Privacy Policy
Last updated: October 10, 2026
1. Data Controller
The data controller is Oleksii Hiria (individual), contact: support@pltest.app / support@pltest.app.
2. Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Telegram identifier | user_id, username, display name | Account identification within the Service |
| Settings | Interface language, exam type, reminder time | Service personalisation |
| Learning progress | Question answers, correct count, question status | Readiness Score calculation, Error Deck algorithm |
| Payment data | Transaction ID, plan, date, email (if provided at checkout) | PRO access confirmation |
We do not collect: card details, passport or ID data, geolocation, phone contacts, or the content of other Telegram chats.
3. Legal Basis (GDPR)
- Performance of a contract (Art. 6(1)(b)) — processing is necessary to provide the Service you subscribed to
- Legitimate interest (Art. 6(1)(f)) — improving Service quality and preventing abuse
- Legal obligation (Art. 6(1)(c)) — retaining payment records as required by law
4. Data Retention
- Learning progress data — until account deletion or upon your request
- Payment records (transaction ID, plan, date, amount) — at least 5 years from the end of the year in which the tax payment deadline expired (art. 70 § 1, art. 86 § 1 of the Polish Tax Ordinance), for 2026 payments until 31.12.2032. The email given at payment is kept while the account exists; after the account is deleted, the payment record remains without the email
- After account deletion (
/delete_my_data) — all data is deleted within 30 days, except payment records
5. Third-Party Data Sharing
We do not sell or share your data with third parties for marketing purposes. Data may be shared only with:
- Stripe: payment provider that processes PRO access payments and card details (we do not receive or store them). Stripe acts under its own Privacy Policy
- Railway — hosting platform where the Service database is stored (EU servers)
- Sentry — error monitoring (anonymised technical logs only)
- When required by law or court order
6. Your Rights (GDPR)
As a data subject in the EU, you have the right to:
- Access — receive a copy of your data
- Rectification — correct inaccurate data
- Erasure — delete your data (use
/delete_my_datain the bot) - Restriction — restrict processing of your data
- Portability — receive your data in a structured format
- Objection — object to processing based on legitimate interest
To exercise your rights, contact: support@pltest.app. We respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority (in Poland — UODO: uodo.gov.pl).
7. Security
Data is stored in a secured PostgreSQL database on the Railway platform. Database access is restricted and protected. All data transfers use encrypted connections (TLS).
8. Cookies and site statistics
The Telegram bot does not use cookies. The website sets no cookies. It remembers the interface language in your browser (localStorage) so the next pages open in the same language; on the first visit the language is suggested from your browser settings.
Site statistics. We count ourselves which pages are opened and what is clicked on them: the page address, the domain of the site you came from (not the full address), utm campaign tags, whether you read three quarters of the page, clicks on bot buttons, prices and links to other sites, and the step number of the paths questionnaire (your answers are not sent). Nothing is stored on your device for this, and your IP address and browser details are not recorded. Each page view gets a random number that exists only while the page is open. When you go to the bot using a button on the site, the link carries a random click number: this tells the bot which page brought you, and that record is linked to your account in the bot.
Legal basis: legitimate interest (Art. 6(1)(f)), to understand which materials are useful. Records are kept for 13 months and then deleted automatically. You can object to this processing by writing to support@pltest.app. The site has no third-party counters or advertising trackers.
9. Policy Updates
We will notify you through the Service of any significant changes. The current version is always available on this page.
10. Contact
Privacy enquiries: support@pltest.app or support@pltest.app