Privacy notice

Who processes your data

Kohezie BV, Coupure 620, 9000 Gent, Belgium, enterprise number BE0682878515, is the data controller. Write to us at support@licento.com with any question about this page.

What we keep

We keep what the preparation needs in order to work, and what helps us make it better:

• your email address, once you give it to us;
• the language you use our website or app in, so that a message we send you later is written in it;
• the exam you are preparing for and the date on which you sit it;
• what you tell us about a sitting once its date has passed — that you passed, did not pass or did not sit it — and, if you give it, your score on each part of the exam: so that your plan knows where you stand, and so that we can check how well the readiness we showed you matched your result, and improve it;
• your answers to the questions and to the learning path's exercises, with the time and how long you took over each answer (for an exercise, until your first try), and what we derive from them: your level per domain, how well you know each fact, and what you are served next — practice chooses your next question from your own answers, preferring the facts you got wrong, are forgetting or have not met yet, and the parts you know least;
• for each question practice picks for you: why it was picked, the chance it had of being picked, and how likely we expected you were to remember it — so that we can check whether the order we serve questions in helps you prepare, and improve it;
• after each answer in practice, whether the explanation was in front of you — the sentence under a wrong answer, or the whole explanation you open — and for how long: so that we can see which explanations help you get the question right the next time, and improve the ones that do not;
• each test you pass to jump ahead on the learning path: the unit it opened, your score and the facts it skipped — so that the lessons before that unit stay complete on every device you sign in on, and those facts still come to your review;
• the mock exams you sit in the app: which questions each paper held, how it was put together and the rules it was marked by, when you started it, when each question appeared, when you handed it in or cancelled it and when its time was up, and whether it was your free mock — so that your answers to it count like any other, your free mock counts once, and each mock you hand in, with its result, is on every device you sign in on;
• what you read in the book: for each chapter, how far you read, where you stopped, and how long you spent reading it on which day — so that your place and your reading time follow you to every device, and so that we can show you your pages, your time and your reading speed;
• what you listen to in the app — the podcast's episodes and the book read aloud, on your phone or on your paired watch: for each stretch you heard, which episode or chapter, where in it you started and stopped, how long it played, at what speed, why it stopped (you paused it, it ended, you skipped, or something else took over), and whether it played on the watch, which passes it to your phone to send — so that we can see how learners study by ear, and improve the podcasts and how practice is chosen around them;
• the language you sit your exam in, where it is offered in more than one — so that your exam opens in it on every device;
• where you said you stand with your exam when you started — from zero, having studied some, or close to your exam — with the moment you answered: the app keeps it on your phone until you make your account, and then sends it with it, so that your plan starts in the right place and we can see how learners who start in each place get on;
• what the app has told you about your preparation — a note, a milestone, a reminder — and when, so that each is said once and not on every device again, so that your notes follow you to every device, and so that the app never sends you more reminders than it says it will;
• with everything the app sends us about your preparation, which version of the app sent it, with its build number, and whether it is the iPhone, the Android or the web app — so that, when we check how practice and the learning path work, we can tell apart what each version of the app did;
• your purchase: the amount, the date, the payment reference, the duration of your access — for a pass, the period you chose, whether you ticked it to renew, each time you asked to turn renewal on later (the price and the date it would renew from, whether or not you then added a card), and when it starts and ends;
• the exact text of the terms and of the waiver that you accepted, and, for an exam that can only be sat from a certain age, your confirmation that you will be that age by your exam date — the words you ticked, never your age — with the time;
• if you use the app: a random identifier per device, the name of the device if it is linked to your account, and when it was last used;
• if you sign in or create an account with your email address: the address you typed, a fingerprint of the code we email you from which it cannot be read back — never the code itself —, when we sent it, until when it works, when it was used and how many wrong codes were typed for it. We keep this for any address typed, whether or not it has an account, because anyone can type an address, and we make no account until the code is typed;
• if your account has a password (one could be chosen until 6 November 2026; new accounts have none): the password, only as an irreversible fingerprint from which it cannot be read back — never the password itself —, when it was set, and how many sign-in attempts with a wrong password there were within a short time of each other;
• if you sign in with Apple or Google: the identifier Apple or Google gives you for our service, which says nothing else about you, and when you first signed in with it. We take the email address they give us only when they tell us they have checked it is yours, and nothing else of your Apple or Google account — not your name, not your picture, and none of their own sign-in tokens.

