instructions. Google, through Firebase and Google Cloud, hosts the site, handles sign-in, stores your progress, answers the questions you ask about a lesson with its Gemini model on Vertex AI, and provides analytics, crash reporting, performance metrics, remote configuration, app verification and notifications. Stripe processes payments and handles your card details directly, which we never receive. If you ask to be told about the launch, that email is delivered through Resend. We share nothing with advertising networks or data brokers. We would hand data to an authority only where a law required it.
International transfers
Google and Stripe are global companies and may process data outside the European Economic Area, mainly in the United States. That includes the questions you send to the AI explainer, which Google may process outside the European Union. Those transfers rely on the safeguards set out in their data processing terms, which include the European Union standard contractual clauses and, where it applies, the EU-US Data Privacy Framework. Ask us at support@viaready.com if you need more detail.
How long we keep it
Your account and your progress, for as long as the account exists; if you ask for it to be deleted, they are erased within thirty days of your confirmation. Payment records and invoices, for as long as tax and commercial law requires, because they identify a transaction rather than your study history. What you write to support, until the matter is resolved. Your questions to the AI explainer and their answers, ninety days, after which they are deleted automatically. Your address on the launch list, until we send that email or you unsubscribe. Cookies last as long as the cookie policy says: the session five days, your cookie choice and your language one year, campaign attribution thirty days, and Google Analytics up to two years. The codes that carry you from the website into the app expire after fifteen minutes and work once.
Your rights
You can ask for access to your data, for it to be corrected or erased, to restrict or object to certain processing, and to receive a copy in a portable format. Where the basis is your consent, you can withdraw it at any time without affecting what was done before. Write to support@viaready.com from your account address and we will answer. If you think we have handled it badly, you can complain to the Spanish Data Protection Agency (aepd.es).
How to delete your account and your data
The delete your account page sets out exactly what goes and what has to be kept, and you can send us the request from there. You write from the account email address, we confirm it is you, and we tell you what will be erased before anything is touched. The account and your whole study history are deleted within thirty days of your confirmation. What stays is the payment records the law requires and aggregate counts that no longer identify you.
Children
The service is not aimed at children under fourteen and we do not knowingly collect data from anyone below that age. If you believe a child has given us their data, write to support@viaready.com and we will delete it.
Changes to this policy
If we change something, we update the date shown at the top. When a change genuinely affects how we handle your data, we will say so in the app or on the site before it takes effect.