Privacy Policy

Last updated: 21 April 2026

Data Controller

Grammar Refined ([OWNER NAME TBC], NIF [NIF TBC]) is the data controller for personal information collected through this website and its services. You can contact us at info@grammarrefined.com.

What data we collect

  • Account data — email address, display name, password (hashed by Firebase Auth).
  • Learning activity — exam answers, scores, writing samples, progress metrics.
  • Technical data — IP address, browser type, device type, timestamps (logged by Firebase).
  • Optional analytics — anonymous usage metrics, only if you accept analytics cookies.

Why we collect it (legal bases)

  • Contract (Art. 6.1.b GDPR) — to provide the exam-practice service you signed up for.
  • Legitimate interest (Art. 6.1.f GDPR) — platform security, abuse prevention, basic service analytics.
  • Consent (Art. 6.1.a GDPR) — analytics cookies and any marketing communications.
  • Legal obligation (Art. 6.1.c GDPR) — tax and accounting records where applicable.

How long we keep it

Account and learning data are kept for as long as your account is active. When you delete your account (available in the student menu), all personal data tied to your user ID is permanently removed from our database and authentication system. Backups are overwritten within 30 days.

Who we share it with

  • Google Firebase (Google Ireland Ltd.) — authentication, database, hosting. Data may be processed in the EU/EEA.
  • Stripe Payments Europe Ltd. — payment processing when you purchase access (we never store card details).
  • Anthropic Ireland Ltd. — AI-assisted exam generation and writing feedback (processed on anonymised content).

We do not sell your data to third parties.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, objection and portability of your personal data. Email info@grammarrefined.com to exercise any of these rights. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD — aepd.es).

Children

Users under 14 must have verifiable parental consent to use the service, in line with Spanish data protection law.

🍪 We use only cookies that are strictly necessary (authentication + your saved preferences). We don't use tracking or advertising cookies. .