KoaLearn Privacy Notice
1. Controller and contact
The controller is Fabian Graziano Marco Dattis, who publishes KoaLearn under the name FumFum and is established in Italy. For personal-data requests, write to fumfumdev@gmail.com.
2. Data we process
For accounts, we process the Firebase user ID (UID), email address, and data returned by the configured sign-in method. Profiles contain a public nickname, avatar, selected language and course. To provide learning features, we record completed lessons, answers and attempts, skill errors, unlocked exercises, sessions, lives, XP, and streaks. Groups require a group name, membership, and invite codes. Relevant leaderboards show nickname and XP, never email.
On your device, we store preferences, downloaded content, answer drafts, and notebook pages. The current notebook does not sync to the server; uninstalling the app or clearing its data may erase it. Service requests may involve technical processing of IP addresses and connection data by the infrastructure in use.
3. Purposes and legal bases
We use data needed to create and manage accounts, provide lessons, check answers, save progress, and operate groups and leaderboards to perform the requested service (GDPR Article 6(1)(b)). We process technical data needed to protect the service, prevent abuse, and resolve errors on the basis of our legitimate interest in security and reliability (Article 6(1)(f)). Processing required by law relies on the applicable legal obligation (Article 6(1)(c)). The beta does not use data for personalized advertising.
4. Providers and recipients
Firebase Authentication handles identity when real authentication is configured. A chosen sign-in provider, such as Google when available, processes data under its own notice. The KoaLearn backend and SurrealDB hold profiles and progress. People viewing a global or group leaderboard can see your nickname and XP; group members can see group information. Hosting infrastructure processes technical data needed to operate the service. On Android, ads use Google AdMob, including when test ads are configured. Its SDK may process IP addresses, device information, identifiers, and interaction and diagnostic data according to configuration and privacy choices. The app requests non-personalized ads. Publisher ad units use Google UMP; when required, choices can be changed through Advertising preferences in Profile. Provider information: https://policies.google.com/privacy. Pro demo does not process real payments.
5. Location and transfers
The public backend and SurrealDB database are hosted on an Oracle Cloud VPS in the Frankfurt region, Germany (European Union). The database is local to the VPS and is not publicly exposed. The informational website is prepared for the same infrastructure. Firebase Authentication and Google AdMob are Google services and may involve processing and transfers outside the European Economic Area under their respective terms and applicable safeguards. Provider information: https://firebase.google.com/support/privacy, https://policies.google.com/privacy and https://www.oracle.com/legal/privacy/services-privacy-policy/. Development environments may run locally with separate data.
6. Retention
We keep account and learning data while an account is active and as needed to handle requests or legal obligations. To request account closure and deletion of associated data, email fumfumdev@gmail.com; there is currently no in-app account-deletion command. Local notes remain on your device until you or the app-data controls erase them. Retention periods for logs, backups, and provider data depend on the actual service configuration and must be specified before public distribution.
7. Your rights
Where the GDPR provides, you may request access, correction, deletion, restriction, and portability, and object to processing based on legitimate interest. Contact fumfumdev@gmail.com. You may also complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent authority. We do not use automated decisions with legal or similarly significant effects on individuals: answer checking and unlocking only affect the app’s learning flow.
8. Changes
We will update this notice when services, providers, or data practices change and make the current version available in the app. This version describes the beta and the configuration stated here. New providers, changes to advertising, and real purchases require an updated notice before activation.
9. This website
This site introduces KoaLearn and publishes its notices. It has no advertising, analytics, tracking pixels, registration forms or external CDN resources. Fonts, images and scripts are served by the site itself. It sets no cookies. It uses localStorage only to remember manually selected language and theme preferences, which are not sent to the server. Without a saved choice, the entry page uses browser language preferences and the theme follows the system. We do not use geolocation or IP addresses to choose a language.
The infrastructure processes technical request data, including IP addresses, to deliver pages and protect the service. Support emails are processed to respond to requests. In-app advertising choices are handled separately through Google UMP.
10. Account deletion
You can request account closure and deletion of associated data by emailing fumfumdev@gmail.com. You do not need to log in to this website. See the account deletion page.