YOUR DATA
PRIVACY POLICY
01 Controller and contact
The controller of personal data processed through all-ears.tv ("we", "us", "our") is Przemysław Skwarczyński, a sole trader registered in Poland and entered in the Central Registration and Information on Economic Activity (CEIDG).
- Address: Wólczyńska 63, apt. 278, 01-931 Warsaw, Poland
- Privacy contact: one@thetime.pl
We have not appointed a Data Protection Officer. You may contact us directly at the email address above about privacy or your personal data.
02 Scope of this Policy
This Policy explains how we process personal data when you use all-ears.tv, create an account, use an embedded YouTube player, or choose optional analytics cookies. It should be read together with our Terms and Conditions.
The Service is designed for users aged 7 and over. The rules for children are explained in section 8.
03 Data we process
| Data | When we process it | Purpose |
|---|---|---|
| Email address, password hash, technical username, and native-language selection | When you register with an email address | To create, secure, and operate your account and set your default translation language. The username is a technical identifier only and is not displayed to other users. |
| Google account identifier and basic profile information, such as name and email address | When you choose Continue with Google | To create and authenticate your account without a separate password. |
| Login and session data | When you sign in and use an account | To keep your account session secure and signed in. |
| Your answer to the "heard well" self-assessment | When a signed-in user answers on a line | To save and show your private learning progress for that line. |
| Last page or line viewed | In local browser storage | To resume where you left off. For Guests, we do not receive or store this data on our servers. |
| Analytics data, including pages visited, approximate location inferred from IP address, device and browser type, and time on page | Only after you choose analytics cookies | To understand use of the Service and improve it. |
| Technical data processed by YouTube, such as device, browser, IP-address-related, and cookie data | When you use an embedded YouTube player | To display the video through YouTube. Google processes this data under its own privacy terms. |
| Your voice recording | Only when you choose the pronunciation feature | The recording is processed locally in your browser. It is not uploaded to or stored on our servers. |
We do not offer paid features in this version of the Service and do not collect payment-card information.
04 Legal bases for processing
We process data on the following bases:
- Performance of a contract (Article 6(1)(b) GDPR): creating and operating an account, authenticating you, and saving your private learning progress.
- Your consent (Article 6(1)(a) GDPR): analytics cookies and other non-essential cookies or similar technologies. You can withdraw consent at any time through the cookie controls without affecting processing before withdrawal.
- Our legitimate interests (Article 6(1)(f) GDPR): securing the Service, preventing fraud and abuse, maintaining technical logs, and defending or establishing legal claims. We balance these interests against your rights and use only data necessary for those purposes.
- Legal obligations (Article 6(1)(c) GDPR): where we must comply with an applicable legal requirement, for example a lawful request from a competent authority.
You do not have to create an account to use Browse View or LAZY mode. However, an email address and password or Google Sign-In are necessary if you choose to create an account.
06 Recipients and international transfers
We share data only where necessary to provide and operate the Service. Recipients may include:
- Google: for Google Sign-In, Google Analytics if you consent, and YouTube embedded playback;
- hosting, infrastructure, data-storage, and transactional-email providers that process data on our documented instructions to host the Service and send account-related messages; and
- competent authorities or professional advisers where disclosure is required by law or reasonably necessary to protect our rights.
Google may process data outside the European Economic Area, including in the United States. Where personal data is transferred to a Google entity in the United States, the transfer may rely on the EU-US Data Privacy Framework for certified entities and, where applicable, other lawful transfer safeguards. You can obtain further information about the applicable safeguards by emailing one@thetime.pl.
We do not sell personal data or disclose it to advertisers.
07 Retention
We retain account data while your account is active. When you ask us to delete an account, we delete or anonymise the account data within 30 days, except where longer retention is required by law or reasonably necessary to establish, exercise, or defend legal claims.
Google Analytics user-level and event-level data is retained for two months under our configured Google Analytics setting. Aggregate reports may be retained by Google as described in its documentation.
Local-storage data, such as the last viewed line, remains in your browser until you clear browser data. For Guests, we do not store it on our servers.
08 Children
The Service is designed for users aged 7 and over. Users aged 7 to 15 may use Browse View and LAZY mode without an account. Users under 16 must not create or use an all-ears.tv account, including through Google Sign-In.
Optional analytics cookies are available only to users aged 16 or over. A parent or guardian should decide whether embedded YouTube content and related cookie choices are appropriate for a child. Parents or guardians may contact us at one@thetime.pl with privacy questions or concerns about a child's use of the Service.
We do not knowingly use children's personal data for advertising, profiling, or sale.
09 Your rights
If the GDPR applies to you, you may have the right to:
- ask for access to your personal data;
- request correction of inaccurate data;
- request erasure of data, subject to legal exceptions;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive data you provided to us in a portable format where the right applies;
- withdraw consent at any time; and
- complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or to another competent supervisory authority.
To exercise a right, email one@thetime.pl. We normally respond within one month and will tell you if the GDPR permits a longer response period.
We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.
10 Security
We use reasonable technical and organisational measures designed to protect personal data, including encrypted connections and password hashing. No system is completely secure. If we become aware of a personal-data breach, we will take the steps and provide notifications required by applicable law.
11 Changes to this Policy
We may update this Policy where reasonably necessary because of changes in law, security, the Service, or our processing activities. We will post the revised Policy with a new effective date and provide a prominent notice of material changes. Where required by law, we will provide additional notice or ask for consent before a new processing activity begins.
12 Contact
For questions, requests, or concerns about privacy, contact:
Przemysław SkwarczyńskiWólczyńska 63, apt. 278
01-931 Warsaw, Poland
one@thetime.pl