Privacy policy

This page explains what Morgenlese stores about you, why, and for how long. It applies to the website and the installed app. We follow the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection (ZZPL).

Who is responsible

Milan Danilović pr Računarsko programiranje BYTESICHT Niš
Radnička 2
Niš (Palilula)
Srbija
info@bytesicht.com

What we store and why

• Your account: email address (and name and picture if you sign in with Google), language, level, favorite topics and time zone. We need them to give you an account (Art. 6(1)(b) GDPR).
• Your learning: stories you read, quiz and exam answers and scores, your words and grammar scores, review schedule and streak. This is what the app is for (Art. 6(1)(b) GDPR).
• Purchases: which pack you bought and the payment reference. Paddle handles the payment; we never see your card or bank details.
• Usage events: what happens in the app (for example “story opened” or “quiz finished”) and error reports, so we can improve it and fix problems (legitimate interest, Art. 6(1)(f) GDPR). Without an account you are counted with an id made from the date, your IP address and your browser. It changes every day, is not stored on your device, and your IP address itself is not stored. Events are deleted after 13 months, and right away when you delete your account.
• Abuse protection: to limit sign-in emails and requests, your email or IP address is counted for a few minutes and deleted within two days (Art. 6(1)(f) GDPR).
• Server logs: our host records IP address, time and page of each request for security and keeps them for a short time.

Cookies and storage on your device

Only what the app needs to work: a sign-in cookie, a cookie with your language and level when you use the app without an account, and in your browser's storage your theme, what you did as a guest (saved to your account after sign-in) and stories saved for offline reading. There are no advertising cookies and no third-party analytics, so we don't ask for consent.

Who helps us

These companies process data for us under data processing agreements:

• Vercel Inc. (USA): hosting; our servers run in Frankfurt.
• Neon Inc. (USA): the database, stored in Frankfurt.
• Resend (USA): sends sign-in emails (your email address).
• Google (Ireland/USA): only if you choose to sign in with Google.
• Paddle.com Market Ltd (UK): payments. Paddle is the seller of record and processes payment data under its own privacy policy.
• An AI provider writes new stories. It receives only words and grammar topics, never your email or name.

Transfers outside the EU are protected by the EU–US Data Privacy Framework or standard contractual clauses. Photos and fonts are served from our own servers, so your browser does not contact Pixabay or Google Fonts.

How long we keep it

Account and learning data until you delete your account. Usage events for 13 months. Payment records as long as tax law requires (kept by Paddle).

Your rights

You can see and download your data (Profile → Download my data), correct it, delete it (Profile → Delete my account), restrict or object to its use, and complain to a data protection authority: in Serbia the Commissioner for Information of Public Importance and Personal Data Protection, in the EU the authority where you live. For anything else write to info@bytesicht.com.