Privacy Policy

The data controller is Cengizhan Hakan, with an address at Leipziger Str. 47, 10117 Berlin, Germany. For any privacy request, including requests under the GDPR, contact [email protected].

• A pseudonymous user id, and a linked account id if you connect one.
• Email if you sign in, and your display name.
• If you sign in with Apple or Google, the account identifier and email that provider shares with us.
• Your time zone.
• Your birth year (not a full date of birth), if you provide it in Settings. We require it before you can consent to analytics or crash reports.
• Your learning goal, self-reported level, daily goal, and notification choice.
• Answers, scores, topic mastery, activity, streak, XP, and gems.
• Subscription and entitlement records, and store transaction references.
• Your analytics and error-monitoring consent status, each with its own timestamp and policy version.
• Error and device diagnostic data.
• The written answers you submit in a mock interview, and the feedback generated for them.
• Feedback messages you send us from the app.

The app also keeps a short on-device cache of your recent profile and progress, for up to seven days.

Providing the service, including your pseudonymous profile, learning path, account if you create one, and subscriptions, is necessary to perform our contract with you (Art. 6(1)(b) GDPR). Keeping the service secure and preventing abuse rests on our legitimate interests (Art. 6(1)(f) GDPR). Product analytics and error monitoring each run only with your separate consent (Art. 6(1)(a) GDPR), which you can withdraw in Settings.

Product analytics uses PostHog and is off by default. It runs only after you opt in, and you can withdraw consent in Settings. Events are keyed to a pseudonymous app user id, so this is pseudonymous, not fully anonymous.

• With your consent, the app records which screens you open, which buttons you tap (identified by the button's label or id, not by the text on screen), when the app is opened, backgrounded, installed or updated, and product events such as a started or finished lesson.
• No advertising, no cross-app tracking, no session replay.
• We do not send your email, name, credentials, anything you type, or raw question and answer text into analytics events. Taps on answer options are not recorded.
• With the same consent, our server also records a few events only it can confirm (a confirmed purchase or refund, a graded mock interview) under the same pseudonymous id.
• Deleting your account also erases your PostHog person and its events.
• On syswise.app, analytics loads only if you allow it in the consent banner, and then records page views and App Store link clicks without cookies (see the Cookie Policy).
• Our PostHog project uses PostHog EU Cloud, with primary analytics data hosted in the EU. Where a provider or its sub-processors process data outside the EU/EEA, the transfer section below applies.

To keep the service fast and reliable, our server sends one technical record per app request to PostHog EU Cloud: which endpoint was called (as a pattern, without ids), the result code, how long it took, and the app version and platform. This runs for every user, based on our legitimate interest in operating and improving the service (Art. 6(1)(f) GDPR).

• If you have not allowed analytics, the record carries a pseudonym that changes every day and cannot be linked to you, to other days, or to the app's analytics. No profile is built from it. On the same basis, the app tells our server which screen you open (the screen type only, such as "lesson"), and the server records it the same way. Nothing new is stored on your device for this.
• If you have allowed analytics, it is attached to the same pseudonymous id as your app analytics, and withdrawing that consent switches it back to the daily pseudonym.
• It never contains request contents such as your answers. You can object at any time by contacting us.

Crash and error monitoring uses Sentry, is off by default, and is a separate consent from analytics (Art. 6(1)(a) GDPR): turning one on does not turn the other on. In the app the SDK only starts after you opt in, and withdrawing consent in Settings shuts it down. It collects crash and release-health data; only authorization and cookie headers are scrubbed, so this is pseudonymous, not fully anonymous.

We record each consent separately, with the time you gave it and the version of this policy it was given against. If we change this policy materially, the old record stops counting and we ask you again. Server-side error logs are not part of this consent: we keep them on our legitimate interest in a working, secure service (Art. 6(1)(f) GDPR).

When you submit a written mock-interview answer, we send that answer to OpenRouter, which passes it to the AI model that grades it. We do not send your email, name, or account details with it. The result is stored with your account and shown only to you.

• Hetzner hosts our servers and database in Nuremberg, Germany.
• Cloudflare sits in front of our website and API and handles the traffic between your device and our servers.
• RevenueCat together with the Apple App Store handles subscriptions.
• Apple and Google handle sign-in if you choose them.
• OpenRouter handles AI grading of mock-interview answers.
• PostHog (analytics) and Sentry (error monitoring), only with your consent.

Some of these providers process data outside the EU/EEA. We keep your data for as long as your account exists. Server logs rotate within days, and database backups are kept for two days.

You can delete your account from the app. Deletion is immediate: your account and the data linked to it are erased right away, and the backups that still hold them expire within two days. Deleting your account does not cancel an App Store subscription; cancel it in your App Store settings.

To get a copy of your data, send a request from the app's feedback form or to the privacy contact above.

Under the GDPR, and where applicable, you can ask to access, rectify, erase, restrict, or object to the processing of your personal data, and to receive it in a portable form. Where processing relies on your consent you can withdraw it at any time; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Use the contact above, and you can also complain to a competent data protection supervisory authority.

The service is for users 13 and older. Analytics and error monitoring need a consent that, in Germany, can only be given from age 16, so for younger users both stay off and we do not ask. We take reasonable measures to protect your data. We may update this policy and will update the date above.