Chronotika
/
Back

Privacy Policy

Effective as of September 20, 2026

Protecting your personal data matters to us. This policy explains what personal data we process in connection with your use of the Chronotika app, for what purpose, on what legal basis, and what rights you have regarding that processing — in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.

1. Data controller

The data controller is the operator of the Chronotika app. For any matters concerning the processing of personal data, you can contact us at chronotika@chronotika.com.

2. What personal data we process

Registration and account data: email address, password in a secured (hashed) form (only when registering with email and password), an optional display name. When you register or sign in with Apple or Google, also the information the sign-in provider supplies to us — see section 3.

Study progress data: completed chapters, subchapters, and sections, quiz results, earned experience points (XP) and their award history, and your study streak.

Operational data: the date of your last activity in the app, your Chronotika Premium activation status, and your notification settings.

Feedback: the text and context of a message, if you voluntarily report a problem with a specific lesson.

App usage data for analytics purposes: interactions with the app (e.g. opening a course, completing a chapter) and technical device identifiers, processed through the PostHog tool.

We do not process or store Premium payment details ourselves — payments are processed exclusively by the App Store or Google Play (see the Terms of Service).

3. Registration and sign-in with Apple and Google

A user account can be created in three ways: with an email address and password, with Sign in with Apple, or with Sign in with Google. Signing in with Apple or Google is entirely optional.

When you register or sign in with Apple or Google, we process the information the identity provider supplies to us, typically: your email address, your name or display name, and a provider-specific account identifier. Google may also supply the URL of your profile picture. Apple may let you hide your real email address and give us a private relay address instead, and usually provides your name and email only the first time you authorize the app. To verify your sign-in, and to revoke the provider's access when you delete your account, we may also store technical tokens issued by the provider.

Google is used only for authentication — to confirm who you are. Chronotika does not access your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service or data in your Google account, and does not request permission to do so. The same applies to Apple: we do not access any other data in your Apple ID.

We use the information received from Google or Apple only to create and manage your Chronotika account, to sign you in, and to communicate with you about your account. We store it in our database (MongoDB) together with the rest of your account data, keep it for as long as your account exists, and delete it when the account is deleted. We do not sell it, do not use it for advertising, and share it only with the processors described in the section “Who we share data with”.

We do not pass any data about your study progress or your activity in the app to Apple or Google as part of signing in. Chronotika's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect Chronotika from your Google or Apple account at any time in that provider's account settings.

4. Purposes and legal basis for processing

Providing the service (registration and sign-in, maintaining your account, storing study progress, evaluating quizzes, managing Premium) — processing is necessary for the performance of the contract entered into by using the app (Art. 6(1)(b) GDPR).

Sending a daily study-streak reminder — only if you consent by enabling notifications and leaving the relevant toggle in the Account section switched on; you may withdraw consent at any time by turning off the toggle or disabling notifications in your phone's settings (Art. 6(1)(a) GDPR).

Analyzing and improving the app — based on our legitimate interest in developing and improving the product (Art. 6(1)(f) GDPR).

Handling submitted feedback and communicating with the user — performance of the contract, or alternatively our legitimate interest in improving the content.

Fulfilling legal obligations, for example in accounting matters relating to payments processed by the store (Art. 6(1)(c) GDPR).

5. Data retention period

We retain data associated with a user account for as long as the account exists. After an account is deleted, personal data is deleted or anonymized, except for data we are required to retain longer under applicable law.

Data processed for analytics purposes is retained for a period appropriate to that purpose, but no longer than 24 months from the time it arose.

6. Who we share data with

We share your personal data only to the extent necessary with the following processors and recipients: our database infrastructure provider (MongoDB) for storing app data, the PostHog tool for analyzing app usage (data processed on servers within the European Union), and the App Store (Apple) / Google Play for processing Premium payments and delivering notifications, and Apple and Google as sign-in providers (only if you choose to sign in with them), each acting as an independent data controller under its own privacy policy.

We may also disclose your personal data to public authorities where required by law. We do not sell personal data to third parties or use it for targeted advertising.

7. Transfers of data outside the European Union

Some of the processors listed above may, to a limited extent, process data outside the European Economic Area, for example as part of the App Store / Google Play provider's infrastructure. In such cases, we ensure that the transfer takes place on the basis of standard contractual clauses approved by the European Commission or another equivalent legal instrument.

8. Your rights

In connection with the processing of your personal data, you have the right to: access your personal data, correct inaccurate data, request erasure ("the right to be forgotten"), restrict processing, request data portability, object to processing based on legitimate interest, and withdraw consent where processing is based on consent (e.g. the study-streak notification).

You can delete your own study progress, XP, and streak at any time directly in the app, in Account → "Clear account history." To delete your entire user account, including registration data, please contact us at chronotika@chronotika.com.

If you believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

9. Data security

We store access credentials in a secured form (password hashing), and communication between the app and the server is encrypted (HTTPS). The app's authentication token is stored on the mobile device in secure storage, not in ordinary, unsecured memory.

Only individuals who genuinely need it to operate the app have access to personal data within our systems.

10. Notifications

With your consent, the app may send local study-streak reminders. These notifications are scheduled directly on your device, and no additional personal data is shared with third parties for this purpose beyond the operating system's own delivery service (Apple / Google).

Chronotika does not track a user's location.

11. Processing children's data

The app is not intended for individuals under 15 years of age without the consent of a legal guardian. If we discover that we have unlawfully processed the personal data of a child under 15 without such consent, we will delete that data without undue delay.

12. Changes to this policy

We may update this policy from time to time, for example in connection with changes to the app's features or to applicable law. The current version is always available directly in the app.

13. Contact

If you have any questions or requests regarding the protection of personal data, please contact us at chronotika@chronotika.com.