Privacy Policy
Last Updated: December 12, 2025
Effective Date: December 12, 2025
This Privacy Policy explains how VHApps (“we,” “us,” or “our”), based in Poland, collects, uses, discloses, and processes your information in connection with your use of our website (vhapps.com) and our applications, including LangStory and Egzamin SRC - przygotowanie (collectively, the “Services”).
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the Data Controller for your personal data is:
VHApps Ptasia 26/8 80-809 Gdańsk, Poland Contact Email: contact@vhapps.com
2. Personal Data We Collect
We collect data primarily to provide and improve the Services. The data we collect falls into three main categories:
A. Data You Provide Directly
- Account Data: If you create an account (e.g., for LangStory or future mobile apps), we collect your email address and display name.
- Correspondence Data: Information you provide when contacting us via email (e.g., support requests, feedback).
B. Usage Data (Automatically Collected)
This data is collected when you access or use the Services:
- Technical Log Data: Our server infrastructure generates standard access logs. These logs temporarily capture data necessary for security and operation, including the Client IP address, connection details, requested URL, method, and protocol. This log data is used for security, debugging, and identifying overall traffic patterns, and is not used to identify you personally or build behavioral profiles.
- Service Interaction Data: We use Plausible Analytics for website traffic analysis. Plausible is a privacy-first tool that does not use cookies, does not store personal data, and does not track users across websites.
C. Data Specific to Applications
- LangStory (AI Service): We process the input text or queries you provide for story generation. This data is processed to deliver the Service (e.g., sending the prompt to the AI model) and we do not store your prompts.
- Egzamin SRC - przygotowanie (Mobile App): We store your progress, test results, and preferred settings locally. No information about your progress or your personal data is sent to our servers.
3. Legal Basis for Processing (GDPR)
We process your Personal Data only when we have a valid legal basis to do so under GDPR, primarily:
- Contractual Necessity: Processing is necessary to fulfill our service agreement with you (e.g., creating your account).
- Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving app security, analyzing aggregate usage to improve features), provided these interests do not override your rights.
4. Third-Party Data Processors
We share data only with third parties essential for service operation. These parties are contractually bound to process data according to strict data protection standards (GDPR).
- Hosting: Server Provider (Data stored in the EU, if applicable).
- Analytics: Plausible Analytics (Used on the Website for anonymized traffic analysis).
- App Stores: Apple App Store and Google Play Store (They process payment information and share minimal, aggregate data with us).
- AI Providers: OpenAI or similar service (The input you provide for AI generation is sent to the provider to produce the output).
5. Your Data Protection Rights (GDPR)
As a user in the European Economic Area (EEA), you have the following rights concerning your Personal Data:
| Right | Description |
|---|---|
| Right to Access | You have the right to request copies of your Personal Data. |
| Right to Rectification | You have the right to request that we correct any information you believe is inaccurate or incomplete. |
| Right to Erasure | You have the right to request that we erase your Personal Data (the “Right to be Forgotten”). |
To exercise any of these rights, please contact us at contact@vhapps.com.
6. Security and Retention
We take security seriously, using measures like SSL, data encryption, and regular security reviews. We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy (i.e., as long as your account is active, or for legal documentation purposes).
7. Supervisory Authority
If you have a complaint regarding our data processing, you have the right to lodge a complaint with the Polish data protection authority:
Prezes Urzędu Ochrony Danych Osobowych (UODO)
ul. Stanisława Moniuszki 1A, 00-014 Warszawa https://uodo.gov.pl