This policy explains what data we collect when you sign in with Google, how PayPal subscription payments are handled, and which controls you have over your information at Andres Aprendes.
1. Controller & contact
Andres Aprendes (operated by Andrés Villarreal) controls the personal data processed on andresaprendes.com.
Questions about privacy can be sent to bookings@andresaprendes.com or through the WhatsApp link displayed on the site.
2. Data we collect
Google sign-in details such as your name, email, and profile photo to authenticate you securely.
Contact details and learning preferences you add to your profile or booking forms.
PayPal transaction metadata (transaction ID, payment status) used to confirm subscriptions.
Technical logs (IP, device, pages visited) collected by hosting and analytics tools to keep the platform secure.
3. How we use data & legal basis
Provide the service, schedule lessons, and maintain your account (contract performance).
Process recurring payments and send transactional emails about your subscription (contract performance).
Improve the learning experience, fight fraud, and protect infrastructure (legitimate interest).
Send optional educational or promotional updates (consent, which you can withdraw anytime).
4. Cookies and tracking
We use strictly necessary cookies to remember your session and secure logins.
First-party analytics help us understand product usage. We do not sell this data or allow behavioral advertising.
You can manage cookies in your browser, though disabling them may break Google login.
5. Third-party processors
Google (OAuth and Workspace) for authentication and email.
PayPal to run non-refundable subscription payments.
Hosting and monitoring providers such as Vercel that store the app in US-based infrastructure.
Each vendor signs data-processing agreements and only accesses what is necessary to deliver the service.
6. Retention
We keep your data while your account or subscription is active.
Payment records may be stored for up to 10 years to meet tax and accounting obligations, even after cancellation.
7. Your rights
Request access, correction, portability, or deletion of your data by emailing bookings@andresaprendes.com.
If you live in the EU/EEA, UK, or Latin America you may also object or request restriction when we rely on legitimate interests.
We respond within 30 days and you can escalate to your local data-protection authority if needed.
8. Minors
The service is meant for users 16+ only. If we learn we collected data from a child, we delete it immediately—please notify us if you suspect this.
9. International transfers
By using the platform you agree that your information may be hosted in the United States or other countries with Standard Contractual Clauses to keep protections equivalent.
10. Updates to this policy
We post the latest version here and email you if changes materially affect your rights.
Continuing to use the service after updates means you accept the current version.
