Aplikant Privacy Policy
Version 1.1 — 16 October 2026
In brief: No Aplikant account is required. Progress, answers, statistics and settings are stored on your device. Apple or Google handles payments. Store, other-app catalogue, website and email connections involve the corresponding technical or correspondence data.
1. Controller and scope
The controller for personal data processed by the operator of Aplikant is ADAKS MEDIA DANIEL DOBROWOLSKI, operated by Daniel Dobrowolski, Mściszów 112B, 59-800 Lubań, Poland, Polish tax ID (NIP) 6152062671. For privacy matters and data-subject requests, contact adaks.media@gmail.com.
This policy covers Aplikant for iOS and Android. It describes local data and data that may be received by the operator, its service providers, app stores or websites you open. It does not constitute consent to processing.
2. Study data and settings on your device
No Aplikant account is required. The app stores answers, “I do not remember / I remember / Difficult” ratings, revision progress, saved questions, statistics, ongoing and completed exam sessions, their results, remaining time and question versions needed to restore a session locally. It also stores appearance and reminder settings, whether the introduction has been shown, and an auxiliary cache of the other-app catalogue.
The operator does not receive this study data during normal app operation and does not operate its own cross-device progress synchronisation. You may disclose data yourself when sending a support request. Operating-system backups may include app data according to your settings and the rules of Apple, Google or another backup service you use.
3. Purchases and access verification
The app uses Apple App Store or Google Play mechanisms for an annual subscription and a one-time lifetime-access purchase, where that product is offered in your store. The store handles payment, trial eligibility, renewal, cancellation and refunds. The operator does not receive full payment-card details.
The app processes the information needed to verify access: product and transaction identifiers or a purchase token, purchase status, verification data and, for subscriptions, validity and offer information. It may retain a local identifier for a confirmed transaction; that local record alone does not replace store confirmation of access. Apple and Google may provide the operator with transaction, settlement and diagnostic reports within their services.
4. Reminders, permissions and content protection
Daily reminders are optional. The selected time and enabled status are stored locally, and the operating system schedules notifications. You can disable them in the app and system settings. The operator does not operate a push server for these reminders. Their content may appear on the lock screen and accessories according to your settings.
Aplikant’s own features do not require access to the camera, microphone, contacts, messages or precise location. Technical restrictions on screenshots and screen recording do not mean that the app records or sends images of your screen to the operator. Notification permission is not consent to marketing or unrelated processing.
5. Internet connections, no advertising-network SDK, and contact
- Purchases, access restoration and system rating prompts use Apple or Google services.
- When you open “Our other apps”, Aplikant may retrieve a catalogue from dobrysoftware.com/api/apps. The request includes the platform, catalogue language and an instruction to exclude Aplikant from the list. Icons may be retrieved from addresses supplied by the catalogue. These requests do not include answers or study history.
- Opening an official document, privacy policy, terms, support website or store connects you to that external service. Its recipient may receive your IP address, request time, requested resource and technical headers.
- Aplikant has no first-party behavioural analytics SDK or advertising-network SDK. The operator’s other-app catalogue is informational and promotional. Operating systems, stores and external websites may perform their own diagnostics or other processing under their policies.
- Correspondence and complaints may include your contact address, message, voluntary attachments and information needed to handle the matter. Do not send passwords, full card details or unnecessary data about other people.
6. Purposes and legal bases
For personal data that the operator actually processes, GDPR legal bases are:
- performance of a contract or steps taken at your request before entering into a contract — providing ordered features, handling access and contract-related requests (Article 6(1)(b));
- compliance with a legal obligation — legally required settlements, records and consumer-rights handling (Article 6(1)(c));
- legitimate interests in service security, preventing abuse, responding to non-contractual enquiries and establishing, exercising or defending legal claims (Article 6(1)(f)). A separate legitimate interest is providing information about and promoting our own apps through a catalogue the user voluntarily opens: for this purpose we handle catalogue and icon requests involving an IP address and technical headers. We do not use these data to create a behavioural profile;
- separate consent only where a specific optional processing activity requiring consent is proposed (Article 6(1)(a)). Buying, opening the app or accepting this policy is not such consent.
Data kept solely on your device does not become accessible to the operator merely because it is stored locally. Providers independently determining processing purposes have their own legal bases and information duties.
7. Recipients, hosting, email and international transfers
Depending on the feature used, recipients may include Contabo for hosting, Google for email and Google Play services, Apple for App Store services, necessary technical-support and accounting providers, and legally authorised authorities. Only data necessary for the relevant purpose is disclosed. Stores and services selected by the user may act as independent controllers.
Email and store services may involve processing outside the European Economic Area, including in the USA. Google describes reliance on adequacy decisions, including the EU–US framework within its applicable scope, and standard contractual clauses for transfers covered by them. Apple describes standard contractual clauses for transfers of data from the EEA. This does not mean that the operator has personally entered into every such instrument or that all services operate solely within the EEA. Information on safeguards and how to obtain copies: Google — data transfers, Apple — privacy; for the operator’s processing, use the contact address in this Policy.
