Privacy Policy

This policy explains what we collect, why, how long we keep it, and what you can do about it. We have written it to be read rather than skimmed past.

If anything here is unclear, email support@opinta.io and we will explain it properly.

Who is responsible for your data

The controller of your personal data is:

Oiviar Oy
Business ID: 3118574-9
Juustenintie 2 B 46
00410 Helsinki, Finland

Email: support@opinta.io

We are a small company and have not appointed a Data Protection Officer, as we are not required to. Privacy questions go to the address above and reach a person, not a queue.

What we collect and why

Your account

What: Name, email address, password (stored hashed, never in readable form), and your settings, such as your time zone and whether you prefer the light or dark theme.

Why: To create your account, sign you in, and let you use Opinta.

Legal basis: Performance of our contract with you (Article 6(1)(b)). We cannot run an account without this.

What you create in Opinta

What: Habits, tasks, daily and weekly plans, reviews, notes, reflections, lesson progress, and your position in the skill tree.

Why: This is the service. It is your content, stored so you can come back to it.

Legal basis: Performance of our contract with you (Article 6(1)(b)).

Some of these are free-text fields where you can write whatever you like. We store what you write so we can show it back to you, and that is all. We do not read it to build a picture of you, use it to train AI models, or hand it to anything that would.

If we ever build a feature that does more with what you write — an assistant that helps you review your own notes, say — it will be something you switch on, we will tell you exactly what happens to your text before you do, and everything else will keep working if you decline.

We will not go looking through what you have written. In rare cases someone on our team may see it, for example if you send us a support request about a specific entry, or while investigating a technical fault. Access is limited to the people who need it and we do not do it casually.

Wellbeing tracking

Some parts of Opinta let you record how you are doing on a scale, so you can look back and see patterns. Right now that means mood and energy. If we add others, such as sleep quality, we will tell you and ask before turning them on.

What: The ratings you record and the dates they relate to.

Why: So you can see your own patterns over time. Nothing else.

Legal basis: Your explicit consent (Article 9(2)(a)).

We treat these ratings as health data, which gets stronger protection under the GDPR. In practice:

Wellbeing tracking is off until you switch it on.
We ask in the app, at the moment you turn it on, rather than burying it in terms you accepted months ago.
Everything else in Opinta works without it. Declining costs you nothing.
You can turn it off at any time in your settings, and delete what you have recorded.
We show your own ratings back to you, including trends over time. That is the point of the feature.
We do not use them to draw conclusions about your health, feed them into anything that profiles you, or share them with anyone.

We do not diagnose, assess or interpret anything about your health. These are self-tracking tools, not clinical ones.

This covers the rating scales themselves. Anything you type into a free-text box is covered by the section above.

What: When you turned wellbeing tracking on or off, and the exact wording you agreed to.

Why: The GDPR requires us to be able to show that you consented and what you consented to. We cannot do that without keeping a record.

Legal basis: Legal obligation (Article 6(1)(c)), read with Article 7(1).

This is a short log of the choice itself. It contains no ratings.

Payments

What: Your subscription plan, billing status, billing country, the last four digits and brand of your card, and the date of each payment. Opinta itself stores only the plan, its status and the dates of the period it covers. The rest sits with Stripe, where we can look it up.

We never receive your full card number. You type it on Stripe’s own checkout page, and it is never sent to our servers or stored by us. We can see limited details in Stripe’s dashboard, such as the last four digits and the card brand, but the full number is available to nobody but Stripe.

Why: To take payment, manage your subscription, send receipts, and meet our accounting and tax obligations.

Legal basis: Performance of our contract (Article 6(1)(b)) for the subscription itself, and legal obligation (Article 6(1)(c)) for keeping accounting and VAT records.

Emails we send you

What: Your email address, and a record of which messages we sent you.

Why: Service messages you cannot opt out of while you have an account, such as password resets, receipts, renewal reminders and important changes. Separately, our newsletter, which is entirely optional.

