Privacy Policy

This policy explains how Sava Labs Ltd (UK) ("we", "us"), operator of Klartest at testlebenindeutschland.com, processes your personal data. Contact: [email protected].

1. Data we process

• Account data: your email address, chosen language, and account settings.
• Usage data: practice exam attempts, answers, scores, and timing — used to show your progress and statistics.
• Purchase data: plan, amount, and payment status. Card details are processed by our payment provider (Stripe) and never stored by us.
• Technical data: cookies and similar technologies for login sessions and — only with your consent — analytics and marketing measurement.
• Visitor number and sign-up record: when you first visit, we store a random visitor number in a cookie. It holds no personal details. It lasts 24 hours, or one year if you accept analytics. When you create an account, we save that number in your account, together with how you reached us (the campaign or website you came from and the first page you opened). We do this whether or not you accept analytics.
• Visit log and recordings (only with your consent to analytics): in our own system we keep a log of the pages you open and the buttons you press, with your visitor number, the page address, your language, a few small details about the action and the time. When you sign in, we link your visitor number to your account. We also record sessions and heat maps (where you move the pointer, click and scroll), marked with your visitor number and, after you sign in, your account number. A completed purchase is also reported to the analytics service from our side.
• Ad measurement (only with your consent to marketing): ad click identifiers from the link you came through stay in your browser for up to 90 days. We report sign-ups and purchases from our side to advertising services.

2. Purposes and legal bases (GDPR)

• Providing the Service, including accounts, practice exams, and progress statistics — contract performance (Art. 6(1)(b) GDPR).
• Payment processing and record-keeping — contract performance and legal obligation (Art. 6(1)(b), (c)).
• Analytics and marketing cookies, the visit log and the recordings: consent (Art. 6(1)(a)), which you can withdraw at any time in your account settings.
• Marketing emails — consent, revocable at any time.

3. Processors and transfers

We use the following categories of providers: hosting and email providers with servers in Germany and the EU (where account, usage, and purchase data are stored), our payment provider Stripe for payment processing, and, only with your consent, analytics and marketing services (the individual providers are listed in the consent banner). Data processing agreements under Art. 28 GDPR are in place with our processors. Where providers process data outside the EU/EEA, transfers rely on adequacy decisions or standard contractual clauses.

4. Retention

Account and progress data are kept while your account exists. Purchase records are retained as required by tax and accounting law. The log of page views and clicks is deleted after 13 months. The link between your visitor number and your account is deleted when your account is deleted. You can request deletion of your account at any time.

5. Your rights

You have the right to access, rectify, delete, and export your data, to restrict or object to processing, and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority — in Germany, your local Landesdatenschutzbehörde.

6. Cookies

Strictly necessary cookies (login session, consent state) are always active. We also set a cookie with a random visitor number (see section 1); without your consent it lasts 24 hours. Analytics and marketing cookies are set only after you opt in via the consent banner and can be changed later under account settings.

7. Changes

We will update this policy as the Service evolves and announce material changes on the site.