Datenschutzerklärung

This notice explains how personal data is handled when you use the guide website and the learning app of Viapunt, under the Swiss Federal Act on Data Protection as revised (revFADP).

1. Controller

1.1 The controller is Swiss Science Tutors GmbH, 5200 Brugg, Switzerland. Contact for privacy matters: info@viapunt.ch.

2. What we collect

2.1 When you sign up and use the app we store:

• your email address, and when you confirmed it;
• your interface language and your study language;
• your canton (which canton’s test you study);
• your confirmation that you are 16 or older (not your date of birth), and which terms you accepted and when;
• your progress: answers you gave, mock tests, which questions you have understood, your review schedule, optional comments when you report a faulty question, and your conversations with the “Explain this” assistant and the help chat;
• payment status: which pass you hold and for how long, and a link to your customer record at Stripe;
• security data: sessions and sign-in links (stored as hashes), when you last signed in, a password hash if you set a password, and two-factor data for administrators (encrypted).

2.2 When you pay, Stripe collects your payment details. We receive confirmation, amount and dates, not your card number. Payment event data from Stripe is stored without your name or address.

2.3 Like any web server, ours processes your IP address and technical request data to deliver pages and protect against abuse. Server logs are kept only as long as needed for operation and security.

3. What we never collect

3.1 We do not ask for or store your nationality, permit type, date of birth, address, phone number or anything about your application.

3.2 The residence-years calculator runs only in your browser. What you enter is not sent to us or stored.

4. Purposes and legal bases

4.1 We process data for these purposes:

Purpose	Data	Basis
Provide your account, sign-in and study service	Email, languages, canton, progress	Performance of the contract
Take payment, give access, handle refunds	Payment status, Stripe references	Performance of the contract
Keep accounting records	Payment records	Legal obligation
Security, abuse prevention, support	Security data, server logs	Our legitimate interest in a safe service
Answer your questions in “Explain this” and the help chat	Question text and your typed question	Performance of the contract; your request
Improve content quality	Reports you send	Our legitimate interest

4.2 We do not sell your data and do not use it for advertising or profiling. We do not send marketing emails.

5. Who receives data (processors)

5.1 Hosting: Infomaniak, Switzerland. Our servers and backups are in Switzerland.

5.2 Payments: Stripe. Stripe processes payment details and may process data outside Switzerland. See Stripe’s privacy notice.

5.3 AI assistant: our AI provider, Anthropic. When you use “Explain this” or the help chat (in the app or on the guide site), the text of the question and what you type are sent to our AI provider, which processes them outside Switzerland. We do not send your name, your email address or other account details. Please do not type personal details into the assistant.

5.4 Email: Swizzonic. It delivers sign-in links and account emails and so handles your email address and the message.

5.5 We disclose data to authorities only when the law requires it.

5.6 Where data goes to a country without an adequate level of protection, we rely on safeguards such as standard contractual clauses.

6. Cookies and tracking

6.1 We use only two cookies, both needed to run the service and both set only in the app (app.viapunt.ch): viapunt_session keeps you signed in (14 days, renewed while you use the app) and viapunt_csrf protects forms against forged requests (kept for 30 days). They are not used for tracking. The guide site (viapunt.ch) sets no cookies.

6.2 Your browser also keeps a few settings on your own device, which are not sent to us: your interface language and study view, where you are in the free practice questions, and, on the guide site, the help chat conversation for as long as the browser tab is open.

6.3 We use no advertising or tracking cookies and no third-party trackers, so no consent banner is needed.

6.4 Fonts are hosted on our own servers, so visiting our pages does not send your IP address to a font provider.

6.5 When you pay, you are taken to Stripe’s payment page. Stripe sets its own cookies there, for example to prevent fraud; see Stripe’s privacy notice. We do not load Stripe on our own pages.

6.6 We count visits to viapunt.ch and to the app with Umami, which we host ourselves on our server in Switzerland. It sets no cookies, does not store your IP address and cannot identify you. It records the pages visited, the website you came from, the type of device and browser, the country, and a few steps such as starting the free practice or opening the checkout. If your browser sends “Do Not Track”, nothing is counted.

7. How long we keep data

7.1 Account and progress data are kept while your account exists. Sessions last 14 days (rolling). Sign-in links expire after 15 minutes (confirmation links after 24 hours, password reset links after 30 minutes) and are purged a day after expiry.

7.2 You can delete your account yourself on the Account page. You confirm with your password or a fresh sign-in link. We then delete your account, sessions, progress, conversations, reports and access records, and email you a confirmation.

7.3 We keep after deletion:

• Payment records (product, canton, amount, currency, dates, Stripe references) for ten years, as Swiss bookkeeping law requires (Code of Obligations, art. 958f). Your account link is removed; we keep only a keyed hash of your email so that we can find a payment if you ask about it.
• AI cost records (tokens, cost, model, time), without any identifier or content.
• Payment event records from Stripe, reduced to an event reference and type once they name you.
• Admin audit entries, without your identity, and one entry recording that your account was deleted.
• Stripe’s own records, which Stripe keeps under its own legal duties. You may ask us to have your Stripe customer deleted.
• Backups, which expire within 30 days. Deletion is complete when the last backup holding your data has expired.

8. Security

8.1 Pages and data travel encrypted (HTTPS). Passwords are stored only as strong one-way hashes. Sign-in links and session tokens are stored only as hashes; links work once and expire quickly.

8.2 Administrator accounts need two-factor authentication, and its secrets are stored encrypted. Access is limited to what is needed. Nightly backups are kept.

8.3 We limit sign-in attempts and link requests to resist abuse. If a breach is likely to harm you, we notify you and the FDPIC as the law requires.

9. Your rights

9.1 You may ask for access to your data, correction, deletion, restriction, a copy in a common format, and you may object to processing based on our legitimate interest.

9.2 You can do much of this yourself in the app. For the rest write to info@viapunt.ch from the address on your account. We may ask you to confirm your identity and aim to answer within 30 days.

9.3 You may complain to the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.

10. Changes

10.1 We may update this notice. The date shows the current version, and we will tell account holders about material changes.

11. Contact

Email: info@viapunt.ch. Postal address: see the imprint.