This notice explains which personal data 22Academy collects, why, and what your rights are. 22Academy is a label of Future Prep Ltd, which is the controller of your data.
Who we are
Future Prep Ltd, 25 Chayka Complex, Entrance A, Apartment 2, Varna 9000, Bulgaria. Company number (UIC) 208497759. For anything about your data, email info@22academy.com.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Your email address and password. The password is stored in hashed form; we cannot read it. | To give you an account and let you log in. | Contract |
| The certification you chose, the hours a day you can study and your exam date, if you enter one. | To build your study plan and your estimate. | Contract |
| Your study record: answers, scores, confidence ratings, flagged questions, progress, study time and trial exam sittings. | To run the course, show your results and adapt what you practise. | Contract |
| Your plan: which course, which period, whether it is active, and your trial exam credits. | To give you access to what you paid for. | Contract |
| Service emails: confirmation of your account or plan, a failed payment, a cancellation, a trial exam offer and a warning before your progress is removed. | To keep you informed about your account. | Contract |
| Reminder emails if you stop halfway. | To help you pick up your study again. | Your consent. You give it with a tick at registration and withdraw it on your account page. |
| A guarantee claim: your email and the exam result you send us. | To assess the claim. We delete the result once the claim is decided. | Contract |
| A scrambled form of your IP address, kept for one hour at registration, and the server’s access log. | To stop abuse and keep the site secure. | Legitimate interest |
We do not ask for your name, address or date of birth. We do not use your data for advertising and we do not sell it.
Payments
Payments are handled by Paddle (Paddle.com Market Ltd, United Kingdom). Paddle is the seller of record: it takes your payment, calculates tax and issues your receipt. Your card details go to Paddle and never reach us. Paddle tells us that a payment was made and what the status of your plan is, so we can open or close your access. Paddle’s own privacy notice applies to the data it holds.
AI explanations
The extra explanations in a course are written by an AI model from Mistral AI, a company in France. The request contains our own course material. It does not contain your name, your email address or your answers. You can switch the AI explanations off inside the course.
Who else handles your data
- Our hosting provider, which runs the server in the European Union.
- Paddle, for payments, as described above.
- Mistral AI, for the AI explanations, as described above.
- Bunny, which plays the course videos. Its player sets no cookies and receives no data that identifies you.
We share your data with no one else, unless the law requires it.
Outside the European Union
Paddle is established in the United Kingdom, which the European Commission has recognised as offering an adequate level of protection. Our other providers handle your data within the European Union.
How long we keep it
- Your account and study record: for as long as you have a plan, and for one year after your last paid period, so you can come back. We warn you by email a week before the progress is removed.
- Payment records: Paddle keeps them for as long as tax law requires.
- A guarantee claim: until it is decided.
You can delete your account at any time from your account page. Your personal data is then removed and your study record is made anonymous. A certificate you earned can still be verified, without your name.
Your rights
You have the right to see your data, to have it corrected or deleted, to receive a copy of it, to restrict or object to its use, and to withdraw consent. Your account page lets you download your account details and scores and delete your account. For anything else, email info@22academy.com and we answer within a month.
We make no decisions about you by automated means that have a legal or similarly significant effect.
If you believe we handle your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection, or to the supervisory authority in your own country.
Cookies
See our cookie policy.
Age
22Academy is meant for professionals. It is not intended for anyone under 16.
Changes
If we change this notice in a way that matters to you, we tell you by email or on your account page. This version is from October 2026.