{ platyko }
Platyko is a JavaScript learning app for iOS, built and operated by Ido Yahav, an individual developer based in Israel. This policy explains what information the app collects, why, and the choices and rights you have. It is written to be read, not skimmed past — but if you only have a minute, start with the summary below.
No analytics, crash reporting, advertising, or tracking SDKs of any kind — in the app or on this website.
We do not sell personal data or share it with third parties for marketing. Ever.
Use Platyko without an account — your progress stays only on your device, and nothing about you is stored on our servers.
Account deletion is built into the app’s Settings. It is immediate and permanent, with backup copies purged within 30 days.
Platyko (“the app”) is developed and operated by Ido Yahav, an individual developer based in Israel, acting as the data controller for any personal data processed through the app and this website.
This policy applies to the Platyko iOS app and to this website. By using the app, you agree to the practices described here.
We collect personal data only from registered users. If you use Platyko in Guest Mode, we collect nothing about you — see Section 04.
id_token). We never receive or store a password for these accounts.
With Sign in with Apple, you may choose to hide your email address, in which case we
receive only Apple’s private relay address.
Platyko is deliberately built without the data collection common in mobile apps. The app contains:
We do not sell personal data, and we do not share personal data with third parties for marketing or advertising purposes.
You can use Platyko without creating an account. In Guest Mode:
Platyko is designed to be safe for young learners, and our children’s privacy model is simple: children can use the app, but we never collect their data.
If you are a parent or guardian and believe a child under 13 has created an account, please contact us at platyko.js@gmail.com and we will delete the account and its data promptly.
We use the information described above solely to operate the app:
We do not use your data for advertising, profiling, or automated decision-making, and we do not sell it.
If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Creating and operating your account; saving learning progress; delivering the app’s core features | Performance of a contract (Art. 6(1)(b)) |
| Sending push notifications | Consent (Art. 6(1)(a)) — you opt in via iOS and can withdraw at any time |
| Securing accounts (hashed passwords, hashed one-time codes) | Legitimate interests (Art. 6(1)(f)) — keeping the service secure |
| Responding to legal requests and privacy-rights requests | Legal obligation (Art. 6(1)(c)) |
We use a small number of service providers (data processors) to run Platyko. They process data only on our behalf and only for the purposes below — never for their own marketing.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Application servers; email delivery (SES); avatar storage (S3) | All account and learning data; email address; avatar images | United States (us-east-1) |
| Google Sign-In authentication | Email address and basic profile via identity token | Global | |
| Apple | Sign in with Apple authentication | Email address (or private relay address) via identity token | Global |
| Expo & Apple Push Notification service | Delivering push notifications | Device push tokens; notification content | United States / Global |
Google and Apple act under their own privacy policies when you authenticate with them: Google Privacy Policy, Apple Privacy Policy.
Our servers are hosted on AWS in the United States (us-east-1 region). If you use Platyko from outside the United States — including from the European Economic Area, the United Kingdom, or Israel — your personal data is transferred to and stored in the United States.
For transfers from the EEA and UK, we rely on AWS’s Data Processing Addendum, which incorporates the European Commission’s Standard Contractual Clauses, as the safeguard for these transfers. AWS also participates in the EU–U.S. Data Privacy Framework.
| Data | Retained |
|---|---|
| Account, profile, and learning data | Until you delete your account |
| Email verification & password-reset codes (hashed) | Automatically deleted after 10 minutes |
| Residual copies in server backups | Purged within 30 days of account deletion |
| Guest Mode progress | Only on your device; removed when you delete the app |
You can delete your account directly in the app: Settings → Delete Account. Deletion is immediate and permanent — your account, profile, avatar, learning progress, streaks, duel history, puzzle results, and push tokens are erased from our production systems right away, and any residual copies in encrypted backups are purged within 30 days.
You can also request deletion by emailing platyko.js@gmail.com from the address associated with your account.
We take reasonable technical and organizational measures to protect your data:
No method of transmission or storage is 100% secure, but we design the app to hold the minimum data necessary — the best protection for data we don’t need is not to collect it at all.
Wherever you are, you can exercise the rights below by emailing platyko.js@gmail.com. We will verify your request (normally by confirming control of the account email) and respond within 30 days.
All of the rights above apply. You also have the right to lodge a complaint with your local supervisory authority if you believe our processing violates the GDPR.
California residents have the right to know, access, correct, and delete personal information, and the right to non-discrimination for exercising these rights. Platyko does not “sell” or “share” personal information as those terms are defined in the CCPA/CPRA, and does not use or disclose sensitive personal information beyond what is necessary to provide the service.
Under the Israeli Privacy Protection Law, you have the right to review data held about you in our database and to request correction or deletion of inaccurate data. You may also submit a complaint to the Israeli Privacy Protection Authority.
Push notifications are strictly opt-in: the app only sends them if you grant permission through iOS. We use them for things like streak reminders and duel updates — never for advertising.
You can turn notifications off at any time in the app’s settings or in iOS Settings → Notifications → Platyko. When you delete your account, your push tokens are deleted with it.
We send transactional emails only, delivered via AWS SES:
We do not send marketing, promotional, or newsletter emails, so there is nothing to unsubscribe from.
platyko.com is a static website. It sets no cookies, runs no analytics, and includes no trackers or third-party scripts. Visiting this page sends us no personal information.
We may update this policy as the app evolves or as legal requirements change. When we do, we will update the “Last updated” date at the top of this page. For material changes — anything that meaningfully affects what data we collect or how we use it — we will also notify registered users in the app or by email before the change takes effect.
Questions, concerns, or requests about your privacy? Contact: