Draft under legal review. This text is not the official version yet.
Privacy for Destrava
Updated on October 9, 2026
This annex supplements the IDS privacy policy and applies to Destrava, an English study app with spaced repetition.
Data we collect
| Category | What it is | Purpose | Legal basis |
|---|---|---|---|
| Account | name, email and the Google account identifier used to sign in | creating and maintaining your account | performance of a contract |
| Study | cards studied, ratings, review scheduling and course progress | syncing your study across devices and scheduling reviews | performance of a contract |
| App usage | usage events (such as “lesson completed”), filtered so they contain no free text or personal data | understanding what works and fixing problems | legitimate interest |
| Subscription | plan status, purchase identifiers and payment history (we do not store card numbers) | unlocking Premium content and meeting tax obligations | performance of a contract and legal obligation |
| Device | app and operating system version | maintaining compatibility and blocking old versions that have known faults | legitimate interest |
Progress is saved on the device first and sent to the server when a connection is available.
Who we share with
Only with the providers needed for the app to work:
- Supabase: database, authentication and server functions.
- Google: Google sign-in and billing through Google Play.
- RevenueCat: management of subscriptions purchased in the app stores.
- Stripe: payments made on the web, including Pix.
- Cloudflare: delivery of audio files.
We do not sell data and do not use third-party ads.
How long we keep data
We keep data for as long as your account exists. When you delete your account, we erase personal data within 30 days. Only records that the law requires us to keep are retained, such as payment tax records, for the legal period, along with backup copies, which expire automatically in the rotation cycle.
How to delete
See the page Delete account for Destrava.