Updated: 30.09.2026
Privacy policy
In plain words: what data MCschool collects, why, who receives it and what your rights are. We follow the GDPR and Polish law.
1. Who processes your data
The data controller is [назва компанії / ПІБ підприємця], [адреса], tax ID (NIP) [NIP], e-mail: [e-mail для питань щодо даних]. For any question about your data, write to this address or via “Settings → Support”.
2. What we collect
- Account: first name, last name, e-mail and password (stored only in hashed form). When you sign in with Google or Telegram — the identifier and name from that service.
- Consultation request: name, phone, chosen subject and site language.
- Learning: answers, progress, XP, streaks, mock sheet results, written work and support messages.
- Payments: payment data is processed by Stripe — we never see or store your card number.
- Technical data: IP address, browser and device type, error logs — for security and stability.
3. Why
- To give you access to the platform and courses (performance of a contract).
- To take payments and meet tax obligations (legal obligation).
- So a manager can call or message you about your request (your consent).
- To mark written work and give hints with AI, protect the service and improve tasks (legitimate interest).
4. Who receives it
Only providers that keep the service running, and only what they need: hosting and databases, Stripe (payments), Telegram (notifying a manager about a request), AI model providers (the hint or essay text, without contact details), bunny.net (video), Cloudflare R2 (images and audio), Google and Telegram — if you sign in with them.
We never sell data or share it with ad networks. Transfers outside the EEA rely on the EU Standard Contractual Clauses.
5. How long we keep it
Account and learning data — while the account exists; after deletion, no longer than 30 days (except rolling backups).
Requests — up to 12 months. Payment records — as long as tax law requires (usually 5 years).
6. Your rights
You can get a copy of your data, correct it, delete it, restrict processing, move it to another service, object to processing and withdraw consent at any time.
If you believe your rights were breached, you can complain to the Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl).
7. Children
The platform is for 7th–8th graders. If you are under 16, a parent or guardian must approve the account and any payment. A parent can ask us to delete a child’s data at any time.
8. Security and changes
Connections are encrypted, passwords are stored only as hashes and staff access is role-restricted. We announce policy changes on the site; the update date is shown at the top.