We do not ask for your name, your postal address, your date of birth or your national register number. We never see your card details: they go only through the payment service provider.

If you buy without an account, we make your account with the email address you give when you buy, and mail you a link to confirm that the address is yours; it signs you in, with no password.

If you sign in with Apple or Google and we already have an account under the email address they give us, that account is the one you sign in to, and from then on Apple or Google signs you in to it. If we have none, we make one under that address, with no password; you can also sign in with a code we email to that address. If you let Apple hide your address, the address we keep is the one Apple made for us, and our emails reach you through Apple.

If you sign in with Google in the iPhone app, Google first checks that the request comes from our app: your iPhone proves it to Apple (Apple's App Attest), and Apple vouches for it to Google, before Google lets you sign in. Apple and Google handle this under their own privacy policies, and we receive nothing of this check.

Once you sign in or buy, a cookie on your device says which account you are signed in to, and nothing more. That cookie is necessary for the service and is not used to follow you elsewhere.

We also keep a few preferences in cookies on your device: the exam you chose, the language and the theme you picked, and the last chapter you opened. They only serve to show you the right page; we do not store them, and we do not use them to follow you.

On our websites — www.licento.com, jachtklaar.be and vaarklaar.be — analytics and advertising cookies are set only if you accept them: in the banner, or under «Cookie settings» at the foot of every page, where you can also change your mind. If you accept them, Google and Meta receive what your browser tells them as you read our pages: which pages, the link or the ad you came from, your device and browser, and your IP address, from which they derive roughly where you are. Google Analytics gives us counts of visits from it; Google Ads and Meta use it to tell which of our ads brought you, and may use it to show you our ads elsewhere. If you do not accept them, none of these cookies is set; Google still receives a signal without a cookie that a page was seen or an ad was clicked, which does not recognise you from one page to the next. Your choice itself is kept in a cookie on your device.

On www.licento.com, the analytics cookies also let PostHog measure for us where visitors stop between an exam's page and a purchase, and compare versions of a page. If you accept them, PostHog receives the pages you read, the free-test and «Buy» buttons you tap on an exam's page, the page you came from, and your device, browser and screen. It does not keep your IP address, and it is never told who you are: not your account, not your email address. It recognises your browser by a random identifier in a cookie of its own, and, while a tab is open, keeps an identifier for that tab in the browser's session storage, which goes when the tab is closed. If you then buy, that identifier is recorded with your purchase at the payment service provider, and PostHog is told which exam you bought, what you paid and when, joined to those visits. If you do not accept analytics cookies, PostHog is not loaded and receives nothing; if you withdraw them, it stops.

In the app, PostHog is used only if you say yes. The app asks with a switch, off until you turn it on, where you make your account or sign in; you can change your answer in Me. Until you have answered, the app keeps on your phone what it would send PostHog — at most the last 500 events of the last 30 days — and sends none of it: if you say yes, it is sent then, with the moments it happened; if you say no, it is deleted. With your yes, PostHog receives which screens you open — by the screen's name, never which chapter or question was on it —, when you open the app, put it away and come back to it, which exam you open, whether the store offered that exam's passes, and how far a purchase got, never a price or what you bought; and your phone's model, system, language and time zone. It recognises the app on your phone by a random identifier of its own, kept on your phone; it is never told your account or your email address, and it does not keep your IP address. If you say no, PostHog is not used; if you withdraw your yes, it stops, and that identifier is forgotten. Each answer you give is recorded with a random identifier of its own, when, in which language and with which words you were asked, to show that you consented — never with your account.

If you accept advertising cookies on www.licento.com, we also keep where you came from — the campaign and the click id of the ad you followed — in a cookie of our own on your device, for 90 days. If you then buy, it is recorded with your purchase at the payment service provider, and it goes with it to Google and Meta — what you paid, in which currency and when — together with your email address hashed with SHA-256: a code from which they can recognise an address they already hold, never your address itself. They use it to tell which of our ads led to a purchase. If you do not accept advertising cookies, nothing of this is kept or sent.

