Privacy Policy

Effective date: March 1, 2026
Last updated: March 9, 2026

Plexiqa respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains what data we may collect, why we collect it, how we use it, who we may share it with, and what rights you have in relation to your personal data.

1. Who is responsible for your data

The controller of your personal data is:

Service provider: Andrei Makushkin (JDG)
Brand / service name: Plexiqa
NIP: 1133036552
Address: ul. Mińska 31a/111, 03-808 Warszawa
Privacy contact: team@plexiqa.com
Support contact: support@plexiqa.com

If you have any questions about this Privacy Policy, the processing of your personal data, or if you would like to exercise your rights, you can contact us using the email addresses above.

2. What data we may collect

Depending on how you use Plexiqa, we may process the following categories of data:

2.1. Account data

email address;
first name;
last name;
password in the form required for authentication;
avatar;
internal account identifiers.

2.2. Data received when signing in with Google

If you sign in using Google, we may receive:

email address;
name;
avatar;
technical identifiers required for authentication and account linking.

2.3. Learning and user data

selected words;
learning answers;
exercise history;
learning progress;
streak data;
selected topics;
learning preferences;
data about how you interact with app features.

2.4. Technical data

IP address;
device type;
browser and operating system data;
session data;
application logs;
error diagnostics data;
cookies, localStorage, session storage, and similar technologies;
product analytics data.

2.5. Communication data

If you contact us by email, we may process:

your email address;
the content of your message;
attachments and any other information you choose to provide.

3. Why we use your data

We may process personal data for the following purposes:

creating and maintaining your account;
signing you in and authenticating access;
providing access to Plexiqa features;
saving learning progress, history, and user settings;
personalizing exercises, words, and learning content;
maintaining security and preventing misuse;
technical diagnostics, error monitoring, and service stability;
analytics and product improvement;
sending service-related messages;
sending product updates and marketing communications, where allowed by your settings or applicable law;
handling support requests;
operating AI-powered features within the service.

4. Legal bases for processing

We process personal data on one or more of the following legal bases:

4.1. Performance of a contract

Where processing is necessary to create your account, let you sign in, provide Plexiqa features, save your progress, and operate the core functionality of the service.

4.2. Legitimate interests

Where processing is necessary for:

keeping the service secure;
preventing fraud or misuse;
diagnosing technical issues;
improving Plexiqa's features, interface, and quality;
protecting our rights and legitimate interests.

Where your consent is required by law, for example for analytics cookies or certain types of communications.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before that withdrawal.

4.4. Compliance with legal obligations

Where processing is necessary to comply with applicable legal requirements.

5. Whether providing data is mandatory

Some data is necessary for creating and using an account in Plexiqa.

For example, without your email address, authentication data, and certain technical data, we may not be able to provide access to the service or ensure that it works properly.

If you do not provide mandatory data, some Plexiqa features may be unavailable.

Other data may be optional and provided at your discretion.

We may share data with service providers that help us operate Plexiqa. These may include:

Supabase - database, authentication, and data storage;
Vercel - hosting and application infrastructure;
PostHog - product analytics;
Sentry - error monitoring and technical diagnostics;
OpenAI, Gemini, and other LLM providers - AI-powered features;
Resend - email delivery;
Google - authentication and related services.

We aim to share only the data that is actually necessary for the relevant purpose.

7. AI-powered features

Plexiqa may use AI-powered features to improve the learning experience and user experience.

To operate such features, we may send a limited amount of data to external AI providers where necessary to fulfill a specific request, for example:

learning answers submitted by the user;
selected words;
data related to generating, adapting, or improving learning content.

We try to limit the amount of data shared to the minimum necessary for the relevant feature.

8. International data transfers

Where possible, we choose settings and providers that allow data to be stored and processed within the European Economic Area.

However, some service providers may process data outside the European Economic Area or use infrastructure and subprocessors located outside the EEA. In such cases, we aim to use legally recognized safeguards and take reasonable steps to ensure an appropriate level of data protection.

9. How long we keep data

We keep personal data no longer than necessary for the purposes for which it was collected.

The following retention periods generally apply:

account and learning data - while the account remains active;
inactive accounts - up to 24 months of inactivity, after which the account may be deleted following prior notice;
data after an account deletion request - generally deleted within 30 days, unless a longer retention period is required by law, for security reasons, or for the protection of rights;
backups - up to 90 days;
technical and security logs - up to 12 months;
analytics data - up to 24 months;
support communications - up to 24 months after the conversation is closed.

In some cases, certain data may be kept longer where necessary to comply with legal obligations, resolve disputes, prevent misuse, or protect our rights.

10. Cookies and similar technologies

We use cookies, localStorage, session storage, and similar technologies for:

signing you into your account and maintaining your session;
ensuring that Plexiqa works properly;
saving user settings;
analytics and service improvement.

Some of these technologies are necessary for the operation of the app.
Analytics technologies may be used only where there is an appropriate legal basis, where required by law.

If Plexiqa provides a consent banner or privacy settings, you may manage the relevant preferences through those tools.

11. Personalization and profiling

We may use data about your level, learning activity, selected words, topics, and preferences to personalize exercises, recommendations, and learning content within Plexiqa.

This helps us:

provide more relevant exercises;
adapt content to your level;
make learning more useful and convenient.

This personalization is not used to make decisions that produce legal effects or similarly significant effects for you.

12. Your rights

Depending on the applicable law, you may have the right to:

access your personal data;
request correction of inaccurate data;
request deletion of your data;
request restriction of processing;
object to processing based on legitimate interests;
request data portability;
withdraw consent where processing is based on consent;
lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us at: team@plexiqa.com
For support-related questions, you can also contact: support@plexiqa.com

13. Data security

We take reasonable technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction.

However, no method of transmitting data over the internet and no storage system can be guaranteed to be completely secure.

14. Children's data

Plexiqa is not specifically intended for children under the age of 16.

If we become aware that personal data of a child has been provided in violation of applicable requirements, we will take reasonable steps to delete that data.

If you believe that a child has provided personal data improperly, please contact us at: team@plexiqa.com

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If the changes are material, we will try to notify you in an appropriate way, for example through the service interface or by email.

The current version of this Privacy Policy will always be available within Plexiqa.

16. Contact

If you have any questions about privacy, personal data processing, or this Privacy Policy, you can contact us at: