Your practice is personal.

What we collect

• Account details: your name, email address and securely hashed password. If you choose Google, we receive your name, email address and profile image.
• Practice data: your answers, writing, scores, feedback and progress.
• Basic technical data: security and error logs, plus anonymous usage data such as pages viewed, referrers, browser, operating system, device type and approximate country.

How we use it

We use this information to create and authenticate your account, deliver practice tests, grade your work, show your progress, understand how TestYoga is used, improve it, keep it secure and reliable, and answer support requests.

We process account and practice data to provide the service you ask for. We rely on legitimate interests to secure and improve TestYoga. Where the law requires consent, we ask first.

Signing in with Google

If you choose Continue with Google, Google gives us only the basic profile information needed to create your account or sign you in. We do not request access to Google Drive, Gmail or your contacts. We do not sell Google user data or use it for advertising.

AI and service providers

Hetzner hosts TestYoga and its database in Germany. Some features use OpenAI to generate or grade test content and ElevenLabs to generate listening audio. When you request AI grading or feedback, the text needed to answer that request may be sent to the AI provider. We share only what is needed to provide each feature.

Scores and AI feedback are study aids. They are not official exam results or decisions with legal or similarly significant effects.

Some providers may process information outside the European Economic Area. When they do, we rely on appropriate legal safeguards.

Subscriptions and billing data

For paid Pro subscriptions, Stripe Managed Payments acts as merchant of record through Link. We share your account email and an internal account reference to connect your purchase to TestYoga. Stripe collects the payment, billing and transaction information needed for checkout, tax, fraud prevention, receipts and purchase support. We do not receive or store your full card number or security code.

We retain customer and subscription references, payment status, access dates, invitation redemptions and the version and time of your terms acceptance to provide your plan, prevent duplicate charges and handle support. We use these records to perform our agreement, meet applicable legal obligations and protect the service against fraud. Billing records may need to be retained after account closure for legal obligations or disputes, only for as long as necessary.

Compas7 Innovaciones SL controls TestYoga account and learning data. Stripe independently controls information it processes for its merchant-of-record and Link services under its own privacy policy. Closing your TestYoga account and deleting your Link data are separate requests; contact us about TestYoga data and Link about purchase data. Deleting Managed Payments purchase data can cancel the associated subscription.

Stripe privacy policy Link purchase and subscription support

How long we keep it

We keep your account and practice data while your account is open. If you ask us to delete your account, we delete or anonymise it unless limited retention is needed for security or legal obligations. Analytics data is kept only while it remains useful for understanding and improving the service. Operational logs and backups are kept only as long as needed for security and recovery.

Cookies and analytics

We use storage for sign-in, security, language choice and temporary placement results. Self-hosted Umami measures visits and key actions such as completing a test. Session cookies and browser session storage coordinate events and avoid duplicate counts. After sign-in, analytics uses your internal account ID, not your email address or name. We do not send answers, recordings, question text or generated feedback to analytics. IP and browser information are used to associate events with a session. Query strings and URL fragments are excluded, and we respect your browser’s Do Not Track setting. We do not use advertising cookies or cross-site tracking.

Your choices

Depending on where you live, you may ask to access, correct, export or delete your information, or to restrict or object to certain uses. You may also withdraw consent and complain to your local data protection authority.