Each choice you make in the cookie banner on www.licento.com is recorded on our server: a random identifier, the kinds of cookies you accepted, which version of the banner you answered, in which language and with which words, and when — but not your IP address, your browser or your account. If you buy, your purchase records that identifier and whether you accepted advertising cookies.

If you ask the app for reminders, your phone itself schedules them: no reminder passes through us or through any other service. The days and the time you choose are kept on your phone. Each reminder your phone shows you is then kept with what the app has told you, with the moment it was shown — so from those moments, the days and the time you chose can be seen. If you open the app by tapping a reminder, that is kept too, with the moment you tapped it, so that we can see which reminders help learners back to their preparation and which do not.

Once you have opened an exam in the app, the app also keeps how it was used, each with its moment: when you opened the app, put it away and came back to it, which screen you had in front of you (the screen's name, never which chapter or question was on it), whether the store offered that exam's passes, and how far a purchase got — never a price or what you bought, which your purchase itself records. We use this to find where the app fails people and to help you when something went wrong. It is kept with your learning history, for as long as that is kept, and erased with it.

Every question we show you carries a marker that identifies your account — or, if you have no account, the random identifier under which we know you. Only we can read it: it serves to trace a copied question back to the account to which it was shown.

If you ask to hear when a kind of exam opens («Notify me»), we keep your email address with that kind of exam and the moment you asked, and nothing else. We send you one message when it opens, and then delete your address from that list. We use it for nothing else. Erasing your account also takes it off every list; without an account, write to us and we delete it.

If you ask on our website to hear when our app is in the App Store («Mail me when the app is out»), we keep your email address and the moment you asked, and nothing else. We send you one message when the app is in the App Store, and then delete your address. We use it for nothing else. Erasing your account also deletes it; without an account, write to us and we delete it.

If you ask for an exam we do not offer yet («Ask for an exam» on our website), we keep your email address with the country, the language and the name of the exam as you typed them, and the moment you asked. We send you one message when that exam opens on Licento, and then delete your request; if it has not opened within two years, we delete it anyway. Our staff read the requests counted, exam by exam and without your address, to choose which exams to build next. Erasing your account also deletes your requests; without an account, write to us and we delete them. An exam we are still preparing, or have on our list of exams we could add, has its own page on our website; if you ask there to hear when it opens («Get notified»), we keep your address in the same way, with that exam's country, language and name as we list them.

If we send you a code or a link — to sign in, to confirm your email address or to set a new password — we keep when it was sent and when it was used, but never the code or the link itself. This serves to limit and to investigate abuse of the sign-in.

Each time one of our staff opens your account, we record who did it, when, and the reason they gave.

If something fails in the app, on our website or in our staff's own tools, an error report is made: what failed and where in our code, the version of the app or the website, the model and system of your device, and — if you are signed in, or our staff were working on your account — your account's identifier, so that we can find the faults you met. It never holds your email address, your password or what you answered.

If you write to us — from the app's Help, through the contact form on our website, or by email — we receive your message, the topic you chose, the email address to answer and, if you are signed in, your account. It reaches our support mailbox, where we answer it; it is not kept in our database. Through the contact form we also keep your email address and the moment you wrote, for one day, so that the form cannot be flooded; erasing your account deletes it sooner.

The contact form, «Ask for an exam», «Get notified» and «Mail me when the app is out» are protected against automated messages by Cloudflare Turnstile if you are not signed in. When you open such a form, your browser sends Cloudflare your IP address, a technical fingerprint of its connection and what it says about itself (its User-Agent), with the website you are on. We keep none of this, and we do not send Cloudflare what you typed.

If you report a problem with a question or an exercise, our staff read your report — which question or exercise, your message, the app's version and your email address — to correct it; we keep it until we have dealt with it, and then for 365 days, and it is erased with your account. If you send it from a chat with O, it names that chat, so that we can see what O said.

