Privacy Policy
Last updated: 02 July 2026
This Privacy Policy explains how okpolish.pl ("we", "us") collects and uses your personal data when you use our website and services to learn Polish and prepare for the TELC B1 and Polish state exams. We are the data controller. Questions? Email info@okpolish.pl.
1. Information we collect
- Account data — your name, email address, password (stored hashed) and, if set, a profile photo.
- Google sign-in — if you sign in with Google, we receive your name, email, profile picture and Google account ID.
- Learning data — your lesson progress, completed phrases, quiz results and preferences (theme, player settings).
- Payment data — handled by our payment processor (Stripe). We do not store your card details; we keep a record of your purchase and access period.
- Contact messages — the name, email and message you submit through our contact form.
- Technical data — IP address, browser/device information, and cookies (see our Cookie Policy).
2. How we use your data and legal bases
- To provide and operate the service and your account — performance of a contract.
- To process payments and grant premium access — performance of a contract.
- To protect the site from abuse, spam and fraud (rate limits, captcha, IP checks) — legitimate interests and legal obligation.
- To respond to your messages and send service-related emails — legitimate interests / consent.
- To comply with legal and accounting obligations — legal obligation.
3. Sharing & processors
We share data only with service providers that help us run okpolish.pl, including: Google (sign-in and text-to-speech), Stripe (payments), Cloudflare (Turnstile bot protection), image providers (Pixabay, Pexels), our hosting and email providers. Some providers may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses).
4. Data retention
We keep your account data while your account is active. We delete or anonymise it on request or after prolonged inactivity, except where we must retain records (e.g. invoices) to meet legal obligations.
5. Your rights (GDPR)
If you are in the EEA/UK you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise these rights email info@okpolish.pl. You also have the right to lodge a complaint with your supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl).
6. Security
We use appropriate technical and organisational measures (hashed passwords, HTTPS, access controls) to protect your data. No method of transmission is 100% secure.
7. Children
The service is not directed at children under 16. If you believe a child has provided us data, contact us and we will remove it.
8. Changes
We may update this policy; the "last updated" date above reflects the latest version. Material changes will be highlighted on the site.
9. Contact
okpolish.pl — info@okpolish.pl