Posso Grade Booster – Privacy Policy
1. Controller
Digination Oy (business ID 1548182-0)
Vironkatu 12, 00170 Helsinki, Finland
Email: info@posso.mobi
2. What we process
Posso is built to collect as little as possible. We never ask for your name, age or school. Your email address is used only if you sign in with email, and it is not stored.
| Data | Source | Purpose |
|---|---|---|
| The user identifier given by Apple or Google (a random string that shows neither your name nor your email) | Sign in with Apple or Sign in with Google | Recognising your account and syncing your data between your devices |
| Your email address, if you sign in with email | You | Sending the sign-in code. The address is not stored: only a one-way hash of it is kept to recognise your account, and the address cannot be recovered from it. We send nothing to the address but the codes you ask for. |
| Photos of study material you scan | You | Making the quiz. The photos are deleted as soon as the quiz is ready or making it fails. |
| Quizzes: questions, answers and the facts taken from the material | Made by AI from the photos | Playing and revising on all your devices |
| Answers you type | You | Checking answers and giving feedback. The same answer is not checked twice. |
| Play data: points, streaks, how well each question is known, test dates | Using the app | Following your progress and reminders |
| Purchases and subscriptions: Apple's or Google Play's purchase identifiers, plan and validity | Apple or Google | Managing quotas and purchases. We never see payment details. |
| Usage: scanned pages, answer checks and their cost | Using the app | Quotas, preventing misuse and following the cost of the service |
| A sign-in key for your device | The app | Keeping you signed in |
Do not scan or type sensitive or private information (for example health information, personal identity numbers, contact details or other people's data). Photos and answers are processed outside the EU, see section 4.
Reminders are scheduled on your phone; no data is sent to our server for them.
3. Legal basis
We process the data to provide the service you have chosen to use (contract). Following usage and preventing misuse are based on our legitimate interest in keeping the service working and affordable.
Children: a guardian must approve the use of the service by a user under 13. Users under 13 can't use Sign in with Apple, so they sign in with email, for example with a guardian's address. Purchases are approved by the guardian with Apple's Ask to Buy, or on Android with Google Family Link.
4. Who receives data
We do not sell data or use it for advertising. We use the following service providers, who process data only on our behalf:
- Amazon Web Services (server, EU – Stockholm): all data on our server. Sign-in codes are sent with Amazon SES (EU – Ireland).
- Anthropic (Claude AI, United States): scanned photos and typed answers, to make quizzes and check answers. Anthropic does not use data sent through its API to train its models. The transfer outside the EU is based on the European Commission's standard contractual clauses.
- Apple: sign-in and purchases, under Apple's own terms.
- Google: sign-in (Sign in with Google) and purchases in Google Play, under Google's own terms.
5. Retention and deletion
- Scanned photos are deleted as soon as the quiz is ready.
- A deleted quiz goes to Deleted quizzes, where you can restore it or delete it for good.
- Deleting your account: in Settings, or by email if you can't get into the app (instructions: posso.mobi/delete-account). The deletion takes effect after 24 hours and can be cancelled until then. All account data is then deleted: quizzes, answers, play data, purchase data and sign-in keys. Only the monthly usage (pages and checks) remains, tied to one-way hashes of the sign-in identifiers (Apple or Google identifier or email address) from which they cannot be recovered. This prevents recycling free quotas by deleting and recreating an account.
- Sign-in codes are valid for 10 minutes, and their records are deleted within a day.
- Server logs are deleted automatically within 14 days.
6. Your rights
You have the right to know what data about you we process, to have it corrected, to have it deleted (delete your account in the app) and to object to processing. Contact: info@posso.mobi. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
7. Changes
We will tell you about significant changes in the app. This policy was updated on 28 October 2026.