Draft for owner review. This notice is not in effect yet. Highlighted parts still need the owner's facts or a check against the providers' contracts.
Privacy
Your learning lives on your device. It only leaves it when you ask for something that needs a server: checking an answer, a backup, or a subscription. This page says exactly what goes where.
Who is responsible
RVMSES, KvK 95364188, registered address, the Netherlands, is the controller for your personal data in Sossefy.
Questions or requests: support@sossefy.com.
What stays on your device
The sources you import, the questions made from them, your answers, your progress, reviews and rewards are stored in the app on your device, or in your browser's storage on the web. Imports are read on your device. Without an account, none of this is sent to us.
What we process, why, and on what basis
| When | Data | Why | Legal basis |
|---|---|---|---|
| You create an account and sign in | Email address, one-time sign-in codes, sign-in times, IP address in authentication logs | To give you an account and keep it secure | Contract; legitimate interest in security |
| You ask for an answer to be checked | Your answer, the question and its rubric, and the relevant passages from your source are sent for checking. We keep the judgment (verdict, feedback and cited passages), a fingerprint of the answer, the model used and usage counts with your account. | To check your answer, to count it against your allowance once, and to never record the same evidence twice | Contract |
| You report a judgment you disagree with | Your reason and note, the question, your answer, the feedback and the passages it cited | So a person can check whether the judgment was fair and improve the grading | Contract; legitimate interest in fair grading |
| You make a backup | A copy of your learning record: sources as extracted text, questions, answers and progress. Original files are not uploaded. | To restore your learning on another device | Contract |
| You subscribe to Pro | Your account id (not your email address) and the status, period and product of your subscription. Card and billing details are entered with Stripe; we do not receive them. | To sell Pro and give you access | Contract; legal obligation for accounting |
| You import a link on the web | The address of the page you asked for, passed through our server to fetch it | A browser cannot read another website directly | Contract |
| You email us | Your email and what you write | To answer you | Contract; legitimate interest |
| Something goes wrong on our servers | Short technical records: account id, request id, status codes. Never your sources, answers, email address or tokens. | To find and fix failures | Legitimate interest in a working service |
We do not use analytics, advertising or session-recording tools, we set no tracking cookies, and we do not sell your data or use it for advertising. Your answers and sources are not used to train AI models.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers running our database, sign-in, backups and server functions | Germany |
| OpenAI | Checking written answers | United States |
| RevenueCat | Subscription management | United States |
| Stripe | Payment processing | EU and United States |
| Brevo | Sending sign-in codes by email | France |
| Zoho | Our support mailbox | EU |
| Vercel Inc. | Serving the web app and fetching pages you import by link | United States; the app's server functions run in Frankfurt, Germany |
Each provider processes data only on our instructions under a data processing agreement. Transfers to the United States rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses. Owner to verify each agreement and transfer basis.
OpenAI does not use data sent through its API to train its models by default. It may keep requests for a limited period to detect abuse. Owner to confirm the retention setting on the Sossefy API project.
How long we keep it
| Data | Kept for |
|---|---|
| Your account, answer judgments, reports and backups | Until you delete them or your account. We keep up to three earlier backup versions and three conflict copies. |
| Record that an account was deleted (account id, dates, usage totals) | 90 days after deletion finishes |
| Receipts of subscription events | 90 days |
| Founding-tester eligibility history | 24 months after each change; the minimum needed to honour a lifetime discount, for as long as it can be claimed |
| Invoices and payment records | 7 years, as Dutch tax law requires (10 years for some cross-border VAT) |
| Server backups | maximum period |
Your rights
You can ask to see, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent where we rely on it. Much of this you can do yourself:
- Download everything you learned: Profile → Privacy and data → Export everything
- Delete your account and cloud data: Profile → Account → Delete account, or our account deletion page
- Remove learning from one device: Profile → Privacy and data → Delete everything on this device
For anything else, email support@sossefy.com. We answer within one month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Deleting your account
Deleting your account removes your account, answer judgments, reports, usage records and every backup from our servers. Records we must keep (see above) are kept without your learning content. Copies still on another device stay there until you remove them in the app on that device. Deleting your account does not cancel a subscription: cancel Pro first. Subscription records held by RevenueCat and Stripe are removed or anonymised on request after your account is deleted, except what we must keep for accounting.
Children
Sossefy accounts are for people aged 16 or older.
Security
Data travels encrypted. Backups are stored privately and can only be reached through short-lived links issued to your signed-in account. Our servers accept a request for your data only with a valid session for your account.
Changes
If we change this notice in a way that matters to you, we tell you in the app or by email before the change applies.