Privacy Policy
Welcome to LZpreneur OÜ (hereinafter referred to as “Company”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, and protect your personal data across our entire ecosystem.
1. Scope of this Privacy Policy
This Privacy Policy applies to all websites, mobile applications, and digital services operated by LZpreneur OÜ, including but not limited to:
- Corporate Website: lzpreneur.io
- Education Platform: vibecodehome.io (Vibe Code Home)
- Mobile Applications: Course Kit (iOS & Android)
- Web Services/Games: Who Is The Spy
By accessing or using any of these services, you acknowledge that you have read and understood this Policy. This “Master Policy” supersedes any individual privacy notices found on our sub-brands unless explicitly stated otherwise.
2. What Data We Collect
Depending on which service you use (Website, App, or Game), we may collect the following types of data:
2.1 Account & Registration Data
When you register for Vibe Code Home or create an account in Course Kit to sync data:
- Identity Data: Email address (via Firebase Authentication), User ID (automatically generated), and Name/Nickname (if provided).
- Authentication Data: Login timestamps and authentication tokens.
2.2 Transaction & Financial Data
When you purchase a membership, course, or premium app features:
- Web Purchases (Stripe): We collect your purchase history, invoice details, and product usage rights. Important: We do not store full credit card numbers. All payment processing is handled securely by Stripe.
- In-App Purchases (Apple/Google): Transactions are processed directly by the App Store or Google Play. We receive a digital receipt validation token to unlock features, but we do not have access to your banking information.
2.3 App Usage & Technical Data
To ensure our apps and websites function correctly, we automatically collect:
- Device Information: Device model, operating system version (e.g., iOS 18, Android 14), and IP address.
- Crash Logs: Anonymous crash reports (via Firebase Crashlytics) to help us fix bugs and improve stability.
- Analytics: Aggregated usage statistics (e.g., page views, feature usage, button clicks) via Google Analytics and Firebase Analytics.
3. How We Use Your Data
We use your data strictly for the following purposes:
- Service Provision: To authenticate your identity, sync your course records across devices (Course Kit), or grant access to paid content (Vibe Code Home).
- Communication: To send order confirmations, invoices, important service updates (e.g., policy changes), or newsletters (only if you have opted in).
- Product Optimization: To analyze which features are most popular and to improve the user interface and experience.
- Legal & Security: To comply with tax (VAT) obligations, prevent fraud, and ensure the security of our platform.
4. Third-Party Services (Data Processors)
We share data with trusted third-party service providers solely to operate our services. We do not sell your personal data to advertisers or third parties.
| Service Provider | Service Type | Data Involved |
|---|---|---|
| Google Firebase | Backend, Auth, Database, Hosting | User ID, Email, App Data, Crash Logs |
| Stripe | Payment Processing (Web) | Billing Info, Transaction History |
| Google Analytics | Traffic Analysis | Anonymized Usage Data, IP Address |
| Apple / Google | App Distribution & Payments | Purchase Receipts, Subscription Status |
5. Purposes and Legal Bases (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your data based on the following legal grounds:
- Contractual Necessity: To deliver the service you purchased (e.g., unlocking Course Kit Premium).
- Consent: For sending marketing newsletters or placing non-essential cookies.
- Legitimate Interests: For security monitoring, debugging, and product improvement.
- Legal Obligation: For maintaining accounting records and complying with tax laws.
6. Data Retention
We retain personal data only as long as necessary:
- Account Data: Stored until you request account deletion.
- Transaction Records: Retained for 7 years (or as required by Estonian tax/accounting laws).
- Crash Logs & Analytics: Retained for a limited period (typically 2-14 months) before being deleted or permanently anonymized.
7. Your Rights (GDPR & CCPA)
You have the right to:
- Access the personal data we hold about you.
- Rectify incorrect or incomplete data.
- Erase (“Right to be Forgotten”) your account and associated data.
- Restrict or Object to the processing of your data.
- Data Portability: Receive your data in a structured, commonly used format.
To exercise these rights, or to request the deletion of your account, please contact our Data Protection Officer at:
Email: support@lzpreneur.io
8. International Data Transfers
Your data may be processed on servers located outside of your country of residence (e.g., Google Cloud servers in the US or EU). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your privacy rights.
9. Contact Us
If you have any questions about this policy, please contact us:
LZpreneur OÜ
Location: Tallinn, Estonia
Email: support@lzpreneur.io
10. Changes to this Policy
We may update this policy from time to time. The latest version will always be published on this page. Continued use of our services constitutes acceptance of the revised policy.