Skip to content
AF Roda Development
ESEN

AWS Developer Associate Exam Prep: CertiCloud

Privacy Policy — CertiCloud

Privacy policy for AWS Developer Associate Exam Prep: CertiCloud (com.afroda.awsassociateprep).

Updated: October 22, 2026

Last updated: October 22, 2026

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), this policy explains how the personal data of users of the application AWS Developer Associate Exam Prep: CertiCloud (the "Application") is processed.

1. Data controller

  • Identity: AF Roda Development
  • Address: Madrid (Spain)
  • Contact: email

2. Personal data we process

The Application can be used without registering. Depending on how you use it, we process the following categories of data:

  • Identification and contact data: name, email address, and account identifier, only if you choose to sign in with your Google account.
  • Service usage data: your study progress, results, notes, and preferences. If you do not sign in, this data is stored only on your device and the controller has no access to it. If you sign in, it is kept linked to your account so you can recover it.
  • Subscription data: information about the plan purchased, its status, and its validity, provided to us by Google Play. We do not process bank or payment details, which are handled directly by Google Play.
  • Connection data: the technical data strictly necessary to provide the service over the Internet, such as your IP address.
  • Communication data: the data you provide when you contact us.

We do not process special categories of data, and we do not use your data for advertising, profiling, or analytics.

3. Purposes of processing

We process your data for the following purposes:

  1. To provide the service and enable you to use the Application and its content.
  2. To manage your user account and keep your progress when you sign in.
  3. To manage the purchase, activation, and validity of the Premium subscription.
  4. To handle your questions and requests, including the exercise of your rights.
  5. To ensure the security of the service and prevent fraud and misuse.
  6. To comply with the legal obligations that apply to us.

4. Legal basis for processing

  • Performance of a contract (Art. 6(1)(b) GDPR): for purposes 1 to 4, as processing is necessary to provide the service you request under the Application's Terms and Conditions.
  • Legitimate interest (Art. 6(1)(f) GDPR): for purpose 5, namely protecting the service and its users. You may object to this processing at any time.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR): for purpose 6, in particular tax and accounting obligations.

5. Whether providing data is mandatory

Signing in is voluntary. However, it is required to keep your progress linked to an account and to purchase the Premium subscription. If you do not sign in, you can still use the Application, but without those features.

6. Retention periods

We keep personal data only for as long as necessary for the purpose for which it was collected:

  • Account data and associated progress: while you keep your account. If you request its erasure, it will be deleted within a maximum of thirty (30) days.
  • Subscription data: while it is active and, afterwards, for the periods required by law for tax and accounting purposes and for the limitation of possible liabilities.
  • Connection data: for a maximum of twenty-four (24) months, for security purposes.
  • Communication data: for as long as needed to handle your request and, afterwards, for the limitation periods of possible liabilities.

After these periods, data will be erased or irreversibly anonymized. Backups that may contain it are deleted within a maximum of thirty (30) days.

Data stored only on your device remains under your control and is deleted when you clear the Application's data or uninstall it.

7. Recipients

We do not disclose your data to third parties, except where required by law.

To provide the service, we use providers acting as processors, with whom we have entered into the safeguards required by Article 28 GDPR:

  • Google (Google Ireland Limited and Google LLC): user authentication and subscription management services.
  • Cloudflare, Inc.: hosting and infrastructure services.

Google Play acts as an independent controller for payment processing, under its own privacy policy.

8. International transfers

Some of these providers may process data outside the European Economic Area, in particular in the United States. Such transfers are made with the appropriate safeguards provided for in the GDPR: the EU-U.S. Data Privacy Framework adequacy decision of 10 July 2023, under which these providers are certified, and, where applicable, the Standard Contractual Clauses approved by the European Commission.

9. Data subject rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as the right not to be subject to decisions based solely on automated processing.

To do so, contact us by email, stating the right you wish to exercise. We may ask for the information needed to verify your identity. We will respond within one (1) month of receiving the request, which may be extended by two (2) further months where necessary, taking into account its complexity.

If you believe the processing does not comply with the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.

10. Account deletion

You can request the erasure of your account and associated data through the Delete my data page. Deleting your account does not cancel your subscription, which must be managed in Google Play.

11. Automated decision-making

We do not make decisions based solely on automated processing of your data, including profiling, that produce legal effects concerning you or similarly significantly affect you.

12. Minors

The Application is not intended for children under fourteen (14). In accordance with Article 7 of the LOPDGDD, we do not process data of children under that age without the consent of the holder of parental authority or guardianship. If we become aware that data from a minor has been collected without such consent, we will erase it.

13. Security

We apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, to prevent the loss, alteration, unauthorized access to, or improper processing of data.

14. Users outside the European Union

If you live outside the European Union, we recognize the rights granted by the data protection laws of your country (such as the UK GDPR in the United Kingdom, the CCPA/CPRA in California, or the LGPD in Brazil), which you can exercise through the same channel. We do not sell or share personal data for advertising purposes.

15. Changes

We may amend this Privacy Policy to reflect changes in the law or the service. The current version will always be available on this page, with its date of update. If the changes are significant, we will inform you through the Application.

16. Contact

For any question about this Privacy Policy, you can contact us by email.