Privacy and cookie policy
Last updated: 8 October 2026
This policy explains what personal data Italian Tips (www.italiantips.app) collects, why, where it is stored and what rights you have. It covers the public website and the student area.
1. Who is the data controller
Claudio Brena, NIF/NIE Y9996152K, Camino Los Tanques 23, 35628 Pájara (Las Palmas), Spain. For any privacy question: ciao@italiantips.app.
2. What data we collect
- Account: full name, email and password. The password is stored encrypted and nobody, not even the controller, can read it.
- Preferences: interface language, Italian level, colour theme, weekly goal.
- Study activity: logins, content opened, answers to exercises, flashcards and quizzes (including what you typed and whether it was correct), mistakes to review, assigned learning paths and homework, reports of errors in the materials.
- Contact requests: if you write to us through the website, first name, last name (optional), email, phone and level.
- Reviews and feedback: display name, rating, text and country of the review; feedback text, with an optional name.
- Technical data: IP address and browser information, processed by the hosting providers to run and protect the website.
We do not collect payment data, we do not use analytics or advertising tools, and we do not sell data to anyone.
3. Why we use it and on what legal basis
- Creating and managing your account and letting you use the platform (exercises, progress, learning paths, assigned materials): performance of a contract, Art. 6(1)(b) GDPR.
- Following your progress as your teacher (activity summaries received by the controller): performance of a contract, Art. 6(1)(b). It is part of the study support service.
- Replying when you write to us: steps taken at your request before a contract, Art. 6(1)(b).
- Service emails (address confirmation, password recovery, account activation): Art. 6(1)(b).
- Publishing your review on the public page: only with your consent, Art. 6(1)(a), which you can withdraw at any time.
- Website security and abuse prevention: legitimate interest, Art. 6(1)(f).
The automatic marking of exercises is not a decision with legal effects on you, and we do no profiling for commercial purposes.
4. Who processes data on our behalf
- Supabase: database, account login and file storage. Data is stored in the European Union (Dublin, Ireland).
- Cloudflare: hosting and delivery of the website. Every request passes through its network.
- Resend: sending the platform's emails and login emails.
Cloudflare and Resend are based in the United States, and Supabase also has its headquarters in the United States. Transfers of data outside the European Union rely on the safeguards provided by the GDPR: the EU-US Data Privacy Framework, where the provider has joined it, and the European Commission's standard contractual clauses.
If you book a lesson on TidyCal or write on WhatsApp, you are using an external service with its own privacy policy: the data you enter there is also processed by that service as an independent controller.
5. How long we keep it
- Account and study activity: as long as the account is active. If you do not log in for 24 months, the account and its data are deleted.
- Contact requests from people who do not become students: 12 months.
- Published reviews: until you withdraw your consent or ask us to remove them.
- Anonymous feedback: without a time limit, because it is not linked to a person.
- Technical data: for the short periods set by the hosting providers.
6. Your rights
At any time you can ask to access your data, correct it, delete it, restrict its use, receive it in a readable format (portability) or object to its processing, and you can withdraw any consent you have given. Write to ciao@italiantips.app: we reply within 30 days. You can also delete your account by writing to the same address.
If you believe your data is not handled correctly, you can lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the data protection authority of the EU country where you live.
7. Minimum age
The platform is for people aged 18 or over. We do not knowingly collect data from minors: if we find out that an account belongs to a minor, we delete it.
8. Cookies
The website only uses technical cookies that it needs in order to work. There are no analytics, profiling or third-party cookies, so we do not ask for consent.
| Cookie | What it does | Duration |
|---|---|---|
| sb-… (Supabase) | Keeps you logged in | 7 days, 30 with "Remember me" |
| remember_me | Remembers whether you chose "Remember me" | 7 or 30 days |
| lang | Remembers the interface language | 1 year |
| admin_impersonator_rt, admin_impersonation_attivita | Administrator only, when opening a student's area to help them | 6 hours / until the browser is closed |
In your browser's storage we only save whether you closed the "install the app" banner. You can delete cookies and storage from your browser settings, but without technical cookies you cannot stay logged in.
9. Security
The website only uses encrypted connections (HTTPS), access to data is restricted for each user, and personal materials are visible only to the student they are assigned to and to the controller.
10. Changes
If this policy changes, we update the date at the top. For important changes we notify registered students by email.