Legal basis: Performance of our contract (Article 6(1)(b)) for service messages. Consent (Article 6(1)(a)) for the newsletter, which you give by opting in and can withdraw either from your notification settings or with the unsubscribe link in any newsletter.

You can subscribe to our newsletter without creating an account. If you do, we handle that separately from everything above, because there is no account to attach it to.

What: Your email address, a name if you give one, which page you subscribed from, which language you asked for, and the times we sent you a confirmation and you confirmed.

Why: To send you the newsletter, and to be able to show that you asked for it.

Legal basis: Consent (Article 6(1)(a)).

We use confirmed opt-in: subscribing sends you an email with a link, and nothing is sent to you until you follow it. Until then your address sits unconfirmed. If you never confirm, it stays that way and you hear nothing further from us.

The newsletter list is held in our own database and is not shared with a mailing-list provider. If that changes we will name the provider here before we start using it.

Every newsletter carries a one-click unsubscribe link. It works without signing in, and following it more than once cannot put you back on the list.

We record which page you subscribed from so we know which of our writing is worth doing. It is not combined with anything else about you.

When you contact us

What: Your name, email address, and whatever you write to us.

Why: To answer you, and to keep a record of what was said if the issue comes up again.

Legal basis: Our legitimate interest in providing support and keeping records of it (Article 6(1)(f)).

Usage and analytics

What: Pages visited, features used, approximate device and browser type, referring site, and which marketing link brought you to us.

Why: To understand which parts of Opinta work and which do not, and to decide what to build next.

Legal basis: Our legitimate interest in understanding and improving the service (Article 6(1)(f)). We have weighed this against your privacy and concluded it is proportionate, because we look at how the product is used to improve it rather than to make decisions about individual people. You can object at any time, see “Your rights” below.

We do this in two ways, and they are not the same thing:

Visitor statistics. We use Plausible Analytics, which is privacy-focused, hosted in the EU, and sets no cookies. It does not identify you or follow you across other websites, and it produces aggregate numbers rather than profiles.
Product events. When you do something significant in the app, such as completing a daily review or starting a subscription, we record that it happened. These records are stored in our own database and are linked to your account, so they are personal data. We use them to see where people get stuck, not to evaluate you.

We do not use cookie-based analytics, and we do not have a cookie banner because we do not use any cookies that would need one. See our Cookie Policy for the full list. If that ever changes, we will ask you first.

Security and abuse prevention

What: IP addresses, browser and device information, sign-in timestamps, records of failed sign-in attempts, and server logs.

Why: To detect and stop unauthorised access, abuse and fraud, and to diagnose faults.

Legal basis: Our legitimate interest in keeping the service and its users secure (Article 6(1)(f)).

We record the IP address and browser used when an account is created and when a sign-in fails. We use these only to tell one visitor apart from another when something looks automated or hostile — a script creating accounts, or repeated attempts to guess a password. We do not use them to build a profile of you or to make decisions about you individually.

If a sign-in fails for an email address that has no account with us, we record that an attempt happened but we do not store the address that was tried.

The signup form asks Cloudflare to check that the request comes from a person rather than a script. This happens in your browser and normally needs nothing from you. Cloudflare sees the address making the request and basic browser characteristics; it does not set a cookie on this site.

We do not sell your data. We do not share it for advertising. We share it only with the service providers we need to run Opinta, and only as much as they need.

Who	What they do	What they handle	Where
Fly.io	Runs our servers and hosts our database	The database itself, which is where your account and everything in it is stored	Amsterdam, Netherlands
Stripe	Processes payments and subscriptions	Your name, email, and billing details. Nothing you create in Opinta.	Ireland and USA
Amazon Web Services (SES)	Sends our email	Your email address and the contents of the emails we send you	Stockholm, Sweden (eu-north-1)
Plausible Analytics	Counts visitors to our pages	The pages requested and the IP address making the request, which it uses to count unique visitors and does not store	European Union
Cloudflare	Checks that a signup comes from a person rather than a script	The IP address requesting the signup page and basic browser characteristics	USA

Your content is stored by our hosting provider because that is where the database lives, and goes to none of the others. Stripe handles payments and receives nothing you have created. Our email provider receives only what is needed to deliver a message to you.

