Skip to content

Privacy Policy

Last updated: February 2026

1. Data Controller

VWUPass is operated by Emir Takhaviev, based in Vienna, Austria. For data protection inquiries, contact us via Instagram: @vwupass

2. Data We Collect

We collect the following data:

Account data (registered users only)

  • Name and email address (from your Google account)
  • Google account identifier

Usage data

  • Problem-solving progress and statistics
  • Exam practice history
  • Feature usage patterns

Technical data

  • Browser type and version
  • Device information
  • IP address (server logs)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds (GDPR Art. 6):

  • Contract performance — to provide the service you signed up for, including progress tracking and subscription management
  • Legitimate interest — to improve our service, prevent abuse, and ensure security
  • Consent — for optional analytics and marketing communications (you can withdraw consent at any time)

4. Data Storage

Your data is stored on Amazon Web Services (AWS) servers in the EU (eu-central-1, Frankfurt). We implement appropriate technical and organizational measures to protect your data.

5. Third-Party Services

We use the following third-party services:

  • Google OAuth (via AWS Cognito) — for authentication
  • AWS (Amazon Web Services) — for hosting, database, and infrastructure
  • Payment processor — for subscription payments (we do not store payment card details)

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access — request a copy of your personal data
  • Right to rectification — correct inaccurate data
  • Right to erasure — request deletion of your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interest
  • Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us via Instagram: @vwupass

7. Cookies

We use essential cookies required for authentication and session management. These cookies are strictly necessary for the service to function and do not require consent. We do not use tracking or advertising cookies.

8. Data Retention

We retain your account data and progress for as long as your account is active. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The latest version is always available on this page.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).