Privacy
This policy explains what personal data EduNeko OÜ collects through eduneko.com, the EduNotes pages at eduneko.com/edunotes, the Numerals page at eduneko.com/numerals, our waitlists, our contact form, and the EduNotes beta programme, as well as why we collect it, how long we keep it, and your rights. We keep it short because we collect very little.
Who we are
The controller is EduNeko OÜ, Tornimäe tn 5, 10145 Tallinn, Estonia (company code 14426576). For anything about your data, write to hello@eduneko.eu.
What we collect and why
Waitlists (EduNotes, Gliff and Numerals)
- What: your email address, which product you signed up for, the role you chose (EduNotes only, optional), and when you signed up, confirmed, or unsubscribed.
- Why: to send you news about that product, such as beta invitations and the launch. Nothing else, and never to third parties for their marketing.
- Legal basis: your consent (GDPR Art. 6(1)(a)). We ask you to confirm by email before adding you (double opt-in).
- How long: until you unsubscribe. Every email has an unsubscribe link. After you unsubscribe, or if you never confirm, your record is deleted automatically within 30 days.
Contact form
- What: your name, email address, the topic you chose, and your message.
- Why: to reply to you and, if you ask about training or a project, to prepare an offer.
- Legal basis: steps you've asked for before a possible contract (Art. 6(1)(b)), and otherwise our legitimate interest in answering messages sent to us (Art. 6(1)(f)).
- How long: deleted automatically two years after you sent it, unless it becomes part of a contract, in which case we keep it as long as the law requires for business records.
EduNotes beta testing
- What: your name and email address, a tester ID, and what you submit on the testers' page: device model, operating system version, Apple Pencil and display or sync setup, test results, notes, and weekly check-ins.
- Why: to run the beta. That means inviting you, assigning tests, and finding and fixing problems in EduNotes.
- Legal basis: your participation in the beta at your request (Art. 6(1)(b)).
- How long: until 12 months after EduNotes is publicly released, then deleted. [Review: confirm this period.]
- TestFlight: beta builds are distributed through Apple's TestFlight. We give Apple your email address so it can send the invitation. Apple shares with us the feedback and screenshots you send through TestFlight, crash reports, and basic usage figures. Apple handles this data under its own privacy policy.
- The testers' page stores your personal invite link and unfinished test cards in your browser's local storage, on your device only, so you don't lose your progress. Clearing your browser data removes them.
Security and abuse prevention
- When you submit a form, our server uses your IP address briefly, in memory, to limit repeated submissions. Hidden form fields help us filter out automated spam. Neither is used to identify you.
- Our server's request logs, which include IP addresses and browser details, are kept for 30 days to diagnose faults and abuse (legitimate interest, Art. 6(1)(f)). This covers every request to our server, including the wake-up request described below, even if you never submit anything.
Visiting the website
- We don't use cookies, analytics, advertising, or tracking of any kind.
- The website is hosted on GitHub Pages. GitHub receives your IP address when your browser loads the site and may log it for security purposes.
- The fonts, images, and scripts on eduneko.com are served from our own site, so your browser doesn't contact Google or any other third party when you visit.
- When you click or tab into a form (on the beta testers' page, into anything on the page), your browser sends a short request to our own server (api.eduneko.cloud) to wake it up, so that your submission doesn't fail while the server starts. The request carries nothing you have typed, and it only appears in the request logs described above.
- The EduNotes pages currently load their styling script from cdn.tailwindcss.com, which receives your IP address. [Review: this goes away when the planned compiled stylesheet replaces the Tailwind CDN. Remove this item then.]
Who processes it for us
We use a small number of service providers, each under a data processing agreement:
- Google Cloud (Google Cloud EMEA Ltd, Ireland) runs our server and database. The data is stored in Belgium (region
europe-west1). - Brevo (Sendinblue SAS, France) sends our emails and holds the confirmed waitlists.
- GitHub (GitHub, Inc., USA) hosts the website.
Google and GitHub belong to US groups. Where data may be accessed from outside the European Economic Area, they rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. [Review: confirm against each provider's current terms.]
We never sell your data.
Your rights
You can ask us to access, correct, delete, or export your data, to restrict how we use it, or object to how we use it. Where we rely on consent, you can withdraw it at any time. For the waitlists, the unsubscribe link in every email does this instantly. Write to hello@eduneko.eu and we'll respond within one month.
You can also complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You can also contact the authority where you live.
Children
Our waitlists and contact form are meant for people aged 16 or over. If you're younger, please ask a parent or guardian to sign up for you. [Review: age threshold, given that EduNotes is aimed at students too.]
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use the data of people on our waitlists, we'll tell them by email.