Privacy Notice

This notice explains how Online Fitness Sales LLC, trading as FastFrench ("we", "us"), handles your personal data. We are the data controller for personal data processed through the FastFrench app and website.

Data we collect and why

• Account data (name, email, login credentials or Google sign-in identifier) — to create and secure your account. Legal basis: contract.
• Learning data (placement results, answers, topic progress, CEFR level) — to provide and personalise the Service. Legal basis: contract.
• Usage and device data (IP address, browser and device identifiers, logs) — for security, fraud prevention and improving the product. Legal basis: legitimate interests.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Subscription status (plan, renewal date) — to give you the access you paid for. Legal basis: contract.

Payment card details are collected directly by Paddle, not by us.

Who we share it with

• Service providers that host and operate the app (hosting, database, authentication, error monitoring);
• Paddle.com, our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing;
• Professional advisers such as lawyers and accountants;
• Authorities where required by law.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including in the United States. Where required, we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.

Retention

We keep account and learning data while your account is active. When it is no longer needed — for example after you delete your account — we delete or anonymise it, except where we must keep records for legal or tax reasons.

Your rights

Depending on where you live (including under the GDPR and UK GDPR), you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent. We respond within one month. You may also complain to your local data protection authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level permissions so each learner can only access their own data.

Cookies

We use only essential cookies and local storage needed to keep you signed in and the app working. We do not use advertising cookies. You can clear them in your browser settings, but you will be signed out.