8. Retention and deletion
- Local data — until the relevant data is deleted in the app or system; some auxiliary data is periodically tidied during app operation. Clearing progress may cover only the stated scope and need not delete settings or purchase information.
- Correspondence and complaints — retention is determined by the time needed to handle the enquiry and conclude the complaint procedure. After the matter is closed, further retention may serve a specific legal duty or the establishment, exercise or defence of claims, within the applicable limitation periods.
- Accounting records — for the period required by applicable legal obligations.
- Hosting and server logs — retention is determined by the time necessary for service security and proper operation and for detecting and investigating incidents. Further retention requires a separate justification linked to a specific incident or legal duty. Data isolated for a particular incident may be needed to investigate it or protect legal claims.
- Store data and system backups — under those services’ rules and your choices. Deleting the app does not instruct email services, stores or existing backups to delete their records.
9. Your rights
Subject to the GDPR’s conditions and exceptions, you have rights of access, rectification, erasure, restriction and data portability where automated processing is based on consent or a contract. You may object to legitimate-interest processing on grounds relating to your particular situation, and to direct marketing at any time. Consent can be withdrawn without affecting the lawfulness of earlier processing. Statutory conditions and exceptions apply, including for legal duties and claims.
For data actually held by the operator, use the contact address in this Policy. We may request proportionate information needed to verify identity. We provide information on action taken in response to a request without undue delay, generally within one month of receipt. Where necessary, this may be extended by a further two months due to the complexity or number of requests; we explain any extension and its reasons within the initial month.
The operator cannot remotely access or erase data remaining solely on your device. App and system tools let you manage that data; this does not replace rights concerning data held by the operator. You may lodge a complaint with the President of the Polish Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, uodo.gov.pl, or another competent supervisory authority.
10. Optional data, minors and automated decisions
Providing data in correspondence is voluntary but may be necessary to handle your request. A purchase requires the information and confirmations necessary for store processing and access verification. Refusing reminder permission disables only that feature. Aplikant is intended for preparation for legal entrance examinations and is not directed at children; a minor must have legal capacity for the transaction or appropriate participation by a legal representative.
The operator does not make solely automated decisions producing legal or similarly significant effects for users. Question randomisation, statistics and local revision scheduling are educational features, not decisions on professional qualifications.
11. Website and policy changes
This policy describes the app. The website on which it is published may generate logs and use its own technologies; its actual configuration requires separate information, and technologies requiring consent cannot rely on merely opening this policy. This static document contains no analytics scripts or externally hosted fonts.
We update this policy when processing changes. Material changes will be communicated through an appropriate channel before implementation, and any necessary consent will be requested separately. Continued use does not substitute for required consent.
ADAKS MEDIA DANIEL DOBROWOLSKI, operated by Daniel Dobrowolski, Mściszów 112B, 59-800 Lubań, Poland, Polish tax ID (NIP) 6152062671
Hosting, contact and technical data
The dobrysoftware.com website, including its legal-document pages, app catalogue and version-check services, uses hosting provided by Contabo GmbH. We process and store technical connection data on this infrastructure, such as IP addresses, request times, requested resources, User-Agent and other technical headers, as well as data voluntarily submitted through the website’s forms. Technical data may be recorded in logs used to operate, diagnose and secure the services. Hosting does not mean that data described as remaining solely on the device is automatically uploaded.
The Contabo hosting server serving dobrysoftware.com is located within the European Union. This Policy describes processing by other providers, including any transfers outside the European Economic Area.
Contact and support: we process your email address, message, voluntary attachments and information necessary to deal with the matter. Email is handled by Google through Gmail; website-form submissions may also be stored on the Contabo server. Do not send passwords, full payment details or unnecessary information about other people.
Legal bases for data actually processed by the operator: performance of a contract or pre-contractual steps — providing purchased access and related support; compliance with a legal obligation — required accounting and consumer-rights handling; legitimate interests — service security, diagnostics, other correspondence and establishing, exercising or defending claims. These correspond to Article 6(1)(b), (c) and (f) GDPR. Where a specific optional activity relies on consent, Article 6(1)(a) GDPR applies. Correspondence data is voluntary but may be needed to handle your request. Technical data is necessary to handle a connection. A device’s system permission is not general consent to unrelated processing.
Retention of operator-held data
Technical data and server logs are retained for the time necessary to operate services, detect and investigate incidents and diagnose problems. The criteria are the nature and date of an event, the time needed to identify a problem, the risk of repeated abuse and specific legal duties. Further retention of data isolated for a particular incident requires a reason related to investigating it or protecting legal claims.
Correspondence and support requests are retained while the matter is handled and afterwards only as needed to comply with a legal duty or protect claims within the applicable limitation period. Accounting records are subject to statutory retention duties. Store, email-service and system-backup data is also subject to the relevant providers’ rules. Removing the app does not automatically erase correspondence, website submissions or store records.
Language versions
The Polish and English versions are intended to reflect the same rules. A discrepancy in translation does not limit any rights arising under mandatory applicable law.
In the event of a discrepancy in interpretation, the Polish version prevails, subject to mandatory applicable law, including consumer protection.