Each of these is bound by a data processing agreement requiring them to process your data only on our instructions. Stripe is a partial exception: for preventing fraud and meeting its own legal obligations as a payment company, it decides how to use payment data itself, under its own privacy policy rather than ours.

We may also disclose data if the law requires it, or to establish or defend a legal claim. If that ever happens and we are permitted to tell you, we will.

If Opinta is ever sold or merged, your data may transfer to the new owner. We will tell you before it happens, and this policy will continue to apply until you are told otherwise.

Data outside the EU

We keep data in the EU or EEA wherever we can. Our servers, our database and our email sending are all in the EU.

Two providers involve transfers to the United States: Stripe, for payments, and Cloudflare, for the signup check. For both we rely on the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses to ensure your data keeps an equivalent level of protection.

You can ask us for details of the safeguards that apply to any particular transfer.

How long we keep things

Data	How long
Account and content	Until your account is deleted
After account deletion	Removed within 30 days, except as noted below
Wellbeing tracking entries	Until you delete them or delete your account. Turning tracking off stops new entries and lets you delete the old ones.
Consent records	Kept with your account, and removed with it
Accounting and payment records	6 years from the end of the accounting year, as required by the Finnish Accounting Act
Support emails	While we may still need them to answer a follow-up about the same issue, and no longer than 2 years from the last message
Newsletter subscription	While you are subscribed. If you unsubscribe we keep a record that you did, so that a later signup cannot quietly put you back on the list. Ask us and we will erase it entirely.
Unconfirmed newsletter signups	Kept unsent until confirmed. Ask us and we will erase them
IP addresses and browser details in our security logs	Removed from the log after 90 days. The log entry itself stays, without them
Security and sign-in records	For as long as you have an account, then removed with it
Aggregated usage statistics	Indefinitely, in a form that does not identify you

Backups are kept on a rolling cycle, so deleted data can survive in them for a short time afterwards. It is always gone within 30 days.

Your rights

Under the GDPR, you have the following rights over your personal data. All of them are free to use, and we will respond within one month.

Access. Ask what data we hold about you, and get a copy.
Portability. Get your data in a machine-readable format, or ask us to send it to another service.
Rectification. Correct anything that is wrong. Most of it you can edit yourself.
Erasure. Ask us to delete your account and your data. We may need to keep accounting records for the period above.
Restriction. Ask us to pause processing while a dispute or correction is sorted out.
Objection. Object to processing we base on legitimate interest, including analytics.
Withdraw consent. Withdraw consent for the newsletter, or for wellbeing tracking, at any time. This does not affect processing that already happened.

To use any of these, email support@opinta.io. We may ask you to confirm your identity first, so we are not handing your data to someone else.

What you have to give us: an email address and password are required to have an account, and billing details are required to subscribe to Pro. Without those we cannot provide the service. Everything else, including wellbeing tracking and the newsletter, is optional and nothing stops working if you leave it out.

Automated decision-making: we do not make decisions about you by automated means that produce legal effects or similarly significant consequences for you.

If you are unhappy with how we handle your data, please tell us first and we will try to fix it. You also have the right to complain to the Finnish supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
tietosuoja.fi

If you live in another EU country, you can complain to your own national authority instead.

Age

Opinta is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, email support@opinta.io and we will delete it.

Security

We protect your data with measures appropriate to the risk, including encryption in transit, hashed passwords, access limited to the few people who need it, and regular backups.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your rights, we will notify the supervisory authority within 72 hours of becoming aware of it, and tell you directly where the law requires it.

Cookies

Cookies and similar technologies are covered in our Cookie Policy.

Links to other sites

Opinta may link to other websites. We have no control over their privacy practices and are not responsible for them. Have a look at their policies before giving them anything.

Changes to this policy

We update this policy when the service or the law changes. The date at the top always reflects the current version.

If we make a change that meaningfully affects you, we will email you or show a notice in the app before it takes effect. Small clarifications take effect when published.

Contact