Privacy Policy

• Account and profile data: name, email, hashed password, preferred language, and study preferences.
• Learning data: notes and flashcards, quiz attempts, results, and progress metrics.
• Purchases and subscriptions: product identifiers, receipts or transaction IDs, and entitlement status from Apple App Store or Google Play.
• Device and usage data: app or OS version, device type, diagnostics, crash logs, IP based general location, timezone, and security logs.
• Push notifications (optional): a device token when you opt in.
• Support and communications: messages, feedback, consent records, and marketing preferences.
• Website cookies: strictly necessary cookies; analytics or advertising cookies only after consent. See our Cookie Notice for details.

We do not collect special category data or precise GPS location, and we do not knowingly collect data from minors.

• Provide the services (accounts, sync, quizzes, progress, availability). Legal basis: contract; legitimate interests in quality and reliability.
• Manage purchases and subscriptions (restore purchases, entitlement checks, tax compliance). Legal basis: contract; legal obligation for tax and accounting.
• Analytics and product improvement (aggregate statistics, crash diagnostics). Legal basis: legitimate interests; in some regions we rely on consent for cookies or SDKs.
• Security and fraud prevention (detect abuse, secure accounts). Legal basis: legitimate interests; legal obligation where applicable.
• Communications: transactional updates under contract or legitimate interests, and marketing messages only with consent that you can withdraw.
• Legal compliance and enforcement. Legal basis: legal obligation and legitimate interests to defend our rights.

We do not perform automated decision making that produces legal or similarly significant effects.

We never sell personal data. We share it only with:

• Processors for hosting, databases, analytics, crash reporting, email or push, and customer support under data processing agreements.
• App stores and payment platforms such as Apple and Google to process purchases; they handle payment details while we receive receipt metadata.
• Legal authorities when required to comply with law or protect rights and safety.
• Potential merger or acquisition partners, with safeguards and notice.
• Request our current subprocessors list at oenoquest.com/subprocessors.

• Account, profile, and learning data: kept while your account is active. If inactive, we delete or anonymise after 24 months.
• Purchase and subscription records: retained according to tax or accounting law, typically seven to ten years depending on jurisdiction.
• Logs and diagnostics: generally held for twelve months or less.
• Push notification tokens: kept until you opt out or after twenty four months of inactivity.

Backups are purged on a rolling schedule.

Depending on your location you may access, correct, delete, restrict, transfer, or object to processing, and withdraw consent. You may also complain to your supervisory authority (for example an EU data protection authority or the UK Information Commissioner's Office).

To exercise your rights, email privacy@oenoquest.com. We respond within thirty days and may ask for identity verification.

EEA and UK: Controller is Studio 1979. Legal bases are listed above. Transfers are safeguarded as described in Section 5.

California: We do not sell or share personal information for cross context advertising. Categories collected include identifiers, commercial information, internet or activity data, and inferences such as learning progress. California residents can request access, correction, deletion, and opt out. We do not discriminate when you exercise your rights.

Brazil: Legal bases include contract, consent, legitimate interest, and legal obligation. You have rights to confirm processing, access, correction, anonymisation, portability, deletion, and information on sharing.

Email: contact@oenoquest.com

Postal: Studio 1979, Van Goyenstraat 9, 6814 KP, Arnhem, The Netherlands.