Last updated: March 8, 2026
The data controller is Immerly sp. z o.o., ul. Księdza Duszy 5c/18, 47-303 Krapkowice, Poland, KRS: 0001227845, NIP: 1990135885, REGON: 544209345. You can reach us at hello@immerlyxr.com.
Account data: When you register, we collect your name, email address, and password. For school accounts, we also collect organization name and contact information.
Usage data: We collect information about how you use the Platform, including lessons viewed, homework submitted, scores, learning path progress, and login timestamps.
Student data: Teachers invite students and may provide student names and email addresses. Students generate usage data through homework submissions and learning activity.
Payment data: Payment processing is handled by third-party providers (e.g. Stripe). We do not store full credit card numbers. We retain transaction records including amounts and dates.
Technical data: We automatically collect IP addresses, browser type, device information, and cookies necessary for Platform operation.
We use your data to:
— Provide and maintain the Platform and its features
— Process subscriptions and payments
— Generate progress reports, analytics, and homework scores
— Communicate with you about your account, updates, and support
— Improve the Platform based on usage patterns
— Comply with legal obligations
We process your data based on the following legal grounds:
— Contract performance: Processing necessary to provide the Service you subscribed to (Art. 6(1)(b) GDPR)
— Legitimate interest: Platform improvement, security, and fraud prevention (Art. 6(1)(f) GDPR)
— Legal obligation: Tax and accounting requirements (Art. 6(1)(c) GDPR)
— Consent: Marketing communications, where applicable (Art. 6(1)(a) GDPR)
We do not sell your personal data. We share data only with:
— Infrastructure providers: Vercel (hosting), Supabase (database), for Platform operation
— Payment processors: Stripe, for subscription billing
— Email services: Resend, for transactional emails (invitations, notifications)
— AI providers: Anthropic, for lesson generation features (no student personal data is shared)
— Legal authorities: When required by law
We retain your account data for as long as your account is active. After account deletion or subscription cancellation, we retain data for 30 days to allow recovery, then permanently delete it.
Financial records are retained for the period required by Polish tax law (currently 5 years from the end of the tax year).
Under the GDPR, you have the right to:
— Access your personal data
— Rectify inaccurate data
— Erase your data ("right to be forgotten")
— Restrict processing
— Data portability — receive your data in a structured format
— Object to processing based on legitimate interest
— Withdraw consent at any time for consent-based processing
To exercise any of these rights, contact us at hello@immerlyxr.com. We will respond within 30 days.
The Platform is not intended for direct use by children under 16. Students under 16 may only use the Platform when invited by a teacher who has obtained appropriate parental or guardian consent.
Teachers are responsible for ensuring compliance with applicable child data protection laws in their jurisdiction when inviting minor students.
We use essential cookies required for Platform operation (authentication, session management). We do not use advertising or tracking cookies. Analytics cookies, if used, are anonymized and used solely for Platform improvement.
Your data may be processed by service providers located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure authentication, role-based access control, and regular security reviews.
We may update this Privacy Policy periodically. Changes will be communicated via email or in-app notification at least 14 days before taking effect.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Immerly sp. z o.o.
ul. Księdza Duszy 5c/18
47-303 Krapkowice, Poland
KRS: 0001227845 · NIP: 1990135885 · REGON: 544209345
Email: hello@immerlyxr.com