Privacy

Last updated 23 October 2026. Questions: kepthouse@proton.me

Għaddi is made by Kepthouse in Malta. We built it to need as little about you as possible: no account, no cookies, no ads, no tracking across sites. This page lists everything that leaves your phone and what happens to it.

On your phone, not with us

Your progress, streak, exam date, chosen language and licence key are saved in your browser's storage on this phone or computer. They are not sent to us. Reset progress on the Progress page deletes your progress; clearing your browser's data for this site deletes all of it.

The app also makes a random device id for this browser. It is not linked to your name, email or phone number, and it is only used for the licence check below.

Paying for Pro

Payments go through Stripe, which sells Pro to you as the merchant of record (Stripe Managed Payments, shown on your statement as Link). Stripe collects your email address and card details under its own privacy policy: stripe.com/privacy. We never see your card details.

In our Stripe account we can see each order: the trainer, the amount, the date, your country and the email you gave Stripe. We use that only to help you with a refund or a lost key.

Your licence

After you pay, Stripe sends you back to Għaddi with a checkout reference. The app sends that reference to our server, which asks Stripe whether the payment went through and then makes your key.

For each key our server keeps the trainer, the Stripe checkout reference, the date, and the device ids of the browsers that use it (3 at most). No name, no email. While Pro is open, the app checks the key with our server now and then, sending the key, the trainer and the device id.

The waitlist

If you leave your email on a test page, we keep it with the name of the test and the date, only to send you one email when that trainer is ready. After that email we delete it. To be taken off sooner, email us.

Counting what helps

To learn which pages help people, the app sends anonymous counts to our server: a visit, a mock test started or finished, the Pro page opened, Get Pro tapped, Pro opened, a share. Each count carries only the trainer, whether you came from a search engine, social media, directly or elsewhere, and for a finished mock test whether it was a pass. No id, no IP address, nothing about your device. We keep only the daily totals.

Our host and the fonts

The site and our server run on Fly.io in Amsterdam, in the EU. Like any web server it sees your IP address with each request. We use it only in memory, to stop one address sending too many requests a minute, and we do not write it down.

The fonts are loaded from Google Fonts, so your browser asks Google's servers for them and Google sees your IP address: policies.google.com/privacy.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it: email kepthouse@proton.me. For a key, send the key or your Stripe receipt so we can find it. If you think we got something wrong, you can complain to the Information and Data Protection Commissioner in Malta: idpc.org.mt.

Changes

If this page changes, the date at the top changes with it.