Privacy policy

Last updated: 15 October 2026

At ADEP we take your data seriously. Here we explain, in plain words, what data we keep, why, for how long and what you can do about it.

Who is responsible

• Controller: ADEP, Africa Development Education Projects.
• Tax ID (NIF): G19836238.
• Address: Carrer de Leiva 41–43, 08014 Barcelona (Spain).
• Contact: contact@adepoficial.org

What data we keep and why

Your account

You need an account to use the typing classroom and ADEP Aprende.

• Email account: your email, the display name you choose, your language, your country and your confirmation that you are 14 or older. Your password is never stored: we only keep an encrypted fingerprint that cannot be turned back into the password.
• Code account (ADEP classrooms): the username and group that ADEP gives you, your language and, if ADEP adds it, your display name. We do not ask for an email. The code is not stored either: only its encrypted fingerprint.

We also keep when the account was created and the last time you signed in, so that we can delete accounts that are no longer used.

Legal basis: providing the service you ask for when you create the account (Article 6(1)(b) GDPR).

Your progress

The lessons you have done, your best typing scores and the topics you have completed in ADEP Aprende. This way you don't lose them when you change device.

Legal basis: providing the service (Article 6(1)(b) GDPR).

The ADEP Aprende assistant

The assistant is not active yet. Before we turn it on, we will update this policy to say which company provides the artificial intelligence model and what safeguards apply when your questions are sent to it. Once it is active, ADEP will not keep the text of your questions: we will only count how many you ask each day to apply the daily limit. Do not type personal data, passwords or bank details into the assistant.

Legal basis: providing the service (Article 6(1)(b) GDPR).

The newsletter

If you subscribe to the newsletter, we keep the email address where you receive it (your account email or, for code accounts, the one you add), your language and your country. As proof of your consent we also keep when you asked for it, when you confirmed it from the link in the email, the IP address you confirmed it from and the version of the text you accepted. The newsletter is not being sent yet. Before we start, we will update this policy to say which company sends it.

Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time from “My account” or with the unsubscribe link in any issue.

Invitation to donors

If you ticked the box to receive news when you donated, we send you a single email inviting you to create an account and receive the newsletter. We keep your email and the date it was sent so that we never send it twice.

Legal basis: our legitimate interest in telling people who have already supported us, and asked to hear from us, about our activities (Article 6(1)(f) GDPR). We only write to you once, and you can object by writing to contact@adepoficial.org.

Security

To protect accounts against abuse (for example, someone trying many passwords), we keep the IP address and time of sign-in, registration and password-reset attempts for 30 days.

Legal basis: our legitimate interest in protecting the service and your data (Article 6(1)(f) GDPR).

Donations

If you make a donation, we keep your name, your email, the amount, the date and the result of the payment. The payment is processed by the bank through Redsys: ADEP never sees or stores your card details.

Legal basis: carrying out the donation (Article 6(1)(b) GDPR) and our legal accounting and tax obligations (Article 6(1)(c) GDPR).

How long we keep data

• Accounts that are not activated: deleted after 7 days.
• Accounts: while you use them. If you don't sign in for 24 months, we delete the account and all your progress. If your account has an email, we warn you one month before.
• Sign-in, registration and reset attempts (with the IP address): 30 days.
• Sessions: they end when you close the browser or after 2 hours without activity.
• Activation and reset links: 24 hours and 1 hour.
• Daily count of questions to the assistant: deleted the next day.
• Newsletter: while you are subscribed. Requests that are not confirmed are deleted after 30 days. After you unsubscribe, we keep the proof of consent for 3 years in case we have to show it.
• Donor invitations: 3 years, only so that the invitation is never sent twice.
• Donations: 6 years, the accounting and tax retention period required by law.

Who else processes your data

Only companies that provide us with a service and follow our instructions (processors):

• Hostinger (Hostinger International Ltd., Cyprus, European Union): website hosting, database and sending the account emails. The servers are in the European Union.
• Redsys and the bank (donations only).

We do not sell your data or use it for advertising.

Cookies and storage in your browser

We only use technical cookies that the account needs to work, so we do not ask for consent with a cookie banner:

• adep_s: keeps your session open. It is deleted when you close the browser.
• adep_csrf: protects forms against forged submissions. It is deleted when you close the browser.
• adep_a: session for ADEP's administration dashboard (ADEP staff only).

The apps also store in your browser your preferences (language, theme, keyboard) and, so that you can sign in offline for 3 days, an encrypted check of your password or code (never the password itself) and any progress waiting to be uploaded. You can delete it with “Sign out and forget this device”.

We do not use third-party cookies or analytics tools.

Children

You must be 14 or older to create an account. Code accounts are created by ADEP for the students in its classrooms, and ADEP checks their age when creating them.

Your rights

At any time you can ask to:

• access your data and take it with you (portability): from “My account”, with “Download my data”;
• correct it: from “My account”, or by writing to us;
• delete it: from “My account”, with “Delete my account”, or by writing to us;
• restrict or object to the processing;
• withdraw your consent to the newsletter at any time, without affecting what was sent before.

For any of these, write to contact@adepoficial.org from your account email, or ask your teacher for help if you have a code account. We will answer within one month at the latest.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Changes to this policy

If we change anything important, we will publish it here and, if it affects your account, we will let you know.