Privacy Policy

The controller responsible for processing your personal data is:

• Company: [Company name] ("YKIprep")
• Business ID: [Business ID]
• Registered address: [Registered address], Finland
• Data protection contact: privacy@ykiprep.fi

If you have questions about this policy or your personal data, contact us at privacy@ykiprep.fi.

Personal information

When you register as a user or contact us, we may collect the following information:

• Name and email address
• Profile information (language level, learning goals, target exam date)
• Authentication information (if you sign in with Google or Apple)
• Messages you send through the contact form

Usage data

We automatically collect information about how you use the Services, including:

• Lesson progress and completion data
• Duration and frequency of practice sessions
• Device information and operating system
• IP address and general location (country level)

AI conversation data

When you converse with our AI coach, we process your messages and, where applicable, your voice input to generate responses and feedback and to improve the learning experience. This data is processed securely and is not sold or shared with third parties for marketing purposes.

Payment information

Purchases are processed by the Apple App Store or Google Play. We do not collect or store your full payment card details; we only receive subscription status information needed to provide premium features.

We use the information we collect for the following purposes:

• Providing, maintaining, and operating the Services
• Personalizing your learning experience and study path
• Tracking your progress and providing performance analysis
• Developing our AI models, content, and features
• Responding to inquiries and providing customer support
• Sending service-related communications
• Ensuring platform security and integrity, and complying with legal obligations

Under Article 6 of the GDPR, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): to create and manage your account and deliver the Services you request.
• Legitimate interest (Art. 6(1)(f)): to secure, develop, and understand our Services, and to respond to your messages. We balance these interests against your rights.
• Consent (Art. 6(1)(a)): for optional analytics/marketing cookies and other optional communications. You can withdraw your consent at any time.
• Legal obligation (Art. 6(1)(c)): to comply with accounting, tax, and other statutory obligations.

We do not sell your personal data. We share data only with:

• Service providers (data processors): hosting and infrastructure services, AI/language-model providers, analytics, and email delivery — who act on our instructions under data processing agreements.
• App stores: Apple and Google, for subscription and payment processing.
• Legal requirements: when required by law, a court order, or a competent authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to the terms of this policy.

An up-to-date list of sub-processors is available on request at privacy@ykiprep.fi.

We aim to process personal data within the European Economic Area (EEA). Where a service provider (for example an AI or infrastructure vendor) processes data outside the EEA, we ensure appropriate safeguards — such as an EU adequacy decision or European Commission Standard Contractual Clauses (SCCs) — so your data receives an equivalent level of protection.

We retain personal data only for as long as necessary for the purposes described above. Account and learning progress data are retained while your account is active, and are deleted (or anonymized) within a reasonable period after account closure. Contact form messages are retained only as long as needed to handle your request. Data needed for legal or accounting purposes is retained for the statutory period. You may request deletion of your data at any time (see section 9).

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular audits. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to the conditions set out in the GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Have your data erased — the "right to be forgotten" (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7)

To exercise these rights, contact us at privacy@ykiprep.fi. We will respond to your request within one month, as required by the GDPR. Exercising your rights is normally free of charge.

To delete your account and the data associated with it, follow the steps on our account deletion page.

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with Finland's supervisory authority:

• Office of the Data Protection Ombudsman
• Postal address: PO Box 800, FI-00531 Helsinki, Finland
• Email: tietosuoja@om.fi
• Website: tietosuoja.fi/en

We would, however, appreciate the opportunity to address your concerns directly first.

Our website uses strictly necessary cookies, which are required for core functionality, and, only with your consent, optional analytics cookies, which help us understand usage. On your first visit, our cookie banner lets you accept or decline optional cookies; you can change your choice at any time by clearing your browser storage or adjusting your browser settings. Necessary cookies do not require consent.

Our AI coach automatically generates language feedback and readiness assessments. These outputs are intended only to support learning and do not produce legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR. AI-generated content may contain errors and does not replace the official YKI exam or formal instruction.

Our Services are not directed at children under 15 (the digital consent age in Finland under the Data Protection Act). We do not knowingly collect personal data from children younger than this. If you believe a child has provided us with their information, please contact us so we can delete it.

We may update this privacy policy from time to time. We will publish the updated policy on this page and update the "Last updated" date. We will provide more prominent notice of material changes. We recommend reviewing this policy periodically.

If you have questions about this privacy policy or your personal data, contact us:

• Email: privacy@ykiprep.fi
• Website: ykiprep.fi/contact