Privacy notice

Who we are

Zdasio (app.zdasio.com) is an exam-practice service run by an independent operator based in Malta, who is the data controller. Contact: support@zdasio.com.

What we collect

Your account details (email address, name, password hash, chosen language and exam), your practice activity (answers, mock results, working you submit to the step checker, questions you ask the tutor) and, if you buy Premium, the payment status Stripe reports to us. We never receive your card details.

For the free widget embedded in our articles we store a one-way hash of your IP address to count the daily free checks.

Why we use it

To run the service you asked for (contract), to keep it secure and prevent abuse (legitimate interest), and to meet legal obligations such as tax records (legal obligation). We send only transactional email, such as sign-in links; we do not send marketing email.

Students under 16

If you are under 16, a parent or legal guardian must agree to you using Zdasio. At sign-up you confirm that you are 16 or older or that you have this consent.

Processors and retention

We use Vercel (hosting), Neon (database, EU region), Stripe and Link (payments, as merchant of record) and an email delivery provider. We keep your data while your account is active and delete it within 30 days of a deletion request, except records we must keep by law.

Your rights

You can ask for access, correction, deletion, restriction, portability or object to processing by writing to support@zdasio.com. You can also complain to your data protection authority (in Poland UODO, in Romania ANSPDCP).