Privacy policy

Koody is a service operated by Virginie MINEL, a sole trader based in France. For any question about your personal data, you can write to biinadev@gmail.com.

We collect only the data needed to run the service:

• Account data: name, email address, date of birth, password (hashed), preferred language.
• Usage data: answers to questions, mock-exam results, progress by theme, timestamps.
• Technical data: IP address (for security and rate-limiting), browser type.

We collect no location data, no advertising-tracking cookies, and we never sell your data to third parties.

• Provide the highway-code preparation service.
• Track your progress and personalise your revision.
• Keep the service secure (rate-limiting, abuse detection).
• Send you transactional emails (password reset, sign-up confirmation).

• Performance of the contract (art. 6.1.b GDPR): to provide the service you signed up for.
• Consent (art. 6.1.a GDPR): for marketing communications (where applicable).
• Legitimate interest (art. 6.1.f GDPR): for security and fraud prevention.

Your data is hosted in Europe:

• Supabase (database, authentication, storage) — servers in Europe.
• Vercel (application hosting) — global network, data served from Europe.
• Stripe (payment) — processes transactions when you buy a Pass; Koody stores no bank data.
• Resend (email) — delivery of transactional emails.

No personal data is transferred outside the European Economic Area without appropriate safeguards.

• Account data: kept while your account is active. Deleted within 30 days of a deletion request.
• Usage data: anonymised when the account is deleted (aggregate statistics are kept, personal data is erased).
• Technical data: security logs are kept for a maximum of 90 days.

Under the GDPR, you have the following rights:

• Access: obtain a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your account and data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data.
• Restriction: request that processing be restricted.

To exercise these rights, write to biinadev@gmail.com. You can also export and delete your data directly from your profile in the app.

You have the right to lodge a complaint with the French data-protection authority (CNIL): cnil.fr.

Koody uses only strictly necessary cookies for the service to work (the authentication session). We use no tracking, analytics or advertising cookies. No consent banner is therefore required.

We put technical and organisational measures in place to protect your data: encryption in transit (HTTPS/TLS), hashed passwords, role-based access control, API rate-limiting, HTTP security headers.

Koody is intended for people aged 15 and over, in line with the minimum age required to prepare for the highway code in France. Sign-up checks age via the date of birth.

This policy may be updated. In the event of a material change, we will inform you by email or by an in-app notification. The last-updated date appears at the top of this page.