If you ask O, the app's AI tutor, about a question or an exercise, we keep the chat: which question or exercise it is about, what O was given about it (the question, its options, the right answer, the answer you gave to it, our explanation and the chapter of the book it rests on), what you write, O's replies, when each was written, and, for each reply, which AI model wrote it and how much it cost. We count your messages so that one account cannot send more than a set number in a day. We keep a chat so that you can go on with it, for 90 days after its last message; one you sent a report from, until we have dealt with the report. It is erased with your account.

Before your first chat with O, the app asks whether you allow it to send what you write to Anthropic (see «Who else has access»). Without it, nothing you write is sent to O. If you allow it, we keep when you allowed it, a fingerprint of the words you were shown, and which version of this notice was in force, until you turn O off in Me, which withdraws it, or erase your account. Turning O off ends what is sent from then on; the chats you already had are kept as said above.

Licento may use your conversations with O to make O better only if you let it: the app asks, as an option you tick, when it asks about O, and Me has a switch for it. Without that permission, nobody at Licento can see your conversations with O, except one you send us with a report. With it, our owners may read only the conversations you begin after you gave it, with the email address of whose they are, to check that O's answers are right and to make them better. We keep when you gave it and a fingerprint of the words you were shown. Turning it off in Me ends it at once: from then on, nobody at Licento can see any of your conversations with O but one sent with a report.

Why, and on what basis

To deliver what you have bought and to maintain your account: the performance of the contract.

To keep the evidence of what you accepted and of what you paid, and of the choices you made in the cookie banner: a legal obligation.

To improve the questions and correct errors, on the basis of aggregated figures that do not identify you: our legitimate interest.

To check how well the readiness we show matched the results learners tell us, with the scores they give, and to improve it: our legitimate interest.

To improve how practice is chosen, scheduled and scored, for you and for every learner, from what learners do in the app: our legitimate interest.

To keep the learning history you gave us when you deleted your account: your consent.

To answer your questions with O, the app's AI tutor: the performance of the contract, and only once you have allowed the app to send what you write to Anthropic.

To be able to show that you allowed it, by keeping when and under which notice: our legitimate interest.

To make O better from the conversations of learners who let us: your consent, which you can withdraw in Me at any time.

To find and fix what fails in the app and on our website, from error reports: our legitimate interest.

To keep automated messages out of our forms, with Cloudflare Turnstile: our legitimate interest.

To measure visits to our website, where visitors stop before buying and which of our ads work — with analytics and advertising cookies, by telling Google and Meta of a purchase that followed one of our ads, and by telling PostHog of a purchase that followed visits it measured: your consent, which you can withdraw at any time under «Cookie settings». Withdrawing does not undo what was measured before.

To tell you once when a kind of exam or an exam you asked about opens, or when our app is in the App Store: your request, which you can withdraw at any time by writing to us.

We do not use your answers to send you advertising, and we sell them to no one.

How long

For as long as your access runs, and for as long as your account exists.

When your account is deleted, or what is stored from your device is erased, we set aside, under a random number, how many times you answered each question and each fact, how many times right, and the days between those answers. Once at least 5 learners of the same exam have been set aside, we merge their figures into counts and patterns in which nothing links one question to another or to anyone. Those merged figures are anonymous, so we keep them. What has not been merged after 25 days is deleted.

If you tick it when you delete your account, we also keep your learning history: your answers, your reading, what you listened to and what the app chose for you, in order, counted in days from your first answer instead of in dates, under a random number, and without your email address, your devices or anything you wrote. It is kept apart until at least 5 learners of your exam have given theirs; then each is moved under a new random number, so that we can no longer tell which was yours. We keep it for 3 full calendar years after the year in which you gave it, and then delete it.

If you have never given us an email address, everything stored from your device is erased after 180 days without activity — one full exam cycle — without you having to ask for it.

A device that has been signed out in the app is erased 30 days after that sign-out.

What we keep about a code or a link that was sent is erased 30 days after it expired.

A chat with O is deleted 90 days after its last message, or, if you sent a report from it, once we have dealt with that report and those days have passed.

A message you send us stays in our support mailbox for as long as we need it to answer you and to deal with what follows, and at most two years. The contact form's record of your address and the moment you wrote is deleted after one day.

