Privacy Policy
We built MyEduPace to help students learn, and we treat the data that makes this possible with care. This policy explains what personal data we process, why, for how long, and the rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the applicable data protection laws.
- Who we are
- The data we process
- Why we process it
- Children and parents
- Personalisation and AI
- Who receives your data
- International transfers
- How long we keep it
- Your rights
- Cookies
- Security
- Changes and contact
1. Who we are
MyEduPace is operated by DOMASHNO.BG EOOD, a company registered in Bulgaria with UIC 204315910 and its registered office at 172 Naycho Tsanov St., fl. 3, 1309 Sofia, Bulgaria ("we", "us"). We are the controller of the personal data described in this policy. The same company operates our sister platforms domashno.bg, skolako.rs and edutema.ro, each of which has its own privacy policy.
For any privacy question or request, write to help@domashno.bg.
2. The data we process
When you visit the website
- Technical data sent by your browser: IP address, browser and device type, pages requested, date and time.
- Cookies, as described in section 10.
- Results of the demo games you play as a guest - these are not linked to your identity.
When you join the waitlist
- Your email address.
When you use the platform with an account (from the official release)
- Account data: name, email address, password (stored only as a one-way hash), grade, the textbook or curriculum you choose and your language. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Learning data: your answers, game results, lesson progress, skill levels, training history and the time you spend learning.
- Content you submit: photos of your handwritten solutions that you send for AI feedback, and the questions you ask.
- Payment data for paid plans: payments are processed by Stripe. We receive only the information needed to manage your subscription (for example the plan, the payment status, the card brand and its last four digits) and never see or store full card numbers.
- Correspondence: the messages you send us.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Creating your account and providing the platform: lessons, problems, games, training and progress history | Performance of a contract (Art. 6(1)(b) GDPR) |
| Adapting the learning path to you: estimating your skill levels and choosing the next problem, lesson or repetition | Performance of a contract (Art. 6(1)(b) GDPR) |
| Analysing the solutions you upload and giving feedback | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending launch news to waitlist subscribers | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Keeping the service secure, preventing abuse and fixing errors | Our legitimate interests (Art. 6(1)(f) GDPR) |
| Understanding how the website is used, through analytics cookies | Consent (Art. 6(1)(a) GDPR) |
| Accounting, tax and other legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
We do not sell personal data, and we do not use students' data for advertising.
4. Children and parents
MyEduPace is made for school students, so many of our users are children. Where the law requires it, a child may use an account only with the consent of a parent or guardian: under the GDPR this applies below the age of digital consent of the child's country (16 by default, 14 in Bulgaria, as low as 13 in some countries), and in the United States below the age of 13 under COPPA. We collect only the data needed for learning.
Parents and guardians may ask us at any time to see, correct or delete their child's data. If we learn that we hold a child's data without the required consent, we will delete it.
5. Personalisation and AI
The adaptive algorithm uses your answers to estimate how well you know each skill and to choose what to practise next. This is profiling in the sense of the GDPR, but it only shapes your learning path - it never produces legal or similarly significant effects for you, and no decision about you is made solely by it.
When you upload a solution for feedback, the image and the problem are processed by AI service providers acting on our behalf (see section 6). We send only the content needed for the analysis, not your name or email address.
6. Who receives your data
We share personal data only with processors that help us run the service, under data processing terms, and only to the extent they need:
- hosting and infrastructure providers, which store the platform and its databases;
- email delivery providers, for account and launch emails;
- Stripe, for payments;
- Google (sign-in with Google, analytics where you consent, and AI services), OpenAI and Anthropic (AI services);
- public authorities, when the law requires us to disclose data.
7. International transfers
Some of these providers process data outside the European Economic Area, for example in the United States. Such transfers rely on an adequacy decision (including the EU-US Data Privacy Framework) or on the Standard Contractual Clauses adopted by the European Commission, with additional safeguards where needed.
8. How long we keep it
- Waitlist emails: until you unsubscribe, and no longer than 12 months after the official release.
- Account and learning data: while your account is active. After you delete your account, we delete or anonymise this data within 30 days. Accounts inactive for 3 years are deleted after a notice by email.
- Uploaded solution photos: up to 12 months after upload, or until you delete them or your account.
- Server logs: up to 90 days.
- Invoices and payment records: 10 years, as required by Bulgarian accounting law.
9. Your rights
You have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data corrected;
- have your data erased ("the right to be forgotten");
- restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting earlier processing.
To exercise any of these rights, write to help@domashno.bg. We answer within one month. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg) or with the data protection authority of the country where you live.
10. Cookies
We use only the cookies the website needs to work, unless you agree to more:
- Strictly necessary cookies - a session cookie and a security token that protect forms and keep you signed in. They expire when the session ends.
- Analytics cookies - set only with your consent, to measure how the website is used. You can withdraw your consent at any time.
You can also block or delete cookies in your browser settings; the website may then not work properly.
11. Security
All traffic is encrypted with HTTPS, passwords are stored only as one-way hashes, and access to personal data is limited to the people who need it for their work. If a breach ever puts your data at risk, we will inform you and the supervisory authority as the law requires.
12. Changes and contact
We may update this policy as the platform grows. We will publish every change on this page with a new effective date and, where the change is significant, tell registered users by email.
DOMASHNO.BG EOOD · UIC 204315910 · 172 Naycho Tsanov St., fl. 3, 1309 Sofia, Bulgaria · help@domashno.bg