Web Privacy Policy

01Who we are

Factopus is operated by VVDev LLC, a limited liability company registered in the State of Wyoming, United States ("VVDev", "we", "us", "our"), 30 N Gould St #22306, Sheridan, WY 82801, United States, email support@factopus.app. For the purposes of the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act, and similar laws, VVDev LLC is the controller of your personal data.

02Scope of this policy

This Web Privacy Policy applies when you:

• take our web quiz and enter your email address (the "Web Quiz");
• buy a Factopus Pro subscription on our web checkout page (the "Web Checkout");
• receive emails about your account or a web purchase;
• use the web version of Factopus at app.factopus.app (the "Web App").

The Factopus mobile App and the website factopus.app are covered by our Privacy Policy. Where this policy refers to it for shared topics, such as security or your rights, those parts of the Privacy Policy apply here too.

03What data we collect

a) Your account

• Email address — required. You enter it in the Web Quiz, and it becomes your Factopus account, the same account you use in the App.
• Password — optional. If you set one in the Web App, it is stored by our sign-in provider only in hashed form, and we never see it. Without a password, you sign in with a one-time link we email you.
• Profile and progress — your display name and avatar if you add them, your daily goal, the topic you picked, and your learning progress in the Web App (lessons, quiz answers, ratings, likes, streak). They are stored with your account and shared with the App when you sign in there.

b) Your quiz answers

The Web Quiz asks what you want to get out of Factopus, which subjects interest you, and how much time you have a day. We use the answers to put together your plan and to show you a fitting offer. They are stored with Web2Wave and with your account, and may be recorded in our analytics tools.

c) Purchases and payments

The Web Quiz and Web Checkout run on the Web2Wave platform, and card payments are processed by Stripe. We receive your email address, the plan you chose, its price and currency, the payment and subscription status, the relevant dates, and your country. Stripe collects your card details directly and handles them under its own privacy policy; we never see or store your full card number.

d) Emails

We send you the emails the service needs: a confirmation after a web purchase (sent by Web2Wave from hello@mail.factopus.app and delivered by Resend), sign-in links ("Your sign-in link", sent from support@factopus.app through our email hosting provider), and messages about your subscription. If you write to us, we receive your address and whatever you tell us.

e) Technical and usage data

When you open our web pages, we and our providers receive your IP address, the rough region it points to, your browser and device type, the pages you open, the steps you complete, and the time of each request. In the Web App, we also record which lessons you open and finish.

f) Advertising and analytics data

Where they are switched on, the Meta Pixel with Meta's Conversions API and Google Analytics 4 through Google Tag Manager record page views and steps such as finishing the quiz, signing up, starting a trial, and paying, together with cookie identifiers, IP address, and browser data. The Conversions API can send the same events from our server, along with your email address in hashed (scrambled) form. Section 7 explains how to refuse this.

04How we use data

Purpose	Examples
Create your account	Turn the email you enter in the Web Quiz into your Factopus account and sign you in.
Build your plan	Use your quiz answers to suggest topics, a daily goal, and a plan.
Sell and run your subscription	Take payment through Stripe, renew and cancel the subscription, give you access to the Web App, and, where available, Factopus Pro in the App when you sign in with the same email.
Send service emails	Purchase confirmations, sign-in links, and messages about your account or subscription.
Measure our advertising	Find out which of our ads led people to the quiz and to a purchase, and help Meta show our ads to people likely to be interested.
Improve the quiz and checkout	See where people drop off and which version of a page works better.
Keep things running	Diagnose failures, stop abuse and payment fraud.
Legal & safety	Keep tax and accounting records, handle refunds and disputes, respond to lawful requests.

We do not send marketing email at the moment. If we start, we will ask for your consent first where the law requires it, and every such email will carry an unsubscribe link.

05Legal bases (GDPR / UK GDPR)

• Contract — to create your account, build your plan, sell and run your subscription, give you the Web App, and send service emails (Art. 6(1)(b) GDPR).
• Consent — to set advertising and analytics cookies and to use the Meta Pixel, the Conversions API, and Google Analytics where the law requires your permission (Art. 6(1)(a) GDPR). You can withdraw consent at any time in the cookie settings or in your browser; withdrawing does not affect what happened before.
• Legitimate interests — to keep our pages secure, prevent payment fraud, and improve the quiz and checkout (Art. 6(1)(f) GDPR). You can object at any time (Section 11).
• Legal obligation — to keep tax and accounting records of payments and answer lawful requests (Art. 6(1)(c) GDPR).

