Last updated: October 1, 2026
The data controller is Immerly sp. z o.o., ul. Księdza Duszy 5c/18, 47-303 Krapkowice, Poland, KRS: 0001227845, NIP: 1990135885, REGON: 544209345. You can reach us at hello@immerlyxr.com.
Account data: When you register, we collect your name, email address, and password. For school accounts, we also collect organization name and contact information.
Usage data: We collect information about how you use the Platform, including lessons viewed, homework submitted, scores, learning path progress, and login timestamps.
Student data: Teachers invite students and may provide student names and email addresses. Students generate usage data through homework submissions and learning activity.
Payment data: Payment processing is handled by third-party providers (e.g. Stripe). We do not store full credit card numbers. We retain transaction records including amounts and dates.
Technical data: We automatically collect IP addresses, browser type, device information, and cookies necessary for Platform operation.
We use your data to:
— Provide and maintain the Platform and its features
— Process subscriptions and payments
— Generate progress reports, analytics, and homework scores
— Communicate with you about your account, updates, and support
— Improve the Platform based on usage patterns
— Keep the Platform secure and prevent abuse, such as one person opening multiple accounts or free trials (using the IP addresses and a random browser identifier recorded at registration and sign-in, and whether the browser used to register is already signed in to another account). A registration that matches an earlier account this way may be created without a free trial; contact us if you believe that is a mistake
— Comply with legal obligations
We process your data based on the following legal grounds:
— Contract performance: Processing necessary to provide the Service you subscribed to (Art. 6(1)(b) GDPR)
— Legitimate interest: Platform improvement, security, and fraud prevention (Art. 6(1)(f) GDPR)
— Legal obligation: Tax and accounting requirements (Art. 6(1)(c) GDPR)
— Consent: Marketing communications, where applicable (Art. 6(1)(a) GDPR)
We do not sell your personal data. We share data only with:
— Infrastructure providers: Vercel (hosting), Supabase (database), for Platform operation
— Payment processors: Stripe, for subscription billing
— Email services: Resend, for transactional emails (invitations, notifications)
— AI providers: Anthropic, for lesson generation features (no student personal data is shared)
— Legal authorities: When required by law
We retain your account data for as long as your account is active. After account deletion or subscription cancellation, we retain data for 30 days to allow recovery, then permanently delete it.
IP addresses and browser identifiers recorded at registration and sign-in for security and abuse prevention are kept for 90 days from when they were last seen, including after the account is deleted, and are then permanently deleted. The same applies to the record of a registration that was matched to an earlier account and to the record of browsers signed out by the device limit.
Financial records are retained for the period required by Polish tax law (currently 5 years from the end of the tax year).
Under the GDPR, you have the right to:
— Access your personal data
— Rectify inaccurate data
— Erase your data ("right to be forgotten")
— Restrict processing
— Data portability — receive your data in a structured format
— Object to processing based on legitimate interest
— Withdraw consent at any time for consent-based processing
To exercise any of these rights, contact us at hello@immerlyxr.com. We will respond within 30 days.
The Platform is not intended for direct use by children under 16. Students under 16 may only use the Platform when invited by a teacher who has obtained appropriate parental or guardian consent.
Teachers are responsible for ensuring compliance with applicable child data protection laws in their jurisdiction when inviting minor students.
We use essential cookies required for Platform operation (authentication, session management) and a security cookie holding a random browser identifier, used only to detect one person opening several accounts or free trials and to limit how many browsers can use one teacher account at the same time. We do not use advertising or tracking cookies. Analytics cookies, if used, are anonymized and used solely for Platform improvement.
Your data may be processed by service providers located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure authentication, role-based access control, and regular security reviews.
We may update this Privacy Policy periodically. Changes will be communicated via email or in-app notification at least 14 days before taking effect.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Immerly sp. z o.o.
ul. Księdza Duszy 5c/18
47-303 Krapkowice, Poland
KRS: 0001227845 · NIP: 1990135885 · REGON: 544209345
Email: hello@immerlyxr.com