Privacy Policy

Last updated: 25 July 2026

This policy explains what personal data YassouGreece ("we", "us") collects, why, and your rights. It is written to meet the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

1. Who we are (Controller)

YassouGreece is a Greek-language-learning web app operated as a sole undertaking from Switzerland. The data controller responsible for your personal data is Christos Antoniou, Müllerstrasse 35, 8004 Zürich, Switzerland. Contact: yassougreece2024@gmail.com.

2. Data we collect

• Account data: email address, password (stored only as a salted bcrypt hash), and your name.
• Profile data you choose to add: nickname, country of origin, native language, and other languages you speak.
• Learning data: saved phrases, phrases marked "mastered", your streak and progress.
• Purchase data: if you buy premium, your payment is processed by Paddle (see §4). We store only whether your account is premium and the time of purchase — never your card details.
• Usage analytics: page views and product events (which page, referrer, UTM campaign parameters, a random session identifier, device type, browser language and time zone, and a coarse country — the two-letter country code only, never a city or precise location). The country is worked out on our own server from your connection, using an offline lookup table: your IP address is read from the request, turned into a country code, and immediately discarded. We do not store your IP address or user-agent, we do not log them, and they are never sent to any third party.

3. Why we use it, and our legal basis

• To provide the service (account, login, saving/learning phrases, premium) — legal basis: performance of a contract.
• To process your purchase — contract + legal obligation (tax/accounting, handled by Paddle).
• Product analytics to understand usage and improve the app — legal basis: your consent (see our cookie/analytics notice) or, where permitted, our legitimate interest; you can opt out at any time.
• Security and abuse prevention — legitimate interest.

4. Who we share data with (Processors)

We use a small number of trusted providers who process data on our behalf:

• Paddle.com Market Ltd — payment processing. Paddle is the Merchant of Record for your purchase and its own privacy terms apply to payment data.
• Google (Sign-In) — if you choose "Sign in with Google", Google authenticates you and shares your email/name with us.
• Railway — cloud hosting and database (application data is stored here).

We never sell your personal data.

5. International transfers

Some providers process data outside Switzerland/the EEA (e.g. in the United States). Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and the providers' own data-protection frameworks.

6. How long we keep it

We keep account and learning data for as long as your account exists. If you delete your account, your account and learning data are deleted and your analytics events are anonymised or removed. Payment records are retained by Paddle as required by law.

7. Your rights

Under the GDPR/FADP you can request access to, correction of, deletion of, or a copy (export) of your personal data, object to processing, and withdraw consent at any time. You can delete your account and data yourself from your profile settings, or email us at yassougreece2024@gmail.com and we will respond within 30 days. You may also lodge a complaint with your local supervisory authority (in Switzerland, the FDPIC).

8. Cookies & local storage

We use browser local storage for essential functions (your login token and a session identifier). Non-essential product analytics run only with your consent — you can accept or decline via the banner shown on your first visit, and change your choice at any time. See also our Terms.

9. Children

YassouGreece is not directed at children under 16. If you are under 16, please use it only with the consent of a parent or guardian.

10. Changes

We may update this policy; material changes will be reflected by the "last updated" date above.