Dohrnii Academy Privacy Policy

1. WHO IS RESPONSIBLE

The controller responsible for the processing described here is Dohrnii Labs, Republic of Palau.

Contact for all privacy matters: info@dohrnii.io

2. WHAT DATA WE PROCESS

Account data: username, email address, password (stored only in encrypted, hashed form) and the sign-in method you use. If you sign in with Google or Apple, we receive your name and email address from that provider.

Profile data: full name, country, and optionally your date of birth and a profile picture. If you entered a wallet address in an earlier version of the app, it may still be stored in your account.

Learning data: your progress in lessons, classes, quizzes and the glossary, your quiz answers and results, XP, streaks, ranks and seasons, ratings, and records of learning activity (for example when a class is opened, a quiz is started or a class is completed).

Content you send us: feedback, issue reports and quiz reports, and any messages you send to us by email.

Technical data: data needed to deliver the Services and keep them secure, such as the app version, device and system information, the IP address (used only temporarily, for example to prevent misuse), error and crash reports, and a push notification identifier.

Usage analytics, only with your consent: which learning areas and content you open, starting, finishing or leaving classes and quizzes, quiz results and time taken, errors and loading times, device and app information and a random app ID. Analytics never includes your name, email address or password.

Data stored on your device: the app stores your sign-in token in the secure storage of your device, as well as your settings, saved items, reading positions, practice questions and badges. This data stays on your device and is removed when you log out or delete the app.

3. WHY WE PROCESS YOUR DATA

We process your data to:

• provide, operate and maintain the Services and your account;
• record your learning progress, XP, streaks, ranks and seasons;
• display leaderboards;
• send you service messages, such as email confirmation codes and password reset links;
• inform you by email about your account and important changes to the app, for example when your account has been restored; you can unsubscribe from these emails at any time;
• send push notifications, if you allow them on your device;
• answer your requests, feedback and issue reports;
• keep the Services secure, prevent fraud, abuse and cheating, and enforce our terms;
• analyse and improve our lessons and the app, using usage analytics only with your consent;
• comply with legal obligations and establish, exercise or defend legal claims.

For users in the European Economic Area, Switzerland or the United Kingdom, we rely on the following legal bases: the performance of our contract with you (providing the Services and your account), our legitimate interests (security, misuse prevention, improving the Services, leaderboards, information about your account and the app, and legal claims), your consent (usage analytics and push notifications) and legal obligations.

4. LEADERBOARDS AND VISIBILITY

The Services include public rankings. If you appear in a leaderboard, other signed-in users can see your username, full name, country, profile picture and your XP or streak. Rankings of completed seasons are kept as a permanent record and can be viewed without signing in. If you do not want your full name to appear, you can change it in your profile at any time.

5. SERVICE PROVIDERS

We use carefully selected service providers who process data on our behalf and only for the purposes described here:

• DigitalOcean (hosting, database, file storage and backups; data centres in the European Union);
• Google Firebase (app configuration for all users; usage analytics only with your consent);
• Sentry (error and crash reports);
• OneSignal (push notifications);
• Google and Apple (sign-in, if you choose these methods);
• an email service provider (sending confirmation codes and other service emails);
• Brevo (sending emails about your account and the app; servers in the European Union).

When you use Google or Apple sign-in, their own privacy policies also apply. We are not responsible for the data practices of these third parties.

We do not sell your personal data. We may disclose data if we are required to by law, by a court or by a public authority, if it is necessary to protect our rights, our users or the public, or in connection with a merger, acquisition, financing or sale of all or part of our business. In such a transaction, your data may be transferred to the acquiring party, which will continue to process it under a privacy policy that offers at least the same level of protection.

6. INTERNATIONAL TRANSFERS

Dohrnii Labs is based in the Republic of Palau, and some of our service providers are based in the United States. Your data may therefore be processed outside your country of residence, including in countries that may not offer the same level of data protection. Where the law requires it, we use appropriate safeguards, such as the standard contractual clauses of the European Commission.

7. HOW LONG WE KEEP YOUR DATA

We keep your data for as long as your account exists and as long as it is necessary for the purposes described in this policy. Records of learning activity are deleted automatically after 365 days.

When you delete your account, your account record is deleted. We may keep certain other data after that, where we have a legitimate interest or a legal obligation to do so, for example rankings of completed seasons, records of transactions and learning activity, and messages you sent us. We also keep data for as long as it is needed to establish, exercise or defend legal claims. Backups are overwritten in regular cycles.

8. SECURITY

We use appropriate technical and organisational measures to protect your data, including encrypted connections, hashed passwords and secure storage of your sign-in token on your device. However, no transmission over the internet and no storage system is completely secure, and we cannot guarantee the security of your data. You are responsible for keeping your password confidential.

9. YOUR CHOICES AND RIGHTS

You can withdraw your consent to usage analytics at any time in the app under Settings. You can turn off push notifications in the settings of your device. You can delete your account in the app under Profile → Settings → Delete account.

Depending on the law that applies to you, you may have the right to access, correct or delete your personal data, to restrict or object to certain processing, to receive your data in a portable format, and to withdraw consent with effect for the future. To exercise your rights, write to info@dohrnii.io. We may ask you to verify your identity before we respond. We respond within the time limits set by applicable law and may decline requests that are manifestly unfounded, excessive or repetitive, or where the law allows us to. You may also lodge a complaint with a data protection authority.

10. CHILDREN

The Services are intended for users aged 16 and over. If you are younger, you may use the Services only with the consent of a parent or guardian. If we learn that we have collected personal data from a child without the required consent, we will delete it.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time, for example when we change the Services or when the law changes. The current version is always available in the app, and the date at the top shows when it was last updated. If we make material changes, we will inform you in an appropriate way. Where the law requires your consent to a change, we will ask for it.

12. CONTACT

If you have questions about this Privacy Policy or about how we process your data, please contact us at info@dohrnii.io.

Nothing in this Privacy Policy limits any rights you have under mandatory data protection law.