Privacy Policy

1. Information We Collect

2. How We Collect Information

We collect information in three ways:

• Directly: When you create an account, purchase courses, or contact us.
• Automatically: Through cookies, logs, and pixels.
• From third-party sources: Integration partners (e.g., payment providers, analytics tools, community platforms).

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and manage our educational services and platform
• To process payments and manage your account
• To personalize your learning experience
• To communicate with you regarding courses, updates, and support
• To send marketing and promotional messages (where legally permitted)
• To analyze usage data and improve our services
• To comply with legal obligations

4. Legal Basis for Processing (EEA/UK/SM Users)

We process your data on the following legal grounds:

• Contract: Processing necessary to provide the course you purchased
• Consent: For optional marketing emails and tracking (Meta Pixel, GA4)
• Legitimate interests: To improve services and prevent fraud
• Legal obligation: When required to comply with laws

5. Data Sharing and Disclosure

We may share your information with service providers (hosting, payment processors, community platforms, analytics providers), legal authorities if required by law, or in connection with business transactions such as reorganization, merger, or sale. We do not sell your personal data.

6. Data Retention

We retain your data only as long as necessary for the purposes described in this Privacy Policy or as required by law. You may request deletion of your data at any time (see “Your Rights”).

7. Data Security

We implement appropriate technical and organizational measures, including encryption in transit and at rest, access controls and authentication, and regular assessments and monitoring. While we take security seriously, no method of transmission is 100% secure.

8. International Data Transfers

Your personal data is primarily stored and processed on servers in the European Union (Helsinki). Data collected by Google (GA4) and Meta Pixel may be transferred outside the EU, including to the United States, relying on safeguards such as Standard Contractual Clauses or other lawful mechanisms.

9. Your Rights

You may exercise the following rights under GDPR and San Marino law:

• Access: Obtain a copy of your data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit processing under certain conditions
• Portability: Request transfer of your data to another provider
• Objection: Object to processing (including marketing)
• Withdraw consent: At any time, where processing is based on consent

Requests can be submitted to christian@yourfirstaiapp.com. We will respond within the legally required timeframe.

10. Marketing Communications

• You may unsubscribe from marketing emails by following the link in the email or contacting us.
• Even if you opt out of marketing, we may still send essential service communications.

11. Children’s Privacy

Our platform is not directed to children under 16 years old. We do not knowingly collect personal data from children under 16. If you believe we may have done so, contact us immediately.

12. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for their practices and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “Effective Date.” Continued use of the platform constitutes acceptance of changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at christian@yourfirstaiapp.com or visit YourFirstAiApp.com. We are based in San Marino.