Privacy Notice

1. Data controller

The data controller for My 'oa'oa planner is Laetitia Atuahiva. If you have any questions about this notice or your data, please contact us at oaoaenglishresources@outlook.com.

2. What personal data we collect

We collect the following categories of personal data:

• Account data: email address, name, and authentication information when you sign in with email or Google.
• Content data: lesson plans, sequences, resources, media files, and any text or images you upload or create.
• Usage data: log data, device identifiers, IP address, browser type, and interaction data used for security and product improvement.
• Support data: messages and correspondence sent to customer support.
• Payment data: transactions and subscription status are processed by Paddle. We do not store full payment card details.

3. How we use your data

We use personal data for the following purposes:

• creating and managing your account and providing the service;
• hosting, displaying, and organizing your lesson content and resources;
• processing payments, subscriptions, and billing through Paddle;
• ensuring security, fraud prevention, and service stability;
• responding to support requests and communicating service updates;
• improving the application based on aggregated usage patterns.

4. Legal basis for processing

We process personal data on the basis of: (a) contract performance — to provide the service you signed up for; (b) legitimate interests — for security, fraud prevention, and service improvement; (c) legal obligation — where required by law; and (d) consent — where you have explicitly agreed, for example to marketing communications.

5. Who we share data with

We share personal data only with trusted recipients where necessary to operate the service:

• Paddle: our Merchant of Record for the sale of products, subscription management, payments, tax compliance, and invoicing.
• Service providers: hosting, analytics, and customer support tooling (e.g., Lovable Cloud / Supabase for backend hosting and storage).
• Professional advisers: legal and accounting professionals when required.
• Authorities: when required by law or to protect our rights.

6. International transfers

Some of our service providers may process data outside the European Economic Area. When this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to ensure your data remains protected.

7. Data retention

We keep your account data and content for as long as your account is active. You may delete your content or account at any time. When data is no longer needed, we delete or anonymize it, except where we are required to retain it by law.

8. Your rights

Under the GDPR and applicable French data protection law, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data in certain circumstances;
• restrict or object to processing in certain circumstances;
• receive your data in a portable format;
• withdraw consent at any time where processing is based on consent.

We will respond to requests within one month. If you are not satisfied with our response, you have the right to complain to the French supervisory authority (CNIL).

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and regular security reviews. However, no online service can be completely secure, and we cannot guarantee absolute security.

10. Cookies and analytics

We use essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how the application is used. You can manage cookie preferences through your browser settings.

11. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page with the last updated date.

12. Contact

For privacy-related questions or to exercise your rights, please contact oaoaenglishresources@outlook.com.