Privacy
Privacy policy
Last updated: 2 October 2026
This is a translation. If there are differences, the Italian version prevails.
This policy covers the Italiano per te app (iPhone and Android) and this website. We keep it simple. If anything is unclear, write to us.
In short
- There is no account. We never ask for your name, email or documents.
- Your progress, your goal and your exam date stay on your phone.
- What you type in the exercises never leaves your phone.
- To improve the app we use Amplitude. It receives pseudonymous usage data: no name and no IP address.
- Purchases are handled by Apple. We never see your payment details.
- This website uses no cookies.
1. Who is responsible
The data controller is Kevin José Gracia Orejuela. For any privacy question, write to kevin.gracia.tic@gmail.com.
2. Data that stays on your phone
The app saves this data only in your phone’s memory. We don’t send it to any server.
| Data | Why |
|---|---|
| Whether you’ve seen the introduction | Not to show it again |
| Your goal: CPIA, B1 or both | Show you the right path |
| Your exam date, if you add it | Count the days left |
| Completed exercises and subjects | Show your progress |
| Results of your last 20 mock exams | Let you see how you improve |
| Whether Spanish help is on | Remember your choice |
| Whether you unlocked Full B1 (iPhone only) | Open B1 even offline |
What you type in the exercises stays on the screen only: the app doesn’t save or send it.
Note: when you complete an exercise or a mock exam, Amplitude receives a usage event (see section 4). Your exam date and your answers never leave your phone.
3. Data we don’t collect
- Name, email, phone number or documents.
- The answers you type in the exercises.
- Your location: no GPS and no IP address.
- Contacts, photos, microphone or camera. The app doesn’t ask for these permissions.
- Your phone’s advertising ID (IDFA on iPhone, advertising ID on Android).
We don’t use your data for advertising. We don’t sell it. We don’t track you across other apps or websites.
Italian pronunciation uses your phone’s system voice. On iPhone the audio is generated on the phone. On Android it depends on the speech engine set in your phone’s settings.
4. Usage statistics with Amplitude
To understand which parts of the app are useful we use Amplitude, Inc. (United States). Amplitude processes the data on our behalf, as a processor (Art. 28 GDPR).
What Amplitude receives
- Usage events: the screens you open, introduction completed, goal chosen, the code of a completed exercise or subject, the total score of a mock exam.
- B1 events (iPhone only): Full B1 page opened and closed, purchase started, purchase cancelled, B1 unlocked, purchase restored. Never amounts or payment details.
- Identifiers: a random code created by the app. On iPhone also the identifier for vendor (IDFV), which Apple assigns to apps from the same developer.
- Technical data: phone make and model, operating system and version, language, mobile carrier, app version, date and time.
The app does not send your IP address to Amplitude, so Amplitude doesn’t work out your location.
Pseudonymous, not anonymous
We don’t know your name. But the data is linked to a phone code. Under the GDPR this is pseudonymous data: it is still personal data, and we treat it as such.
Why, and on what legal basis
We use it only to count how the app is used, find problems and decide what to improve. We don’t build profiles about you.
The legal basis is our legitimate interest in understanding how the app is used and improving it (Art. 6(1)(f) GDPR).
How long and where
Amplitude keeps this data for 12 months, then deletes it.
The data is stored on Amplitude servers in the United States. The transfer outside the European Union is protected by the standard contractual clauses approved by the European Commission (Art. 46 GDPR).
Amplitude’s privacy policy: amplitude.com/privacy.
Can I turn it off?
Today the app has no switch to turn statistics off. The only way to stop them is not to use the app, or to uninstall it. You can still object by writing to us (see section 9).
5. Purchases on iPhone
Full B1 and the “coffee” are bought through the App Store. Payment is handled by Apple, under its privacy policy. We never receive your name, email or card details.
The app only receives the purchase confirmation from Apple. It then saves on your phone that B1 is unlocked.
Refunds are handled by Apple at reportaproblem.apple.com.
On Android there are no in-app purchases today. On Android and on the web you can buy me a coffee on Buy Me a Coffee, an external service with its own policy.
6. If you email us
If you email us, we use your address and message only to reply. The legal basis is your request (Art. 6(1)(b) GDPR). We delete emails 12 months after our last reply.
7. Deleting your data
There is no account, so there is no account to delete.
- Data on your phone: uninstall the app and it is deleted. If you have a phone backup (iCloud or Google), it stays in the backup until you replace it.
- In the app there is no button to reset progress today.
- Data in Amplitude: it is pseudonymous and we don’t know which code is yours. So we can’t find it on request (Art. 11 GDPR). It is deleted at the end of the retention period.
- B1 purchase: it is recorded in your Apple account, not by us.
8. Children
The app is for adults. It is not aimed at children under 14, the age of digital consent in Italy. If you think a child under 14 gave us data, write to us and we’ll delete it.
9. Your rights
Under the GDPR you can ask us to:
- see the data we hold about you (access, Art. 15);
- correct it (rectification, Art. 16);
- delete it (erasure, Art. 17);
- restrict its use (Art. 18);
- receive it in a readable format (portability, Art. 20);
- object to processing (Art. 21).
Write to kevin.gracia.tic@gmail.com. We reply within one month. For pseudonymous data we can only act if you give us information to find it (section 7).
You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali: garanteprivacy.it.
10. This website
- No cookies and nothing saved in your browser.
- Statistics: we use Amplitude here too, without cookies. Each page view gets a random code that is not saved. We count page views, the site you came from (its name only), the language and clicks on the App Store, language, email and FAQ links. We don’t send your IP address. If your browser sends Global Privacy Control or Do Not Track, we count nothing. The legal basis, retention and transfer in section 4 apply.
- Fonts: the site’s fonts come from Google Fonts. Your browser connects to Google’s servers, which see your IP address. Google’s privacy policy.
- Hosting: the site is hosted by Cloudflare, Inc. (USA). The provider may log IP addresses in technical logs, for security.
11. Changes
If we change this policy, we update the date at the top and list what changed here.
- 2 October 2026. New version. We list all data sent to Amplitude. We say “pseudonymous” instead of “anonymous”. We added this website, your rights, data deletion and children.