← Back to home

Privacy Policy

Last updated: February 2026

Table of Contents

1. Controller

Emanuel Schmacher
Email: support@learny.page

Full contact details can be found in our Legal Notice.

2. Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing:

Types of data processed

Purposes of processing

3. Legal Basis

Below you will find an overview of the GDPR legal bases on which we process personal data:

Legal basis Description
Consent (Art. 6(1)(a) GDPR) The data subject has given their consent.
Performance of contract (Art. 6(1)(b) GDPR) Necessary for the performance of a contract or pre-contractual measures.
Legitimate interests (Art. 6(1)(f) GDPR) Processing is necessary for the purposes of legitimate interests.

4. Security Measures

We take appropriate technical and organizational measures in accordance with legal requirements and the state of the art to ensure a level of protection appropriate to the risk.

Our security measures include:

5. Types of Data Processed in Detail

When using Typr, we process:

Data type Purpose Storage period
Email Address Account creation, login, communication Until account deletion
Username/display name Identification in the system, leaderboards Until account deletion
Password (hashed) Authentication Until account deletion
Learning progress Storage of training progress Until account deletion
Game data (points, coins) Gamification system Until account deletion
IP address Security, abuse prevention 7 days (server logs)
Friendship data Social networking, friends list Until removal of friendship or account deletion
Classroom membership Teacher-student assignment Until leaving the classroom or account deletion
Teacher assignment Assignment of teacher-created accounts to the creating teacher Until account deletion
Daily activity and streak Gamification, progress tracking Until account deletion
Tournament participation Competition results Until account deletion
Teacher request Verification and account activation 90 days after processing

6. Registration and Login

Users can create a user account. During registration, the required mandatory information is communicated to users and processed for the purpose of providing the user account based on contractual obligation.

Self-registration

Required information for registration:
  • Email Address
  • Password

The processed data includes: display name, email address, password (stored encrypted), avatar selection and learning progress.

Teacher-created accounts

Teachers can create student accounts without an email address (see Section 11). In this case, a username and random password are generated. Login is exclusively via username and password.

7. Cookies and Storage Technologies

We use cookies and similar storage technologies to ensure the functionality of our website and to save your preferences.

Necessary cookies

These cookies are required for the operation of the website:

Functional cookies

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) for necessary cookies; consent for all others.

8. Hosting and Server

Our website is hosted on servers in the European Union. With each access, server log files are automatically created containing the following data:

This data is stored for security reasons for a maximum of 7 days and then automatically deleted.

9. Payment Service Provider

For processing payments for Pro subscriptions, we use the payment service provider Mollie B.V.

Provider

Mollie B.V.
Keizersgracht 126
1015 CW Amsterdam, Netherlands
www.mollie.com

Transmitted data

During payment transactions, the following data is transmitted to Mollie:

Purpose of processing

Data transmission is solely for the purpose of payment processing and is required for the performance of the contract (Art. 6(1)(b) GDPR).

Storage period

Payment data is stored for the duration of the statutory retention periods (usually 7 years for tax-relevant documents).

Further information

Further information on data protection at Mollie can be found at:
https://www.mollie.com/de/privacy

10. Social Features and Friends List

Typr offers social features that allow users to connect with other users.

Friends list

Users can send friend requests to other users and accept or decline them. The following data is processed as part of the friends list feature:

Duels and challenges

Users can challenge friends to typing duels. Game results (WPM/keystrokes per minute, accuracy) are shared with the duel partner. Participation in duels is voluntary.

Tournaments

When participating in tournaments, display name, avatar and game results are shown to all tournament participants.

Legal basis: Consent (Art. 6(1)(a) GDPR). The use of social features is voluntary. Friendships can be removed at any time, requests can be declined.

11. Classroom Feature for Teachers

Typr offers a classroom feature that allows teachers to track their students' learning progress.

Processed data

Teacher-created student accounts

When student accounts are created by the teacher, the following data is processed:

No email address is collected for these accounts. Login is exclusively via username and password.

Data separation between students

Students in the same classroom do not have access to other students' data. Only the teacher can view the performance data of all students in the classroom. There is no mutual visibility of student data within the classroom.

Data export

Teachers can export class data as a CSV file. The export contains only display names and performance data (WPM/keystrokes per minute, accuracy, level). No personal contact data (email addresses, dates of birth) is exported.

Legal basis: Consent (Art. 6(1)(a) GDPR). Joining a classroom is voluntary by entering the invitation code. For teacher-created accounts, the teacher is responsible for obtaining required consents. Students can leave the classroom at any time.

Note for schools: When Typr is used in a school context, students or their parents/guardians should be informed about the use. The teacher is responsible for complying with the data protection requirements of their educational institution. A Data Processing Agreement (DPA) according to Art. 28 GDPR is provided upon request.

12. Email Notifications

Registered users can receive optional email notifications on the following topics:

All email notifications are enabled by default and can be individually disabled at any time in the account settings.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) for service-related notifications. The user can object at any time.

13. Teacher Registration and Requests

Teachers can create a user account directly through the registration form on the “For Teachers” page. At the same time, a request to activate teacher status is submitted, which is manually reviewed.

Processed data

Purpose of processing

During registration, a user account with “Student” status is created. A confirmation email is sent to verify the email address. The school and role information is used for manual review and activation of teacher status by the operator.

Storage period

Account data is stored permanently as long as the user account exists. Request data (school, role, message) is stored until processing and deleted no later than 90 days after activation or rejection.

Legal basis: Performance of contract (Art. 6(1)(b) GDPR) for account creation; consent (Art. 6(1)(a) GDPR) for the teacher activation request.

14. Special Notes for Children and Young People

Child protection is our highest priority!

Typr is designed for children aged 9 and above. We only collect the minimum necessary data and deliberately refrain from:

The platform-internal friends list feature is limited to mutual requests. No contact data (email) is shared between users. Only the display name and avatar are visible to other users.

Consent by parents/guardians

For children under 16 years (under 14 in Austria), we recommend that registration is done together with a parent/guardian. Consent to data processing is considered given when registration is done with the consent of a parent/guardian.

15. Rights of Data Subjects

As a data subject, you have various rights under the GDPR:

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you.

Right to erasure (Art. 17 GDPR)

You have the right to request the erasure of personal data concerning you ("right to be forgotten").

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to object (Art. 21 GDPR)

You have the right to object to the processing at any time for reasons arising from your particular situation.

Right to complain

You have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority:
Barichgasse 40-42, 1030 Wien
www.dsb.gv.at

16. Deletion of Data

The data we process is deleted as soon as it is no longer required for its processing purposes and there are no statutory retention obligations preventing deletion.

How to delete your data:

  1. Log in to your account
  2. Go to "Settings"
  3. Click on "Delete account"
  4. Confirm the deletion

Alternatively, you can contact us by email and request the deletion of your account.

17. Changes to this Privacy Policy

We reserve the right to update this privacy policy to ensure it always meets current legal requirements or to implement changes to our services.

The current version can always be found on this page. In case of significant changes, registered users will be informed by email.