Privacy policy
1. Who is responsible
LILIKOI, ul. Witelona 21, 51-617 Wrocław, Poland (NIP 8981960458, REGON 021527521) is the controller of personal data processed through our citizenship test study apps for iOS and Android (“the apps”) and this website. Contact: citizen@yolomate.eu or the postal address above.
The apps are an independent study service. They are not operated by, or connected with, any government body.
2. Information we process
| Context | Information |
|---|---|
| Account and sign-in | Email address, account identifier, identifiers from a sign-in provider you choose (Google, Facebook or Apple), sign-in and session records, language and app preferences. |
| Study | Questions answered, your answers, scores, mock test results, progress, saved items and an exam date if you enter one. |
| Purchases | Product, price, currency, store, transaction identifiers, purchase date and access period, received from Apple or Google through RevenueCat. We do not receive your card or store-account payment details. |
| Advertising (free access only) | Google AdMob processes the device advertising identifier or app set identifier, IP address and approximate location derived from it, ad interactions and diagnostic information to show and measure ads and prevent fraud. |
| Usage statistics | Screens viewed, app version, device type, operating system, screen size, language and IP address, processed by our own Matomo server without cookies and without your account identifier. |
| Crash reports | Device model, operating system, app version, crash details and an installation identifier, processed by Google Firebase Crashlytics. |
| Support | Your email address, message and any details you choose to send. |
Do not send passwords, sign-in codes, payment card details or identity document numbers in a support message.
3. Purposes and legal bases
| Purpose | Legal basis (UK GDPR / EU GDPR) |
|---|---|
| Provide your account, learning features, progress and purchased access | Performance of our contract with you |
| Purchases, accounting and tax records | Contract and legal obligation |
| Security, fraud prevention, crash diagnosis | Our legitimate interest in a safe and working service |
| Usage statistics to improve the apps | Our legitimate interest in proportionate measurement; you can object at any time |
| Ads for free access | Your consent where the law requires it (including the Google consent message and Apple’s App Tracking Transparency prompt); otherwise our legitimate interest in funding free access |
| Support requests and legal claims | Contract, legal obligation and our legitimate interest in handling claims |
4. Providers
- Auth0 (Okta): sign-in and account security.
- Supabase: database for accounts, learning records and access.
- Cloudflare: delivery and security of our servers and this website.
- Apple and Google: app distribution and in-app purchases, under their own privacy policies.
- RevenueCat: records of store purchases so access goes to the right account (privacy policy).
- Google AdMob: ads for free access (how Google uses information from apps).
- Google Firebase Crashlytics: crash reports (Firebase privacy).
- Matomo: usage statistics on our own server at stats.yolomate.eu; data is not shared with Matomo the company.
- Email delivery provider: sign-in codes and replies to support requests.
We do not sell your personal information. We may disclose information where the law requires it or to establish or defend legal claims.
5. International processing
Data may be processed in Poland, elsewhere in the European Economic Area, the United Kingdom, the United States and other countries where our providers operate. Where a transfer needs a safeguard, we rely on an adequacy decision or standard contractual clauses (with the UK addendum where relevant). Contact us for details.
6. Ads and your choices
Ads appear only without paid access. Before ads load, the app shows Google’s consent message where the law requires it and, on iOS, asks for App Tracking Transparency permission. You can change your ad choices in the app under Account > Ad privacy, reset or limit the advertising identifier in your device settings, or remove ads by buying access. Usage statistics can be turned off in the app’s account settings.
7. Retention
- Account and learning records: while your account exists; deleted within 30 days after you delete your account, except as below.
- Purchase and accounting records: for the period required by tax and accounting law (in Poland generally five years from the end of the tax year).
- Support messages: while the request is handled and for up to three years afterwards for related claims.
- Usage statistics: raw data up to 13 months; aggregated reports may be kept longer.
- Crash reports: according to Firebase Crashlytics retention (currently 90 days).
- Backups: until overwritten in the normal backup cycle.
8. Your rights
Subject to applicable law you may request access to, a copy of, correction or deletion of your data, restriction of processing, data portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier processing. Write to citizen@yolomate.eu; we reply within one month.
You may complain to the Polish supervisory authority (UODO), the UK Information Commissioner’s Office or, in Canada, the Office of the Privacy Commissioner of Canada.
9. Deleting your account
You can delete your account in the app under Account > Delete account, or as described on the account deletion page.
10. Children
The apps are intended for adults and older teenagers preparing for a citizenship or settlement test. They are not directed at children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it.
11. This website
This website does not use cookies, analytics or ads. Our hosting provider, Cloudflare, processes your IP address and request details to deliver the pages and protect them from abuse.
12. Security and changes
We use encrypted connections, access controls and other appropriate measures. No service can promise absolute security. We will update this policy when our practices change and show the new date above; we will give additional notice where the law requires it.