Privacy Notice

This Privacy Notice explains how Mirjalol Akramov ("we", "us", "our"), the operator of PocketFin, collects, uses, stores and protects your personal data when you use the PocketFin website, mobile application and services (together, "PocketFin").

1. Who we are

The data controller for PocketFin is Mirjalol Akramov. If you have questions about this notice or how we handle your data, you can contact us through the Inbox feature inside PocketFin or by email at the address provided in the app settings.

2. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, username, profile photo, authentication credentials and account settings.
• Usage data: lessons completed, quiz results, XP, diamonds, hearts, streaks, achievements, course progress and in-app activity.
• Device and technical data: IP address, browser type, device type, operating system, language preference and crash logs.
• Communication data: messages you send us through the Inbox, feedback and support requests.
• Payment data: we do not collect or store your card details. Our reseller Paddle handles payment processing, card data and billing information directly. We may receive a Paddle customer ID, subscription status and billing country to manage your plan.

3. Why we collect your data and legal basis

We use your data for the following purposes:

• To provide PocketFin — creating and managing your account, delivering lessons, tracking progress and granting access to content (contract performance).
• To improve the service — analysing aggregated usage, fixing bugs and developing features (legitimate interest, balanced against your privacy rights).
• To communicate with you — responding to support messages, sending service announcements and, where you consent, sending marketing updates (consent for marketing).
• To ensure security and prevent fraud — verifying accounts, detecting abuse and protecting the integrity of PocketFin (legitimate interest and legal obligation).

4. How we share your data

We do not sell your personal data. We share data only with:

• Service providers: hosting, analytics, error reporting, email delivery and customer support tools that help us operate PocketFin.
• Paddle: our Merchant of Record. Paddle processes payments, subscriptions, taxes, invoicing, refunds and related customer service on our behalf. When you make a purchase, Paddle receives the transaction and billing information needed to complete the sale.
• Professional advisers: legal, accounting or other advisers where necessary to comply with the law or protect our rights.
• Authorities: law enforcement or regulators when required by law or to respond to a valid legal request.

5. International transfers

Some of our service providers may process data outside the country where you are located. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions or other legally recognised transfer mechanisms.

6. Data retention

We keep your personal data for as long as your account is active, and for a reasonable period afterwards to comply with legal obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete it or anonymise it. You can request deletion of your account and data at any time through the Inbox.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and personal data.
• Restrict or object to certain processing.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us through the Inbox. We will respond within one month. You also have the right to complain to your local data protection supervisory authority.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, secure authentication and regular monitoring. No system is completely secure, and we cannot guarantee absolute security.

9. Cookies and similar technologies

PocketFin uses essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how the service is used. You can manage your preferences through your browser settings. Essential cookies cannot be disabled without affecting core functionality.

10. Children's privacy

PocketFin is not directed at children under 13. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will delete the information.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page, with the "Last updated" date at the top.