06Who we share data with

We do not sell your personal data for money. These companies receive data from our web pages and the Web App:

Provider	What it does	What it can see
Web2Wave	Runs the Web Quiz and Web Checkout and sends the email after a purchase	Quiz answers, email address, plan, payment status, IP address, browser data
Stripe	Processes card payments	Card details, email address, billing country, payment data, as an independent controller for payments and fraud prevention
Resend	Delivers the emails Web2Wave sends for us	Email address and the content of the email
Supabase	Sign-in and the database that holds your account and progress	Email address, hashed password if you set one, profile, quiz answers, progress, request metadata
Vercel	Hosting for the Web App	IP address and request metadata in server logs
Adapty	Links a web subscription to your account in the App, where available	Account identifier, subscription status and dates
Meta	Measuring and optimizing our ads on Facebook and Instagram, where switched on	Pixel and Conversions API events, cookie identifiers, IP address, browser data, hashed email address
Google Analytics & Tag Manager	Measuring our quiz and checkout, where switched on	Cookie identifiers, page views and events, IP address, browser data
Our email hosting provider	Sending sign-in links and receiving support emails	Email address and the content of the email

Web2Wave, Resend, Supabase, Vercel, Adapty, Google, and our email hosting provider act as our processors under data processing agreements. Stripe acts as an independent controller for payments. Meta uses the events it receives under its own Privacy Policy, may combine them with what it already knows about you, and, for collecting them through our pages, may act as a joint controller with us. Beyond these, data leaves us only to our lawyers or accountants, to authorities answering a valid legal request, or to a buyer of VVDev LLC, as described in our Privacy Policy.

07Advertising & analytics on the web

We advertise Factopus on platforms such as Facebook and Instagram. To know which of those ads lead to sign-ups and purchases, our Web Quiz and Web Checkout may carry the Meta Pixel with the Conversions API and Google Analytics 4 through Google Tag Manager. They report the steps you complete to Meta and Google, and Meta uses them to measure our ads and to decide who sees them.

Where the law requires it, these tools run only after you agree in the cookie banner. You can refuse them there, change your choice later, or block third-party cookies in your browser. The Web App and the site factopus.app carry none of them.

08Cookies & local storage

• Strictly necessary — the Web Quiz and Web Checkout use cookies and local storage to remember your answers and your place in the quiz; Stripe sets its own cookies during payment to prevent fraud; the Web App uses cookies and local storage to keep you signed in and to remember your settings. These are needed for the service you asked for.
• Analytics and advertising — the Meta Pixel and Google Analytics set their own cookies where they are switched on. Where the law requires it, we ask for your consent first.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop the quiz, the checkout, or sign-in from working.

09International transfers

VVDev LLC is established in the United States, and Supabase and Vercel store our data in the United States. Our other providers process data in the United States, the European Union, and other countries where they or their subcontractors operate, and our email hosting provider is located in Ukraine. Where the destination country has no adequacy decision, we rely on the European Commission's Standard Contractual Clauses and, for the UK, the UK International Data Transfer Addendum, or on the provider's certification under the EU-U.S. Data Privacy Framework where it has one.

10Data retention

• Account, profile, quiz answers, and progress — kept while your account exists, and deleted when you delete your account.
• Payment and subscription records — kept for as long as tax, accounting, and consumer-protection law requires, usually 6 to 10 years. Stripe keeps its own records under its policy.
• Sign-in links — work once and expire shortly after we send them.
• Analytics and advertising data — kept on Google's and Meta's schedules; Google Analytics keeps event data for no longer than 14 months.
• Server logs — typically up to 30 days. Support emails — up to 2 years after we close your request.

11Your rights

You have the same rights here as described in Section 11 of our Privacy Policy: access, correction, deletion, restriction and objection, withdrawal of consent, portability, and a complaint to your data protection authority. To use them, email support@factopus.app from the address of your account. We respond within one month, or 45 days for California requests.

To delete your account, follow our Account & Data Deletion page. Cancel your subscription first: deleting your account does not cancel it.

12California rights (CCPA / CPRA)

On the web we collect identifiers (email address, account ID, IP address, cookie identifiers), commercial information (the subscription you bought, its price and status), internet activity (the pages you open and the steps you complete), approximate location from your IP address, and inferences drawn from your quiz answers. We do not sell personal information for money. If you accept advertising cookies, the Meta Pixel and Conversions API make identifiers and events available to Meta for measuring and targeting our ads, which California law may treat as "sharing" for cross-context behavioral advertising, and possibly as a "sale".

How to opt out. Decline advertising cookies in the cookie banner where one is shown, or block cookies in your browser. You can also email support@factopus.app from your account address with the subject "Do Not Sell or Share", and we will stop passing your account's data to advertising partners where we can identify it. We do not knowingly sell or share the personal information of anyone under 16. Your other California rights are described in Section 12 of our Privacy Policy.

13Children & security

Factopus is made for readers aged 13 and up and is not directed to children under 13. You must be at least 13 to create an account, and to buy a subscription you must be an adult or have your parent's or guardian's permission. If you believe a child under 13 has given us personal data, contact support@factopus.app and we will delete it.

We protect your data with encryption in transit and at rest, access controls, and backups, as described in Section 10 of our Privacy Policy. Anyone who can read your inbox can request a sign-in link, so keep your email account secure.

14Changes to this policy

We may update this Web Privacy Policy from time to time. When we make material changes, we'll tell you by email to your account address or with a notice on our web pages before the changes take effect. The "Last updated" date at the top always reflects the latest version.

15Contact & complaints