Nano Learny
Privacy Policy: web app
This policy explains what the Nano Learny web app at app.nanolearny.app collects, why, who else processes it, and what you can do about it. We collect only what the web app needs to work.
Who is responsible
The web app is provided by Markovskyi s. r. o., Tolstého 849/5, 811 06 Bratislava, Slovakia, IČO 57 957 151, the controller of the personal data processed through it. Contact: support@nanolearny.app.
Your account, learnies and progress are stored once and are the same in the web app and in the Nano Learny iOS app, which Artem Markovskyi, the managing director of Markovskyi s. r. o., provides as a sole trader under its own Privacy Policy. For that shared account data the two are joint controllers: they use the same servers and providers described below, and you can exercise your rights with either through the address above.
What we collect
- Account details. Your email address and the name you choose. If you sign up with email, a password, which we store only as a salted hash. With Google or Apple sign-in we receive the account identifier and email those providers share; we never see your password for those services.
- Imported pages and PDFs. The URLs you import, the file name of PDFs you upload, the page titles and text extracted from them, and the learnies generated from that text. We keep the extracted text, not the PDF file itself.
- Learning progress and credits. Which lessons you completed and when (this is how streaks are calculated), which learnies you added from the store, and how many credits you used.
- Subscription status. Whether you have Learny Pro, where you bought it, and the subscription events Paddle (or Apple, for a subscription bought in the iOS app) reports through our billing partner. We never receive your payment card details.
- Problem reports and AI fixes. When you report a problem with a learny or ask AI to fix it: what you write, which learny, lesson and step it is about, the lessons as they were (and as the AI rewrote them), and our reply. We use them to fix your learny and to improve how lessons are generated.
- Browser sessions. When you sign in, we store a record of that browser session: a hashed key, your browser’s name and version as it reports them, and when the session was last used, so you stay signed in and it can be ended.
- Technical data. Our servers log requests, including IP addresses, to keep the service running and secure, and to limit abuse such as password guessing (sign-in attempts are counted per IP address for up to a day). When something breaks on the server, an error report is created without your name or email address.
The web app does not collect your contacts, precise location or advertising identifiers, and it has no ads, analytics or third-party trackers.
What the web app stores in your browser
- a session cookie that keeps you signed in. Scripts on the page can’t read it, and it is removed when you sign out;
- in your browser’s local storage, your account name and email and a copy of your learnies and lessons, so they open quickly and without a connection. It is removed when you sign out;
- the web app’s own files, kept by its service worker so it loads offline. They contain no personal data.
These are needed for the web app to work, so they need no consent. Some screens load scripts from providers named below: Google’s sign-in button on the sign-in and Account screens (it may set its own cookie to remember its sign-in prompts), Apple’s sign-in script only when you choose Apple, and RevenueCat’s and Paddle’s on the Learny Pro screen and checkout. If you install the web app on your home screen, it can receive links you share to it; they only fill in the link to import.
Why we use it, and on what legal basis
- To provide the web app (sign-in, generating and storing learnies, progress, streaks, credits and Learny Pro, fixing learnies you report): because it is necessary for the service you signed up for.
- To improve the lessons we generate (reading problem reports and AI fix requests): our legitimate interest in making lessons more accurate.
- To keep the service secure and working (server logs, error reports, abuse limits, backups): our legitimate interest in running a reliable service.
We do not sell your data or use it for advertising.
Who else processes it
- Paddle (Paddle.com Market Limited in the UK; Paddle.com Inc. for buyers in the United States) sells Learny Pro as our reseller and Merchant of Record. In its checkout you give Paddle your email address, country or postcode and payment details, which Paddle processes as an independent controller under its own privacy policy to take payment, calculate tax, prevent fraud and send receipts. We receive from Paddle, through RevenueCat, the subscription’s status and dates, never your card details.
- RevenueCat processes subscription events so we know whether Learny Pro is active. It receives an anonymous customer identifier tied to your account. The Learny Pro screen loads its offer from RevenueCat directly, so RevenueCat also sees your IP address and browser.
- OpenAI writes the lessons. It receives the text of the pages you import, their titles and URLs, and the learny’s title (for a PDF, that can include its file name). When you ask AI to fix a learny, it also receives what you wrote and the lessons concerned. It does not receive your account details.
- DigitalOcean hosts our servers and database, in the United States.
- Sentry receives error reports from our servers, without your name or email address.
- Google and Apple handle sign-in if you choose them.
Some of these providers are in the United States or the United Kingdom. Where data leaves the EU, we rely on the safeguards the law provides for it, such as the EU–US Data Privacy Framework, the European Commission’s adequacy decision for the UK, or its standard contractual clauses.
Images in lessons are loaded directly from the website they came from, so that website can see your IP address, as it would if you visited it.
Sharing a learny
If you share a learny, anyone with its link can see its title, its description, its lesson titles and topics, one of its questions and the website it was made from (not the file name of a PDF), and can add a copy to their own account. Your name and email are not shown. Stop sharing it and the link stops working. People who already added it keep their copy, including the page text it is built from, even if you later delete the learny or your account.
How long we keep it
- Your account, learnies and progress: until you delete your account. Deleting it from the Account screen removes them from our database right away; copies remain in nightly backups for up to 14 days, and then they are gone. Copies other people added from a learny you shared are theirs and stay.
- Browser sessions: until you sign out, or 90 days after the session was last used.
- Subscription events are kept for our accounting records, no longer linked to your account once it is deleted. Paddle keeps its own order and tax records as the law requires of it.
- Server logs rotate by size and are overwritten automatically; at our current traffic that takes up to a few months. Error reports are deleted by Sentry after its retention period (90 days at most).
Your rights
You can see your account details in the web app and delete your account and everything in it yourself, at any time. You also have the right to access, correct or receive a copy of your data, to object to or restrict how we use it, and to withdraw consent. Write to support@nanolearny.app and we will reply within 30 days. If you believe we handle your data unlawfully, you can complain to a data protection authority, such as the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk) or the one where you live.
Children
The web app is not meant for children under 13, or under the minimum age in your country, and we do not knowingly collect their data.
Changes
If this policy changes we will update the date at the top and, for significant changes, tell you in the web app.
Questions? Email support@nanolearny.app.