A request for an exam we do not offer yet is deleted when we tell you it has opened, and at most two years after you asked.

An address left to hear when our app is in the App Store is deleted when we send you that message.

Accounting records relating to a purchase we keep for longer, because tax law requires it. Those are records separate from your answers to the questions.

The record of who on our side opened your account, and why, we keep for as long as those records of your purchases. It names your account only by an identifier, so once your account is deleted, it no longer leads to you.

An error report is deleted 30 days after it was made. Erasing your account does not delete the reports made before it: they name your account only by its identifier, and they are gone 30 days after they were made.

Your choice about cookies is kept on your device for six months; then we ask again. Your answer to the app's question is kept on your phone until you change it. We keep the record of each choice and each answer for 13 months, to show that you consented; your purchase keeps its identifier with the purchase. Where you came from is kept on your device for 90 days, and, once you buy, with your purchase at the payment service provider for as long as the records of your purchases. Google Analytics keeps what it measured for fourteen months. PostHog's cookie lasts six months, and PostHog keeps what it received for one year. Google and Meta keep what they received for advertising under their own privacy policies.

We keep the record of each request you make about your data — what you asked, when it came, and when and how we answered — for three years after we have answered it.

Our database is copied to a backup twice a day, so that it can be restored after a failure. The backups are kept in the European Union. Each holds the database as it was when it was made, and is deleted 30 days later; until then it is locked against being changed or deleted, so what you erase, and what we delete as this section says, stays in the backups for at most 31 days. Our database host also keeps its own copies, for seven days. If we ever restore a backup, we first erase again every account erased since it was made. For that, our server log notes the identifier of each account erased, with nothing else, and keeps that note for 30 days.

Learners under 18

Licento is for learners of 13 and older. If you are under 16, two things that run on your consent are not for you: letting O learn from your conversations, and keeping your learning history when you delete your account; the app says so where you would turn them on. Nothing about a learner under 18 is used for advertising. Where an exam can be sat young, such as golf, our ads may reach people from 13, chosen only by age and place, never by what they did on our website or in the app. We do not ask your age, and we do not keep it.

Your rights

You can ask us what we hold about you, for a copy of it, or to have it corrected. Ask on the website, signed in to your account, under Settings › Your data; or write to support@licento.com from the email address of your account: we act only on a request made from your account or sent from that address, so that your data never goes to someone else. A request asked on the website also reaches our support mailbox, with your account's email address, so that it is answered on time; it is kept there as a message to us is. To correct something, we write to that address to ask what should change. A copy comes as one file, which we email to that same address, and to no other. We reply within one month of receiving your request. If a request is complex, or we receive many at once, we may extend that by two further months; we then tell you so, and why, within the first month.

You delete your account yourself, on your account page, on the website or in the app. Your account, the learning history attached to it, your devices, your password, the link to your Apple or Google sign-in and your email address are erased immediately, and from our backups within 31 days (see «How long»). What we must keep for accounting or evidentiary reasons remains: your purchases and the terms you accepted with them. If you cannot do it yourself, write to us from the email address of your account.

You can also lodge a complaint with a data protection authority, in particular the one in the country where you live or work, or where you think your data was misused. In Belgium, where we are established, that is the Gegevensbeschermingsautoriteit.

Who else has access

Within our own organisation, only a few named staff members can see accounts, and they sign in with their own work address. Support staff open one account at a time by its exact email address or identifier, only to help — to answer your question, to check a purchase or to resolve a sign-in problem — and must give a reason, which we record. The owners can also browse a list of all accounts, showing each email address, when it was made, whether it is confirmed, and how many exams and purchases it has, and open an account from that list; every page of the list they look at and every account they open is recorded too (see «What we keep»). Once an account is open, staff see your email address and whether it is confirmed, whether signing in is locked, your devices, your exam and its date, your access and your purchases. They also see your activity: what kind of thing happened and when — that you answered a question, started a session or read in the book, never which question, what you answered or what you read — and how the app was used (see «What we keep»). They never see your password, what you answered, or a link we sent you — except that, when you ask us for a copy of your data, one of the owners downloads it to email it to you, and that download is recorded. The copy never holds your password or a link we sent you.

