Privacy Policy

What we collect

Account data: your email address when you create an account.

Learning data: your practice progress, per-topic accuracy, streak, exam attempts, and your chosen exam date.

Technical data: basic device and app information needed to run and troubleshoot the app, including crash reports.

Purchase data: which passes and coach boosts you bought and when, from the App Store or Google Play.

Coach questions: the messages you send the AI coach, so it can answer them.

Usage analytics, only if you agree in the app: which offers you see and choose. No advertising ID. You can turn this off any time in Settings.

Website visits, only if you accept on the website: which pages you view, how you arrived, and your device, browser and approximate location (country or city), measured with Google Analytics. Not used for advertising. You can withdraw any time via Cookie settings at the bottom of every page.

You can use most of the app anonymously, without an account.

How we use it

To provide the app: serve questions, track your progress, and sync it across your devices when you sign in.

To send the reminders you turn on (a daily practice nudge and exam countdown). These are scheduled on your device.

To keep the service secure and to improve it.

Legal basis (GDPR)

We process your data to perform our contract with you (providing the app), on the basis of your consent (e.g. reminders and usage analytics), and for our legitimate interest in keeping the service safe and improving it.

Sharing and processors

We host data with Supabase (our database and authentication provider) in the European Union.

If you sign in with Apple or Google, those providers process your sign-in.

Purchases are handled by the Apple App Store or Google Play; we do not receive your card details. RevenueCat processes your store purchases so we can unlock the pass you bought.

Google processes the questions you ask the AI coach (Gemini API) to generate answers, crash reports (Firebase Crashlytics) and, only with your consent, usage analytics (Firebase Analytics).

Zoho ZeptoMail delivers our account and purchase emails.

Google Analytics measures website visits, only with your consent. Google Ireland processes this data for us; any transfer to the United States is covered by the EU-US Data Privacy Framework.

We do not sell your personal data.

Storage and security

Data is stored on EU servers and protected in transit and at rest. Access tokens are kept in secure device storage (Keychain on iOS, app-private storage on Android).

Your rights

You can access, correct, export, or delete your data. You can delete your account and all associated data at any time from Settings → Account → Delete account.

You may also contact us to exercise any of your rights, or lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

No access to the app? You can also ask us by email to delete your account. How that works, and what we delete and keep, is explained at permioapp.com/delete-account.

Retention

We keep your account data while your account exists. When you delete your account, your personal data is removed from our systems.

Website analytics data is kept for at most 14 months.

Children

Permio is not directed at children under 16.

Changes and contact

We may update this policy; material changes will be reflected here.

Questions? Contact us at privacy@permioapp.com.