Privacy policy

This policy explains what personal data Bytewize collects, why, who else handles it, and what you can do about it. It covers the Bytewize apps for iOS and Android, the web app at app.bytewize.dev and this website.

Who is responsible

Bytewize is run by Wizeworks: Ensar Hamzić and Džemil Sejdija, Novi Pazar, Serbia. The two of us decide together how your data is used and are jointly responsible for it (joint controllers). Write to info@wizeworks.dev about anything in this policy or to use your rights; whichever of us receives your message answers it.

What we collect

• Account. When you open the app you start as a guest with a random account id. If you save your progress, we also keep how you signed in (Apple, Google or an emailed code), your email address, and the name and avatar you choose. If you sign in with Apple and hide your email, we only get Apple's relay address.
• Learning. Your answers, lessons and progress, XP, level, streak and badges, your review schedule, league standings and your settings (tracks, reminder time, whether you take part in leagues).
• Pro. Whether you have Pro, which plan, from which store, and when it renews or ends. We never see your card or payment details: the App Store or Google Play handles payment.
• Feedback and reports. What you write when you send feedback or report a question, with the screen you were on, your device's system (on the web, your browser), app version and plan. Your email address only if you let us reply to you.
• Device. A random id for your installation of the app.
• Ads. Free users of the iOS and Android apps see ads from Google AdMob, which processes your device's advertising id, IP address and device information. See Ads below.
• Technical logs. Our servers log requests (IP address, time, the address requested) to keep the service running and secure.
• Website. If you join the waitlist, your email address, the form you used, and when you signed up and confirmed. The website sets no advertising or tracking cookies.

Reminders are notifications your phone schedules itself; their time stays on your device and in your settings. We don't collect your precise location, contacts, photos or any special categories of data.

Why we use it

• To provide Bytewize, as our agreement with you (the Terms): your account, progress, streaks, reviews, leagues and Pro, and the emails that sign you in.
• With your consent: personalized ads, and on iOS tracking across apps. You can withdraw consent at any time (see Ads). Joining the waitlist is also based on your consent: we send a confirmation email first, and an address that is never confirmed gets no other email. Confirmed addresses get one email when Bytewize opens, with the offer of one month of Pro for free.
• For our legitimate interests: keeping the service secure and working (logs, abuse prevention), showing non-personalized ads that pay for the free plan, answering feedback and fixing reported content, and improving Bytewize.
• When the law requires it, for example to keep records or answer authorities.

We don't sell your personal data.

What other people see

In leagues, other learners in your group see your display name, avatar and weekly XP. With Focus mode in Settings you take no part in leagues, and nobody sees you there.

Who else handles your data

We use these services to run Bytewize. They process your data on our behalf, or as described in their own policies where they act independently (the stores and Google AdMob):

• Supabase: sign-in and our database (stored in the EU, in Frankfurt).
• Vercel: hosting of the API, the web app and this website.
• ZeptoMail (Zoho): sends sign-in codes and waitlist confirmation emails.
• Zoho Campaigns: sends the launch email to confirmed waitlist addresses.
• Apple and Google: Sign in with Apple and Google sign-in, and the App Store and Google Play for purchases.
• RevenueCat: keeps track of Pro subscriptions across stores, identified by your Bytewize account id.
• Google AdMob: ads for free users. Read how Google uses information from apps that use its services.
• ClickUp: each piece of feedback and each question report becomes a task in our private team workspace, with your account id and, only if you let us reply, your email address. These tasks are deleted when you delete your account.

We are based in Serbia and access the data from there. Some of these companies are in the United States or elsewhere outside the EU. Where data leaves the EU, they protect it with the safeguards the law provides, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

Ads

Free users of the iOS and Android apps see ads; Pro users and the web app don't. In the EU, the UK, Switzerland and US states with privacy laws, the app asks before showing personalized ads; on iOS it also asks before tracking you across apps. Without your consent, ads are not personalized. Where this applies, you can change your choice with Privacy choices in the app's Settings, and on iOS also in your iPhone's settings. Whether or not ads are personalized, Google may use your IP address to estimate your approximate location, such as your city or region, to choose ads.

How long we keep it

• Your account, learning data, Pro status, feedback and reports: until you delete your account. A guest who signs in to an existing account is deleted the same way.
• Server logs: up to 1 day.
• Waitlist addresses: until you remove yours with the link in every waitlist email or ask us to, or the waitlist ends.

The stores keep their own purchase records under their policies, and the law may require us to keep some records longer.

Deleting your account

In the app, open Settings and choose Delete account. This deletes your account and all its data from Bytewize, and your customer record at RevenueCat. Deleting your account does not cancel a Pro subscription: cancel it first in your App Store or Google Play account. You can also ask for deletion by writing to info@wizeworks.dev. Delete your account has the steps.

When you delete your account in the app, we delete your data right away. If we keep backups, copies in them are erased within 7 days. If you ask for deletion by email, we do it within 30 days.

Your rights

You can ask us for a copy of your data, to correct or delete it, to limit how we use it, or to receive it in a portable format; you can object to uses based on our legitimate interests and withdraw consent at any time. Write to info@wizeworks.dev. You can also complain to a data protection authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), or the authority where you live in the EU.

Security

Data is encrypted in transit (HTTPS) and at rest (AES-256), sign-in is handled by Supabase, and only the two of us have access to the database.

Age

Bytewize is for people aged 16 and over. We don't knowingly collect data from younger children; if you think we have, write to us and we'll delete it.

Changes

When Bytewize gains features that use data in new ways, such as comments, push notifications or usage statistics, we'll update this policy before they launch and change the date above. We'll tell you in the app about important changes. See also our Terms of use.