The owners also read the chats of learners who let Licento use their conversations with O, each with the email address of whose chat it is, and only the chats begun after that permission was given (see «What we keep»). A chat holds the answer you gave to the question it is about, so they see that answer there, and only that one. Every list of chats they look at and every chat they open is recorded. Support staff see a chat only when a report was sent from it, with the report, and that look is recorded too.

Our staff also see figures across all learners, such as how many people answered a question this week or passed their exam. Those are counts only, never of fewer than five people, and they identify no one.

A small number of service providers, each under contract and for one specific task: hosting the database, keeping its backups (Cloudflare, which stores them in the European Union), sending the emails and holding the mailbox your messages to us arrive in, the payment service provider, and keeping the error reports (Sentry, which stores them in the European Union). We give them only what they need: to the payment service provider we send your account's email address, so that its payment page does not ask you for it again, and what you are buying, but no learning data whatsoever. For a pass you ticked to renew, or switched to renew later, the payment service provider keeps a customer record with your email address and your payment method, to charge each renewal. It keeps it after you stop the renewal, until you delete your account: deleting it ends any renewal and deletes that record. If you buy in the iPhone app, Apple takes the payment under its own privacy policy, and we never see your Apple ID or your card. Apple holds a random token we made for your account, by which it says the purchase is yours, and tells us that token, what you bought, when, at what price, in which country's store, and whether it was refunded. We keep only its reference, the exam and when the pass starts and ends, with your purchase, and no amount. For a pass that renews there, we also keep which subscription it is, whether it still renews and when it next charges, with your purchase, for as long as your purchase is kept. Deleting your account deletes our copy of the token; Apple's record of the purchase is Apple's. The record of what you paid stays, as your purchases do. If you buy in the Android app, Google (Google Ireland Limited) takes the payment through Google Play under its own privacy policy, and we never see your Google account or your card. Google holds the same random token we made for your account, by which it says the purchase is yours, and tells us that token, what you bought, when, whether it was a test purchase, and whether it was refunded. We keep only the order's reference, or a fingerprint of the purchase where it has none, the exam and when the pass starts and ends, with your purchase, and no amount. For a pass that renews there, we also keep a fingerprint of the subscription, whether it still renews and when it next charges, with your purchase, for as long as your purchase is kept. Google tells us of a renewal or a refund as it happens. Deleting your account deletes our copy of the token; Google's record of the purchase is Google's.

If you sign in with Apple or Google: Apple (Apple Distribution International Ltd.) or Google (Google Ireland Limited) confirms to us who you are, under its own privacy policy. We send it nothing of yours: you sign in on its own page or sheet, and it tells us the identifier and the email address described under «What we keep». It learns that you signed in to Licento.

If you ask O, the app's AI tutor: Anthropic, which provides the AI model that writes O's replies. For each message we send it the question or exercise the chat is about, what O was given about it, and the chat so far, with your new words; never your email address or your account. Anthropic processes them on our behalf, may do so in the United States under the European Commission's standard contractual clauses, keeps them only as long as it needs to answer and to guard against misuse of its service, and does not use them to train its models.

If you accept analytics or advertising cookies on our websites: Google (Google Ireland Limited) and Meta (Meta Platforms Ireland Limited). For advertising, they also use what they receive for their own purposes, under their own privacy policies, and they may transfer it to the United States under the EU-U.S. Data Privacy Framework. If you accept advertising cookies and then buy, they also receive your purchase, where you came from and your email address hashed (see «What we keep»). They never receive what you answered.

If you accept analytics cookies on www.licento.com, or say yes to the app's question: PostHog (PostHog Inc.), which works for us under a data processing agreement and keeps what it receives in its cloud in the European Union. It never receives what you answered, your account or your email address.

If you use one of those forms without being signed in: Cloudflare (Cloudflare, Inc.), which works for us in telling a person from a bot, and also uses what it receives, on its own account, to improve how Turnstile detects bots. It never receives what you typed or what you answered.

Apart from these, we pass your data on to no one else, and we never disclose your readiness level to an employer, a driving school or a public authority.