Privacy Policy

1. Data controller

The data controller is MiniVibe, ul. Zachariasza 1, 03-761 Warszawa, Poland. For data matters contact: minivibeschool@gmail.com.

2. What data we collect

• account data: name, e-mail address, password (in hashed form);
• Google sign-in data (if used): identifier, e-mail address, name, profile picture;
• purchase and learning-progress data;
• payment data processed by Stripe — we do not store card numbers.

We do not collect the child's personal data (name or age) — the account is run by the parent/guardian.

3. Purposes and legal bases

• performance of the contract (access to courses) — art. 6(1)(b) GDPR;
• legal obligations (e.g. accounting) — art. 6(1)(c) GDPR;
• legitimate interest (security, handling enquiries) — art. 6(1)(f) GDPR.

4. Data recipients (processors)

• Stripe — payment processing;
• Bunny.net — video hosting and delivery;
• Google — sign-in (optional);
• the application hosting provider.

5. Retention period

We keep your account data for as long as you have an account with us. When you delete your account (or ask us to), we erase your personal data — except records we must keep by law, such as proof of purchase and accounting records (retained for up to 5 years under Polish tax law) and anything needed to handle a complaint. Backups are overwritten on a rolling basis.

6. Your rights

You have the right to access, rectify, erase, restrict processing, port and object, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (UODO). Send requests to minivibeschool@gmail.com — we respond without undue delay, at the latest within one month.

7. Children

The service is intended for adult parents/guardians purchasing access for a child. In Poland the age of consent for information-society services is 16.