Privacy Notice

Who we are

Too Easy is operated by Benjamin B ("we," "us," or "our"). We act as the data controller for the personal data collected through the Too Easy website and services.

What personal data we collect

• Account data: name, email address, password hash, profile avatar, and account preferences.
• Usage data: quizzes completed, flashcards studied, XP earned, streaks, badges, subjects selected, and feature interactions.
• Device & log data: IP address, browser type, device type, operating system, and approximate location derived from IP.
• Support data: messages, feedback, and attachments you send to customer support.
• Payment data: Whop processes payments and subscriptions directly; we never see or store your full card number on our servers.

Why we collect it

• To create and manage your account and provide the learning service.
• To track progress, generate streaks, award XP, and personalize your experience.
• To maintain security, prevent fraud, and enforce our Terms of Service.
• To respond to support requests and improve our product.
• To send service-related emails and, where permitted, marketing updates.

Legal basis for processing

We process personal data on the basis of: (1) performance of a contract with you, (2) our legitimate interests in operating and improving the service, (3) your consent where required, and (4) compliance with legal obligations.

Who we share data with

We share personal data only with trusted recipients:

• Service providers: hosting, analytics, email delivery, and customer support tooling.
• Payment partner: Whop processes payments, subscriptions, and receipts on our behalf.
• Professional advisers: legal and accounting professionals when necessary.
• Authorities: when required by law or to protect our rights.

International transfers

Some service providers may process data outside the country where you live. When this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. After account deletion, we remove or anonymize data within 30 days, except where we must retain it for legal, security, or fraud-prevention purposes.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. To exercise these rights, contact us at the email below. We aim to respond within one month.

Security

We use encryption in transit (TLS/SSL), access controls, and regular security reviews to protect your data. No online service is completely secure, and we cannot guarantee absolute security.

Cookies and similar technologies

We use essential cookies to keep you signed in and maintain your session. We may use analytics cookies to understand how the service is used. You can manage cookie preferences through your browser settings.

Children

Too Easy is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If we learn that we have collected personal data from a child under 13 without appropriate consent, we will delete that data promptly. If you believe a child under 13 has created an account, contact us at TooEasyAi1@gmail.com so we can remove it.

Contact us

If you have questions about this Privacy Notice or your data, contact Benjamin B at TooEasyAi1@gmail.com.