Privacy Policy

The controller responsible for your personal data is Remans Oy (business ID 3608693-4), a Finnish company, registered address c/o Mohammad Mushfiqur Remans, Arkkitehdinkatu 5 D 12, 33720 Tampere, Finland. You can reach us and our website at https://remansoy.com.

For any questions about this policy or your personal data, or to exercise your rights, contact us at m.r.remans@gmail.com.

Taxi Akatemia is an independent preparation service. It is not affiliated with, endorsed by, or connected to Traficom, Ajovarma, or any Finnish authority. Practice and mock questions are study material only and are not official exam questions.

Account data: your name, email address, and hashed password.

Profile and study preferences: your primary, support, and exam languages, target exam date, daily study goal, and accessibility settings.

Learning activity: practice sessions and answers, mock-exam attempts and scores, progress and mastery, bookmarks, and notes.

Technical and security data: hashed device and session identifiers, an approximate country derived from your IP address, and credential-sharing signals.

Subscription and payment metadata, such as your subscription status and Stripe identifiers. We never store full card numbers.

Email preference and delivery data: your subscription-offer consent choice, when and where it was recorded or withdrawn, suppression status, and delivery status for messages sent to you.

In-app recommendation data: which learning recommendation was shown, selected, or dismissed, its location in the service, and checkout attribution when you choose an access offer.

Feedback data: your star rating and written feedback, and any name, profile image, official-exam section scores, exam date, and separate publication choices you voluntarily provide.

We process your data to provide the service, manage your account, and deliver the learning features you request. This includes using your learning activity and access status to show relevant in-app study and access recommendations, which you may dismiss. Legal basis: performance of our contract with you.

We process technical and security data to keep the service secure and to prevent fraud and credential sharing, and we use aggregated activity to improve the service. Legal basis: our legitimate interests.

We retain accounting and tax records as required by law. Legal basis: legal obligation.

We send subscription upgrade, extension, or reactivation offers only after you explicitly opt in. You can withdraw this consent at any time in Settings or through the unsubscribe link in every offer. Service, security, and billing messages are not marketing and remain available independently. Legal basis for offer emails: consent.

We use private feedback to improve the service on the basis of our legitimate interests. When you submit feedback through the testimonial form, your rating, written feedback, and any display name you provide may be published in Learner feedback. A profile image or official-exam result is published only when you separately choose it. You can ask us to remove published feedback at any time by contacting us.

Payments are processed by Stripe, a third-party PCI-DSS compliant payment processor. When you pay, your card details are provided directly to Stripe and are handled under Stripe's own terms and privacy policy.

We never store your full card number. We store only your subscription status and the identifiers Stripe returns to us, which we use to manage your access and our billing records.

We use an essential authentication cookie that holds your session token so you can stay signed in, and a language-preference cookie (NEXT_LOCALE) that remembers your chosen language.

We store your appearance settings in your browser's localStorage.

We use Google Analytics Consent Mode v2 to measure how the website is used. Before consent, or if you decline, analytics storage remains denied, no analytics cookies are set, and Google receives only cookieless consent and measurement signals. After you accept, analytics storage is granted. Advertising storage, advertising user data, and personalisation always remain denied.

We do not sell your personal data. We share it only with service providers who process data on our behalf under written agreements: cloud hosting (Vercel), database hosting (Neon), Resend for transactional and consent-based email delivery, Google Analytics for consent-based usage analytics, and Stripe for payments.

Some of these providers may process data outside the EU or EEA, for example in the United States. Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We may also disclose data where required by law or to protect our legal rights.

We keep your account and learning data while your account is active and for a reasonable period after closure. Accounting records are retained for the period required by Finnish law (Kirjanpitolaki).

We keep evidence of an email consent or withdrawal and suppression records as necessary to demonstrate and respect your choice. Campaign delivery records are retained only for operational, security, and compliance purposes.

Feedback, optional images and exam results are retained while needed for moderation, service improvement, or publication. Rejected material is not shown publicly, and account deletion or a valid erasure request removes learner-linked feedback and stored images.

We apply appropriate technical and organisational security measures, including password hashing, hashed device and session identifiers, and access controls, to protect your data against unauthorised access, loss, or misuse.

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at m.r.remans@gmail.com. We will respond within the time limits set by law.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu, tietosuoja.fi).

The service is intended for people preparing for the Finnish taxi-driver exam and is not directed at children under 16. We do not knowingly collect personal data from children under 16.

We may update this Privacy Policy from time to time, for example to reflect changes in our service or in the law. We will publish the updated version at https://remansoy.com and, where the changes are significant, we will notify you by appropriate means.

We encourage you to review this policy periodically to stay informed about how we protect your personal data.