Privacy Policy
← Back to HomePrivacy Policy
Last updated: February 12, 2026
Welcome to Mytoori (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our educational reading app. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Data Controller
The data controller responsible for your personal information is:
Mytoori
Spechtstraat 9, 1171 SR Badhoevedorp, The Netherlands
KvK number: 56200846
Contact: info@mytoori.com
What Information We Collect
We collect the following types of personal information:
- Account Information: Email address and password (hashed) when you create an account
- Reading Progress: Stories you've read, progress tracking, reading history
- Practice Data: Practice sessions, results, and performance statistics
- Preferences: Language preferences, favorites, and reading settings
- Technical Data: IP address (anonymized), browser type, device information, and usage patterns
- Cookies: Session cookies for authentication only (see Cookie Policy)
- Analytics: Anonymous usage statistics via cookie-less analytics (no tracking cookies)
Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract Necessity: To provide and maintain your account and app functionality
- Legitimate Interest: To improve our services, ensure security, and analyze usage patterns with cookie-less analytics
- Legal Obligation: When required by applicable laws and regulations
Third-Party Service Providers
We use the following third-party services to operate our app:
| Service Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting and deployment | US company, EU servers |
| ImageKit | Image storage and CDN | India/Global |
| MongoDB Atlas | Database hosting | US company, EU servers |
We ensure that all third-party processors provide adequate data protection safeguards in accordance with GDPR requirements.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use, their purposes, and how to manage them, please see ourCookie Policy.
Essential cookies are required for the app to function properly. Analytics cookies help us understand how our app is used and improve our services. You can manage your cookie preferences through our cookie consent banner.
Children's Privacy
Our app is designed to be educational and suitable for children, but we do not knowingly collect personal information from children under 16 years of age without parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@mytoori.com.
If we become aware that we have collected personal information from children under 16 without parental consent, we will take steps to delete such information.
Your Data Subject Rights
Under GDPR, you have the following rights regarding your personal information:
- Right to Access: Request a copy of your personal information
- Right to Rectification: Request correction of inaccurate information
- Right to Erasure: Request deletion of your personal information
- Right to Portability: Request transfer of your data to another service
- Right to Restriction: Request limitation of how we process your information
- Right to Object: Object to processing based on legitimate interest
- Right to Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, please contact us at info@mytoori.com. We will aim to respond to your request within 30 days.
Data Retention
We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Specifically:
- Account Information: Retained until you delete your account
- Reading Progress: Retained until you delete your account or request deletion
- Analytics Data: Retained for 26 months in anonymized form
- Technical Logs: Retained for 30 days for security purposes
You can delete your account and all associated data at any time through your account settings or by contacting us.
International Data Transfers
Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:
- Standard Contractual Clauses (SCCs) with our service providers
- EU-US Data Privacy Framework for US-based services
- Adequacy decisions by the European Commission where applicable
If you would like more information about our international data transfer safeguards, please contact us using the details above.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will:
- Update the "Last updated" date at the top of this policy
- Notify users of significant changes via email or in-app notification
- Post the updated policy on our website
Your continued use of the App after changes indicates your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your privacy rights, please contact us:
Thank you for choosing Mytoori. We are dedicated to protecting your privacy and providing a safe educational experience for all our users.