Privacy and personal data on ArtwithWhy

This notice explains which personal data is processed, why it is used, how long it is kept, and how users can exercise their rights.

Updated April 27, 2026

ArtwithWhy is a digital learning service focused on art history, artwork recognition, and adaptive study tools.

Francesco Sanna acts as data controller for the website and customer support activities described in this notice. Payments are processed through Lemon Squeezy, which acts as merchant of record for checkout transactions.

1. Data processed

account data such as email address, public profile identifiers, and login provider identifiers;
usage data such as quiz progress, training activity, premium status, settings, and referral attribution;
technical data such as IP address, device and browser information, security logs, cookies, and local storage data required for the service to function;
support and legal communications sent by email.

2. Purposes and legal bases

perform the service requested by the user, including authentication, account management, and premium access;
ensure service continuity, fraud prevention, abuse detection, and security monitoring;
respond to support, privacy, copyright, and legal requests;
comply with legal, accounting, and tax obligations;
store optional referral attribution when the user consents to non-essential storage.

3. Payments and third parties

Lemon Squeezy acts as merchant of record for customer purchases. During checkout, billing and tax information may be collected directly by Lemon Squeezy under its own legal framework and policies.

Authentication and application data are handled through the service providers used to run the app, including hosting, database, and authentication vendors selected by the operator.

4. Storage and retention

account and progress data are kept while the account remains active and for a reasonable period required to handle disputes, backups, or legal obligations;
security and operational logs are retained only for as long as needed for monitoring, abuse prevention, and incident response;
customer support emails may be retained for the period needed to manage the request and related compliance obligations.

5. User rights

request access, rectification, deletion, restriction, or portability where applicable;
object to processing carried out on legitimate-interest grounds where applicable;
withdraw consent for non-essential storage or referral attribution at any time;
lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority where relevant.

To exercise privacy rights or request account deletion, contact the operator using the details shown below.

Data controller contact

Francesco Sanna
Sole proprietor under the Italian flat-rate tax regime
VAT / P.IVA: 04225610924
Viale Sant'Avendrace 351, 09122 Cagliari, Italy
support@artwithwhy.app