Legal
Privacy Policy
Last updated: 27 August 2026
1. Who we are
YKIReady is operated by Actually Finland, a sole proprietorship registered in Finland (Business ID: 3203290-4), which also operates actuallyfinland.com. Contact: info@ykiready.fi. We are the data controller for personal data processed through this site, under the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.
YKIReady is an independent practice service. It is not affiliated with, endorsed by, or connected to the Finnish National Agency for Education (Opetushallitus) or the official YKI examination.
2. What data we collect
- Account data: email address and authentication identifiers (including Google or Apple sign-in identifiers if you use them).
- Exam data: your mock exam attempts, written answers, recorded speaking responses and their transcripts, scores, level selection and booked exam date.
- Purchase data: mock and section credit balances, purchase history and Stripe customer/session identifiers. Card details are handled entirely by Stripe and never reach our servers.
- Technical data: IP address, browser and device type, pages visited and referrer, collected automatically by our hosting, analytics and advertising partners.
3. Why we process your data
- Contract (Art. 6(1)(b)) — to run your account, deliver mock exams, score them and manage credits and payments.
- Legal obligation (Art. 6(1)(c)) — accounting records under Finnish law.
- Legitimate interest (Art. 6(1)(f)) — to secure, operate and improve the service and prevent abuse.
- Consent (Art. 6(1)(a)) — non-essential cookies, analytics and personalised advertising, and microphone access for the Speaking section. You can withdraw consent at any time.
4. Speaking recordings and AI processing
The Speaking section uses your microphone only while you are recording an answer, and only after your browser asks for permission. Recordings are transcribed and the written and spoken answers are assessed by AI language models operated by our processors solely to produce your report. They are not used to train third-party models, and you can delete your attempts at any time from your account.
5. Advertising — Google AdSense
This site may display advertising served by Google AdSense (Google Ireland Limited). Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings or aboutads.info.
- For visitors in the EEA, the UK and Switzerland we use a Google-certified Consent Management Platform to obtain consent before advertising or measurement cookies are set.
- Ads are never shown inside a live, timed exam section, and we do not serve personalised ads to users we know to be under 16.
6. Cookies
We use strictly necessary cookies for sign-in and session security, and — with your consent — analytics and advertising cookies as described above. You can clear or block cookies in your browser; sign-in will not work without the necessary ones. See our Cookie Policy.
7. Who we share data with
- Supabase / Lovable Cloud — database, authentication and hosting.
- Stripe Payments Europe, Ltd. — payments and refunds.
- AI providers — speech transcription, speech synthesis and answer assessment.
- Google Ireland Limited — advertising and measurement (with consent).
We never sell your personal data. Where data is transferred outside the EEA, it is covered by the European Commission's Standard Contractual Clauses.
8. Retention
Account and exam data are kept while your account exists and for up to 12 months after deletion for abuse prevention and backups. Purchase records are kept for 6+ years as Finnish accounting law requires. Credits expire 6 months after purchase.
9. Your rights
You have the right to access, rectify, erase, restrict or object to processing, and to data portability. Write to info@ykiready.fi and we will respond within 30 days. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
10. Children
The service is not intended for children under 16. We do not knowingly collect data from them; contact us if you believe we have.
11. Changes
We will update this page when our processing changes and revise the date above. Material changes will be announced in the app.
