Privacy Policy

1. Introduction

At PlayQAcademy, accessible from https://playq.academy, the privacy of our users is a top priority. This Privacy Policy describes what personal information we collect, how we use it, with whom we share it, and what rights you have regarding your data. By using our platform, you agree to the practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is SidMaier, creator and owner of PlayQAcademy, based in Barcelona, Spain. You may contact the data controller at any time via email: sidmaierlabs@gmail.com.

3. Data We Collect

PlayQAcademy collects only the data strictly necessary to provide the online learning service. We do not collect payment information, we do not display advertising, and we do not sell data to third parties.

The data we collect falls into the following categories:

• Account information: email address, display name, and profile photo (optional). This data is obtained when you register via email or via Google authentication through Firebase Authentication.
• Academic progress data: completed lessons, finished modules, lesson bookmarks, and exam scores. This data enables the platform to display your progress and sequentially unlock content.
• Gamification data: total points, level, activity streak, earned badges, IDs of correctly answered quizzes, and completed exercises. This data powers the achievement system, levels, and student leaderboard.
• Exam activity data: submitted answers, earned scores, time spent, and exam status (passed/failed).

4. Purpose of Processing

We use your personal data exclusively for the following purposes:

• Service provision: creating and maintaining your account, authenticating your identity, and granting access to lessons, exercises, and exams on the platform.
• Progress tracking: recording your academic progress to display content appropriate for your level and to enable sequential module navigation.
• Gamification system: calculating scores, levels, and badges to motivate learning and to display your position on the student leaderboard.
• Platform improvement: analyzing platform usage in an aggregated and anonymous manner to identify areas for improvement in content and user experience.
• Essential communications: sending emails related to your account operation, such as password reset (exclusively at your request). We do not send promotional emails or newsletters.

5. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds under the General Data Protection Regulation (GDPR — EU Regulation 2016/679):

• Consent (Art. 6.1.a): by registering on PlayQAcademy, you explicitly consent to the processing of your data for the purposes described in this policy. You may withdraw your consent at any time by requesting account deletion.
• Contract performance (Art. 6.1.b): the processing is necessary to provide you with the educational platform service you have requested when creating your account.
• Legitimate interest (Art. 6.1.f): the aggregated and anonymous analysis of platform usage to improve content and the learning experience is based on our legitimate interest as an educational service provider.

6. Data Recipients and Processors

To provide you with the service, we rely on the following technology providers acting as data processors: Firebase (Google LLC) provides the user authentication infrastructure (Firebase Authentication) and the cloud database (Firestore) where your account, progress, and gamification data are stored. Data is stored in Google data centers located within the European Economic Area. Vercel Inc. provides web hosting for the platform. Vercel transiently processes your IP address and browsing data to serve the pages. None of these providers use your data for their own purposes. We do not share, sell, or rent your personal data to third parties under any circumstances.

7. Data Retention Period

We retain your personal data for as long as you maintain an active account on PlayQAcademy. If you request account deletion, we will delete all your personal data within a maximum of 30 calendar days from the receipt of your request, unless there is a legal obligation requiring longer retention. Aggregated and anonymized usage data (which does not identify you) may be retained indefinitely for statistical and service improvement purposes.

8. Your Rights

As a user located in the European Union, the GDPR grants you the following rights over your personal data:

• Right of access: you may request a copy of all personal data we hold about you.
• Right of rectification: you may request the correction of inaccurate or incomplete data.
• Right of erasure (right to be forgotten): you may request the complete deletion of your personal data. This entails the irreversible deletion of your account and all your progress.
• Right to restriction of processing: you may request that we restrict the processing of your data under certain circumstances.
• Right to data portability: you may request a copy of your data in a structured, commonly used, and machine-readable format to transfer it to another controller.
• Right to object: you may object to processing based on legitimate interests, as well as withdraw your consent at any time.
• Right to lodge a complaint: if you consider that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Security Measures

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Authentication is managed through Firebase Authentication, which uses industry-standard protocols (OAuth 2.0, HTTPS). Data in Firestore is protected by security rules that ensure each user can only read and modify their own data. Communication between your browser and our servers is carried out via HTTPS with TLS encryption.

10. Children's Privacy

PlayQAcademy is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and become aware that a child under your care has provided us with personal data without your consent, please contact us at sidmaierlabs@gmail.com for its immediate deletion.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our data processing practices or due to legal requirements. The date of the last update will be displayed at the top of this page. We recommend that you review this policy periodically. Continued use of the platform after the publication of changes constitutes acceptance of those changes.

12. Contact

For any questions, inquiries, or exercise of your rights in relation to this Privacy Policy, you may contact the data controller at the following email address: sidmaierlabs@gmail.com. We will respond to your request within a maximum of 30 calendar days, as established by the GDPR.