1. What We Collect

The data controller is Thomas Ward, operating Cyrillic Daily, PC Račica, Trg Dara Petkovića 8, Tivat, Montenegro. Contact: info@cyrillicdaily.com.

No personal data is required to use the free lessons.

If you choose to create an account or make a purchase, we collect:

• Account Data (optional): Email and password, stored securely with Appwrite.
• Learning Data: Lesson progress and drill performance, stored either locally on your device or in your account to sync across devices.
• Payment Data: Payments are processed by Stripe. We never see or store your card details.

We use PostHog to collect anonymized usage data (e.g., which lessons are completed) to improve the app. This data cannot identify you personally.

2. How Your Data Is Used

We use your data only to:

• Provide and improve the learning experience
• Sync your progress (if you have an account)
• Process payments and manage premium access
• Send account-related updates when required

We do not sell or share your personal data with advertisers.

3. Data Storage & Security

Your data is stored securely using Appwrite, our backend provider. Progress stored locally (via localStorage) stays on your device unless you create an account. If you delete your account, we will delete your account data within a reasonable period, subject to legal or technical retention requirements.

4. Your Rights

If you live in the EEA or UK, you have the right to:

• Access, update, or delete your data
• Request a copy of your data
• Withdraw consent or object to processing
• Lodge a complaint with your local data protection supervisory authority

You can delete your account at any time directly in the app or by contacting us.

5. Children's Privacy

Cyrillic Daily is not intended for children under 13. We do not knowingly collect data from children.

6. Third-Party Services

We use:

• Appwrite for account management and secure data storage
• Stripe for payment processing
• PostHog for anonymized usage analytics

These providers act as data processors on our behalf.

7. International Data Transfers

Your data may be processed in Montenegro or other regions where our service providers operate. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or transfers to providers operating in jurisdictions recognized as providing adequate data protection.

8. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted here.