This policy explains what data we collect when you sign in with Google, how PayPal subscription payments are handled, and which controls you have over your information at Andres Aprendes.
1. Controller & contact
Andres Aprendes (operated by Andrés Villarreal) controls the personal data processed on andresaprendes.com.
Questions about privacy can be sent to bookings@andresaprendes.com or through the WhatsApp link displayed on the site.
2. Data we collect
Google sign-in details such as your name, email, and profile photo to authenticate you securely.
Contact details and learning preferences you add to your profile or booking forms.
For family/kids placement: parent/guardian contact details plus learner names, ages, level notes, and goals you provide.
PayPal transaction metadata (transaction ID, payment status) used to confirm subscriptions and one-time placement payments.
First-party marketing attribution (UTM parameters and ad click IDs) stored to understand which campaigns led to bookings. We do not sell this data.
Technical logs (IP, device, pages visited) collected by hosting tools to keep the platform secure.
3. How we use data & legal basis
Provide the service, schedule lessons, and maintain your account (contract performance).
Process recurring and one-time payments and send transactional emails (contract performance).
Improve the learning experience, fight fraud, and protect infrastructure (legitimate interest).
Measure campaign effectiveness with first-party attribution only (legitimate interest / consent where required).
Send optional educational or promotional updates (consent, which you can withdraw anytime).
4. Cookies and tracking
We use strictly necessary cookies to remember your session and secure logins.
First-party analytics and attribution help us understand product usage and marketing performance. We do not sell this data or run third-party behavioral advertising pixels on the site.
You can manage cookies in your browser, though disabling them may break Google login.
5. Third-party processors
Google (OAuth and Workspace) for authentication and email.
PayPal to run subscription and one-time placement payments.
Hosting and monitoring providers such as Vercel that store the app in US-based infrastructure.
Each vendor signs data-processing agreements and only accesses what is necessary to deliver the service.
6. Retention
We keep your data while your account or subscription is active.
Payment records may be stored for up to 10 years to meet tax and accounting obligations, even after cancellation.
Placement and learner profile data is kept while needed to deliver classes and for a reasonable period afterward for support and records.
7. Your rights
Request access, correction, portability, or deletion of your data by emailing bookings@andresaprendes.com.
If you live in the EU/EEA, UK, or Latin America you may also object or request restriction when we rely on legitimate interests.
We respond within 30 days and you can escalate to your local data-protection authority if needed.
8. Minors & guardian accounts
Account holders and payers must be 16+ (or the age of digital consent in your country).
Children and teens under 16 may participate in lessons only through a parent/guardian account with the guardian’s consent. Marketing is directed to parents/adults, not to children.
Guardians are responsible for the accuracy of learner information they submit (name, age, level notes, goals).
If we learn we collected a child’s personal data without appropriate guardian consent, we delete it—please notify bookings@andresaprendes.com.
9. International transfers
By using the platform you agree that your information may be hosted in the United States or other countries with Standard Contractual Clauses to keep protections equivalent.
10. Updates to this policy
We post the latest version here and email you if changes materially affect your rights.
Continuing to use the service after updates means you accept the current version.
