Privacy Policy

1. Data controller

TaxiReitti, Helsinki, Finland, is the controller of your personal data. Contact for all privacy matters: taxireitti@gmail.com.

2. What data we collect

• Account data — your name, email address, phone number, and password (stored securely; we cannot read it).
• Learning data — your study progress, quiz and exam answers, results, and preferences such as interface language.
• Payment data — purchase records (plan, amount, date). Card details are processed by Stripe; we never see or store them.
• AI feature inputs — text you submit to AI-assisted features (for example rephrasing or explanations) is processed by our AI providers to generate a response.
• Technical data — strictly necessary cookies (login session, cookie-consent choice) and basic device/browser information needed for security and operation.

3. Why we use your data (legal bases)

• To provide the service (contract) — account management, your learning progress, exam history, and customer support.
• To process payments (contract) — via Stripe.
• To keep the service secure (legitimate interest) — preventing abuse and fraud.
• To improve the service (legitimate interest) — aggregated, anonymised statistics only.
• Marketing (consent) — only if you opt in; you can withdraw consent at any time.

4. Who we share data with

We do not sell your personal data. We share it only with processors needed to run the service:

• Supabase — database and authentication hosting;
• Stripe — payment processing;
• AI providers (such as OpenAI and Google) — to power AI-assisted explanations and translations;
• Authorities — only when required by law.

Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

5. How long we keep your data

We keep your account and learning data while your account is active. If you delete your account, we erase your personal data within 30 days, except where we must retain limited records for legal or accounting obligations (for example payment records).

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data erased (“right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email taxireitti@gmail.com. We respond within one month. You also have the right to complain to the supervisory authority — in Finland, the Office of the Data Protection Ombudsman.

7. Cookies

We use only strictly necessary cookies: keeping you signed in and remembering your cookie-banner choice. We do not use advertising or cross-site tracking cookies. Our cookie banner lets you accept only the necessary ones (“Vain välttämättömät”), and the site works fully with that choice.

8. Security

We protect your data with encrypted connections (HTTPS), secure password storage, and access controls on our systems. No method is 100% secure, but we take reasonable steps to protect your information.

9. Children

TaxiReitti is not directed at children under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be announced on the site before they take effect.