Privacy Policy

Effective date: October 28, 2026

Changes in this version

  • Shorter text. What data we collect and how we use it have not changed.
  • Recipients are described by category. Ask us and we will name our current providers.
  • The controller is named at the top, and purposes and legal bases are in one section.
What we store and why.

1. Who is responsible

The controller of your personal data is Kseniya Beliauskaya, who runs PolishReady as an unregistered business activity (działalność nierejestrowana). The postal address is at the bottom of this page. Write to support@polishready.pl with any question about your data.

2. Data we collect

  • Account: your email address and password or, if you sign in with Google, the email address, name and profile picture of that Google account. We cannot create an account without an email and password or Google sign-in. Other details, such as your exam date, are optional.
  • Learning: study track, exam date, interface language, time zone, progress, exercise results and study streak.
  • Your content: essay photos, speaking recordings and written answers.
  • Payments: plan, billing period, subscription status and when you accepted the Terms. The payment provider handles your card details; we do not receive them.
  • Referrals: your referral code, who referred you and any bonus credits you earned.
  • Email preferences: whether and when you turned on study emails or exam reminders, and which reminders and offers we sent you.
  • Usage: which screens you open and steps such as starting or finishing an exercise, seeing an upgrade offer or choosing a plan. This does not include your answers.
  • How you found us: your optional answer in onboarding, and whether you signed up from our free mock exam.
  • Technical data: IP address, browser, device, operating system, pages requested and times, in logs.
  • Cookies: necessary cookies, a referral cookie and, only with your consent, analytics cookies and your analytics browser ID, as described in the Cookie Policy.

3. Why we use data (legal bases)

We process personal data under the GDPR (Regulation (EU) 2016/679) on these bases:

  • Contract (Art. 6(1)(b)): to run your account and the Service, match study to your level and track, give feedback on your writing, speaking and exercises, handle your subscription, and write to you about your account and support requests.
  • Legitimate interests (Art. 6(1)(f)): to keep the Service secure, prevent abuse and fraud, enforce the Terms, run the referral programme, and improve the Service using usage data and how you found us. You can object to this (section 7).
  • Consent (Art. 6(1)(a)): analytics cookies, optional study emails (tips, check-ins and, after a paid plan ends, occasional offers) and exam reminders. Each has its own switch in your profile or in Cookie settings. You can withdraw consent at any time; this does not affect processing before the withdrawal.
  • Legal obligation (Art. 6(1)(c)): accounting records and replies to authorities.

Feedback is generated automatically by an AI model. It helps you study and is not a decision that has legal or similarly significant effects on you (Art. 22 GDPR).

4. Who receives data

We share data with these categories of recipients, only as far as each of them needs it:

  • providers of hosting, database, sign-in and file storage;
  • a payment provider, which processes payments and card details;
  • email providers, for account emails, support and the optional emails you choose;
  • an AI model provider, which receives essay photos, recordings and answers to generate feedback;
  • a bot-protection provider, which checks your IP address and browser signals at sign-up;
  • with your consent, the analytics providers named in the Cookie Policy;
  • authorities, where the law requires it, and others where needed to protect rights or safety or to prevent fraud.

Ask us and we will name our current providers. We do not sell personal data.

5. Transfers outside the EEA

Some of these providers are based in the United States or may access data from there. For those transfers we rely on the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses. Write to support@polishready.pl for a copy of the safeguards.

6. How long we keep data

  • Account and data linked to it (learning, content, payments, referrals, email preferences, how you found us): while your account exists. You can delete your account in your profile, or ask us by email and we do it within 30 days. We then delete the data or anonymise it irreversibly, unless the law requires us to keep it.
  • Accounting records: 5 years from the end of the calendar year they relate to.
  • Technical logs: up to 90 days.
  • Usage data: 12 months, or until you delete your account if that is sooner.
  • Analytics: up to 14 months; session replays up to 1 month.

7. Your rights

You have the right to access your data (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to withdraw consent at any time.

Right to object: you can object at any time, on grounds relating to your situation, to processing based on our legitimate interests (Art. 21).

Write to support@polishready.pl. We reply within one month and may ask you to confirm that the data is yours.

You can complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the supervisory authority in the country where you live.

8. Age

The Service is for people aged 16 and over. If we learn that we hold data of a younger child, we delete it.

9. Changes to this policy

We publish changes on this page with a new effective date. If a change affects data we already hold and needs notice, we email you before it applies.

Service provider

Kseniya BeliauskayaDziałalność Nierejestrowanaul. Leszno 8, Warszawa, 01-192

support@polishready.pl

See also