Privacy Policy

1. Who is responsible

The controller responsible for processing personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR) is:

2. Data in the app

Percy works without an account or sign-in. The app stores the following information only locally on your device:

• your learning progress (completed lessons and sections),
• your experience points (XP), your title and your streak,
• how many final quiz attempts you have used today,
• the display name you choose and your profile picture (a character from the app, not a photo),
• your settings, such as language, sound and reminder times.

This data is never transferred to us or to third parties. There is no cloud sync and we have no access to it. You can reset your progress at any time in the app under Profile › Delete progress. Deleting the app removes all locally stored data.

Apart from advertising (section 4) and the optional lesson feedback (section 3), the app does not use any analytics or tracking services. All lesson content is built into the app, so it also works without an internet connection.

3. Anonymous lesson feedback

After finishing a lesson, you can choose to leave a rating. Only when you tap Send does the app send the following to our server:

No device ID, name, profile picture or any other identifier is sent, and we do not store IP addresses. A rating therefore cannot be linked to you. Please don’t include personal details in your comment.

Ratings are sent over an encrypted connection (HTTPS) to a service we run on Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers and D1 database). For technical reasons, Cloudflare briefly processes your IP address while establishing the connection, in order to deliver the request and protect against abuse. Cloudflare is certified under the EU-US and Swiss-US Data Privacy Frameworks, and our data processing agreement with Cloudflare includes the EU Standard Contractual Clauses.

The legal basis is your choice to submit (Art. 6(1)(a) GDPR) and our legitimate interest in improving our lessons (Art. 6(1)(f) GDPR). Ratings are deleted once they are no longer needed to improve the content, and at the latest after 24 months.

If a rating can’t be sent because you’re offline, the app keeps it on your device and tries again later. At most 20 ratings are held this way.

4. Advertising

Percy is free to use and will be financed by ads shown in the app. The current version of the app does not show ads yet. Before ads are switched on, we will update this section to name our advertising partner, its address and a link to its privacy policy. Once ads are active, the partner may process the following to show and measure ads and to protect them against fraud:

• your device’s advertising identifier (IDFA on iOS, Advertising ID on Android), where you allow it,
• your IP address and an approximate location derived from it,
• device and app information, such as device model, operating system, language and app version,
• interactions with ads, such as which ads were shown or tapped.

Your consent. In the EU, EEA, UK and Switzerland, the app asks for your consent before personalised ads are shown or information is read from your device for advertising. If you decline, you only see non-personalised ads, which rely on limited data such as the app and your approximate location. You can change your choice at any time in the app’s settings. On iOS, the app also asks for permission to track via Apple’s App Tracking Transparency. You can change this under Settings › Privacy & Security › Tracking. On Android, you can reset or delete your Advertising ID in your device settings.

For users in the EU and EEA, the legal basis for personalised ads and for accessing information on your device is your consent (Art. 6(1)(a) GDPR and the applicable national ePrivacy rules). The legal basis for non-personalised ads is our legitimate interest in financing the app through advertising (Art. 6(1)(f) GDPR). The ad partner may transfer data to countries outside Switzerland and the EU, including the USA. Such transfers will only take place with appropriate safeguards, such as the Data Privacy Frameworks or Standard Contractual Clauses, which we will name together with the partner.

Ads come from third parties. They are not recommendations from us, and Percy is not responsible for the advertised products or services.

5. Reminders

If you turn on study reminders, the app asks your operating system for permission to show notifications. Reminders are scheduled entirely on your device. No push service is used and no data is sent to us. You can turn reminders off at any time in the app or in your device settings.

6. This website

Hosting

This website is served via Cloudflare Pages by Cloudflare, Inc. (address above). When you visit, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the referring URL, and browser and operating system information. This is needed to deliver the website, keep it secure and defend against attacks.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU-US and Swiss-US Data Privacy Frameworks and supplementary Standard Contractual Clauses. For more information, see Cloudflare’s privacy policy.

No cookies, no tracking

This website sets no cookies, uses no analytics or tracking services and embeds no third-party content. Even the fonts are loaded directly from our own server rather than from an external provider. That’s why there is no cookie banner here.

7. Contacting us by email

If you email us, we process your email address and the content of your message in order to respond (Art. 6(1)(b) or (f) GDPR). We delete this data once your request has been dealt with, unless we are legally required to keep it.

8. App stores

Percy is distributed through Apple’s App Store and Google Play. When you download the app, these platforms process data such as your account details, device information and purchase history under their own responsibility. We have no influence over this. Their respective privacy policies apply: Apple and Google.

9. Your rights

Where we process personal data about you, you have rights under the FADP and, where it applies, the GDPR, in particular the right to:

• access the data we hold (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have data deleted (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

Because feedback is stored anonymously, we usually can’t link a single rating to you. If you tell us roughly when you sent it and what your comment said, we’ll gladly delete it. To exercise your rights, email hello@percyfinance.app.

You also have the right to lodge a complaint with a data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. If you live in the EU or EEA, you can also contact the supervisory authority in your country.

10. Changes

We will update this privacy policy whenever the app or this website changes, for example when new features are added. The current version is always available on this page.