Privacy Policy

Effective from: 26 August 2026

The shortest version

The full policy is below, but if you have 30 seconds — this is what you should know for sure:

We only collect what you type into the forms: name, e-mail, sometimes a phone number, your city and a few answers about your school situation. Plus standard technical server logs.
The data controller is Tutlo sp. z o.o. — the company developing the True Life School project.
We write or call only with your consent. You can withdraw any consent at any time — with a single e-mail.
We never sell your data and we show no ads. We use no advertising or tracking cookies.
About children we know only as much as needed: we ask for an age range, not the child's name or any other data.
Want to see, correct or delete your data? Write to hello@truelife.school.

This summary replaces nothing — the full text below is what is binding. We wrote it in plain language, though, so you'll be fine.

§1. Who is responsible for your data

The controller of personal data collected on the truelife.school website (the "Website") is Tutlo spółka z ograniczoną odpowiedzialnością (Tutlo sp. z o.o.) with its registered office in Warsaw, ul. Nowogrodzka 42/501, 00-695 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register under KRS number 0001021377, NIP (tax ID) 7011130879, REGON 524550960 — the company developing the True Life School project. Below we simply say "we".
For anything concerning your data, write to hello@truelife.school or by post to the registered address. One mailbox for everything — no special addresses to hunt for.

§2. What data we collect

Only what you leave with us — plus a technical minimum:

Waitlist and interest forms (such as "Join" and "Start"): the parent's first and last name, e-mail address, phone number (if you provide one), city, and your answers to a short questionnaire — including the child's age (range only, e.g. 7–9 years), what school the child attends now, when you would like to join, which exam track interests you, what bothers you about school today, how you heard about us, and any question you leave for us.
Property submission: name, e-mail, phone, city, the property's address or location, its type and area, and any additional information you enter.
Consent records: which consents were ticked, when, and which version of the wording — so we can demonstrate we have your consent (the GDPR requires this of us).
Technical data: standard infrastructure logs (IP address, browser type, request time), recorded automatically by our hosting provider. They serve the security and stability of the Website.

Providing your data is voluntary — but without it we cannot put you on the waitlist or evaluate a submitted property. We would simply have no way to reach you.

§3. Why, and on what legal basis

Purpose	Legal basis (GDPR)	For how long
Running the waitlist and updating you on True Life School's progress in your city	Art. 6(1)(a) — your consent	Until consent is withdrawn, at most 3 years from your last activity
Sending information about our products and services (e-mail, phone)	Art. 6(1)(a) — your consent	Until consent is withdrawn
Evaluating a submitted property and contacting you about it	Art. 6(1)(b) — pre-contractual steps taken at your request	Until the evaluation ends, at most 2 years
Responding to your messages and complaints	Art. 6(1)(f) — our legitimate interest	For the duration of the matter and up to 12 months after it closes
Website security and stability (technical logs)	Art. 6(1)(f) — our legitimate interest	Up to 12 months
Demonstrating consents and defending against claims	Art. 6(1)(f) — our legitimate interest	For the limitation period of claims

Withdrawing consent is as easy as giving it: write to hello@truelife.school or click the opt-out link in a message. Withdrawal does not affect the lawfulness of processing before that moment — and carries no consequences.

§4. Who we may share data with

Your data goes only where it must for the Website to work:

Trusted IT providers — hosting and infrastructure (including Cloudflare) and tools for sending e-mails and handling submissions. They act on our instructions, under data processing agreements.
Public authorities — only where the law requires it.

We do not sell your data. To anyone. As a rule, we process data within the European Economic Area. If any provider (such as global infrastructure) also processes data outside the EEA, we ensure the safeguards required by the GDPR — in particular the standard contractual clauses approved by the European Commission.

§5. Your rights

The GDPR gives you a full set of rights — and we make exercising them easy:

Access — you can ask what data we hold about you and get a copy.
Rectification — you can correct outdated or inaccurate data.
Erasure — you can ask us to delete your data (the "right to be forgotten").
Restriction — you can ask us to do nothing with your data beyond storing it.
Portability — you can receive your data in a machine-readable format.
Objection — you can object to processing based on our legitimate interest.
Withdrawing consent — at any time, no reason needed.

An e-mail to hello@truelife.school is enough. We respond within a month at the latest.

If you believe we process data unlawfully, you can lodge a complaint with the President of the Polish Data Protection Authority (PUODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl). We'd appreciate it if you wrote to us first, though — most matters can be sorted out right away.

§6. Cookies and browser storage

We use no advertising or tracking cookies. We do not profile you and we do not watch what you do on other sites.
The Website uses only essential technical mechanisms: infrastructure cookies needed for security and performance, and the browser's local storage, where we save things like the progress of a form you are filling in — that data stays on your device.
If we ever want to enable analytics or marketing tools, we will first show you a banner with a real choice: accept or decline. Nothing of the kind will run without your consent.

§7. Children's data

The forms on the Website are meant for adults — parents and guardians. About the child we ask only for an age range (e.g. 7–9 years); we collect no names or any identifying data of children. If the Project reaches the stage of actual school enrollment, we will describe the rules for processing pupils' data separately — with the safeguards children deserve.

§8. How we protect data

We apply measures appropriate to the project's scale and stage, including:

encrypted data transmission (SSL/TLS);
access to data only for people who genuinely need it;
minimisation — we collect only the data needed for a specific purpose;
vetted infrastructure providers.

§9. Changes to this Policy

The Website will evolve, so this Policy may change too. The date at the top of the page always shows the version in force. We will announce material changes on the Website — and if we have your address, also by e-mail. If a change required new consent, we would simply ask you for it.

§10. Contact

For anything concerning your data:

E-mail: hello@truelife.school
Address: Tutlo sp. z o.o., ul. Nowogrodzka 42/501, 00-695 Warsaw, Poland

Doubts, a question, or want to check something? Write to us — we reply quickly, and like humans.