Privacy Policy
Last updated 9 September 2026
This explains what YKI Prep collects about you, why, and what you can do about it. It is written to be read, not to be impressive.
Who is responsible for your data
YKI Prep is operated by Youssef Belhaj Amor, a private individual based in Finland. For anything in this policy, including requests about your own data, write to support@ykiprep.com.
What we collect
Only what the service needs to work:
- Your account. Your email address and name. If you sign in with Google, also your Google profile picture. If you register with a password, we store a bcrypt hash of it — never the password itself.
- What you write. Your answers to writing tasks and exams, in full, along with the feedback generated for them.
- Your practice history. Which exercises you completed, your answers and results, XP, streak, and how many exercises you have done today.
- Payment references. If you buy access, we store your Stripe customer and payment identifiers, which tier you bought and when it expires. We never see or store your card details — those are entered on Stripe's own checkout page and stay with Stripe.
We do not use analytics, advertising or tracking cookies, and we do not build a profile of you for any purpose other than showing you your own progress.
Your writing is sent to an AI provider
This is the part worth reading twice. When you submit a writing task or an exam, the text you wrote is sent to Anthropic, which generates the assessment and corrections you see. The same applies to generating reading and listening exercises, though those contain nothing personal.
Anthropic processes that text to return a response. Please avoid putting sensitive personal information — identity numbers, health details, anyone else's private information — into practice answers. Write about ordinary everyday topics, as the real exam asks you to.
Why we are allowed to hold it
- To provide what you signed up for (performance of a contract): your account, your exercises, your feedback, your purchase.
- To keep the service working and fair (legitimate interest): counting daily usage so free limits work, and keeping server logs to diagnose faults.
- To meet legal obligations: keeping records of purchases for the periods accounting law requires.
Who else sees it
We do not sell your data and we do not share it for advertising. It reaches these providers only so the service can function:
Vercel
Hosting and delivery of the website
Receives: IP address and standard server request logs
MongoDB Atlas
Database where your account and practice history are stored
Receives: Account details, practice history, payment references
Anthropic
Generates exercises and assesses your written answers
Receives: The text you write in writing tasks and exams, plus the task it answers
Stripe
Payment processing
Receives: Email address and payment details you enter on Stripe's own checkout page
Sign-in, only if you choose to sign in with Google
Receives: Your name, email address and profile picture
Some of these providers are based outside the EU or process data there. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
How long we keep it
- Your account and practice history: until you ask us to delete it. Your history is the point of the product — it is how progress is shown — so we keep it while your account exists.
- Purchase records: for as long as accounting law requires, even after account deletion.
- Server logs: a short period, as retained by our hosting provider.
Cookies
We use cookies that are strictly necessary to keep you signed in and to protect sign-in forms against cross-site request forgery. That is all. There are no analytics or advertising cookies, which is why you are not being asked to click through a consent banner.
Your rights
Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it, give you a copy in a portable form, or restrict or object to how we use it. Write to support@ykiprep.com and we will respond within one month.
If you think we have handled your data badly, you are entitled to complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
Children
YKI Prep is intended for adults preparing for the YKI test and is not directed at children.
Changes
If this policy changes in a way that affects you, the date at the top will change and material changes will be signposted in the service.