Privacy Policy

1. Introduction

Protecting your personal data is important to us. This privacy policy explains what data we collect, for what purpose, and how it is used, in accordance with the General Data Protection Regulation (GDPR).

We only collect and process data for the purposes described below.

2. Data Controller

This privacy policy applies to the following apps and websites, each operated by the same data controller (Fabian Grimme, Stavangerstr. 2, 10439 Berlin, Germany):

If you have any questions about this privacy policy or the processing of your data, please contact us at the email address listed above for the app or website you are using.

3. Data We Collect and Why

a) Flashcard Ratings

What data is collected

• Ratings provided by users for flashcards

Purpose

• To improve and evaluate flashcard content and learning quality

Legal basis

• Legitimate interest (Art. 6(1)(f) GDPR)

The ratings are used only for evaluating and improving the flashcards and are not used by us for profiling.

b) User Identification

What data is collected

• An anonymous user identifier (RevenueCat ID), or
• An email address, only if the user chooses to sign in

Purpose

• To associate flashcard ratings and usage with a specific user
• To enable account-related functionality if the user signs in

Legal basis

• Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
• Consent, where applicable (Art. 6(1)(a) GDPR)

Users can use the service anonymously. Providing an email address is optional.

c) Newsletter Subscription

What data is collected

• Email address

Purpose

• To send the newsletter

Legal basis

• Consent (Art. 6(1)(a) GDPR)

The email address is used exclusively for sending the newsletter. Users can unsubscribe at any time via the link provided in each newsletter.

d) Advertising and Google AdMob

The app may display advertisements provided by Google AdMob, a mobile advertising service operated by Google Ireland Limited.

What data may be collected by AdMob

Depending on the user's device settings, consent choices, and region, Google AdMob may collect and process information such as:

• Device identifiers
• IP address
• Approximate location information
• Advertising identifiers
• App interaction data
• Diagnostic and performance information

Purpose

• To display and measure advertisements
• To limit repetitive ads
• To detect fraud and abuse
• To improve advertising services
• To personalize ads, where consent has been given

Legal basis

• Consent (Art. 6(1)(a) GDPR), where required
• Legitimate interest (Art. 6(1)(f) GDPR) for basic advertising functionality and service security

Where legally required, users will be asked for consent before personalized advertising is enabled. Users can manage advertising preferences through their device settings, including limiting ad tracking or resetting advertising identifiers.

For more information about how Google processes data, please refer to Google's Privacy Policy: https://policies.google.com/privacy

Consent management

For users in the European Economic Area (EEA) and the UK, we use Google's User Messaging Platform (UMP) to collect and manage advertising consent choices before ads are personalized. Consent choices can be changed at any time via the in-app privacy/consent settings.

e) Crash and Error Reporting

What data is collected

• Crash reports and error logs, including device information, app version, and stack traces

Purpose

• To identify, diagnose, and fix technical issues and improve app stability

Legal basis

• Legitimate interest (Art. 6(1)(f) GDPR)

We use Sentry (Functional Software, Inc.) for crash and error reporting. For more information, see Sentry's privacy policy: https://sentry.io/privacy/

f) Push Notifications

What data is collected

• A device push token used to deliver notifications (for example, duel invitations and updates)

Purpose

• To send app-related notifications the user has enabled

Legal basis

• Consent, granted via the device's notification permission prompt (Art. 6(1)(a) GDPR)

Users can disable notifications at any time in their device settings.

g) Speech Recordings and AI-Assisted Processing

What data is collected

• Audio recordings submitted for pronunciation and speech evaluation
• Text submitted for AI-assisted validation (for example, in Pattern Chat Duel mode)

Purpose

• To generate pronunciation feedback and pitch/tone analysis
• To generate spoken audio for words and sentences (text-to-speech)
• To validate free-text answers in interactive exercises

Legal basis

• Performance of a contract (Art. 6(1)(b) GDPR)

Speech and text submitted for these features are processed using Microsoft Azure Cognitive Services (speech recognition, text-to-speech, and pronunciation assessment) and DeepSeek (AI-assisted answer validation). Audio recordings may be stored to support these features and to improve their accuracy.

4. Third-Party Services

The app uses selected third-party service providers to support functionality, subscriptions, communication, and monetization.

• RevenueCat for subscription and purchase management
• Google AdMob for advertising
• Sentry for crash and error reporting
• Microsoft Azure Cognitive Services for speech recognition, text-to-speech, and pronunciation assessment
• DeepSeek for AI-assisted answer validation
• Newsletter service provider, if a newsletter subscription is used

These providers may process data in accordance with their own privacy policies and applicable data protection requirements.

5. No Further Use of Data

The data collected directly by us is not:

• Sold to third parties
• Shared with third parties for independent marketing purposes by us
• Combined with unrelated external data sources by us
• Used for automated decision-making by us

Data is processed only for the purposes explicitly described in this policy. Please note that third-party providers such as Google AdMob may process data according to their own privacy policies.

6. Data Storage and Retention

Data is stored only for as long as necessary to fulfill the stated purposes or until the user:

• Deletes their account, or
• Withdraws consent, for example by unsubscribing from the newsletter or changing advertising consent preferences

Anonymous data that can no longer be linked to an identifiable user may be retained for statistical or analytical purposes.

7. Your Rights

Under GDPR, you have the right to:

• Access your data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Delete your data (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us using the email address listed for the relevant app or website in Section 2 above.

8. Children's Privacy

The app is not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. Advertisements served via Google AdMob to users who are known to be children are limited to non-personalized ads, in accordance with Google's Families Policy requirements.

If you believe a child has provided us with personal data, please contact us using the email address listed for the relevant app or website in Section 2 above so we can delete it.

9. Changes to This Privacy Policy

This privacy policy may be updated if the scope of data processing changes. The current version will always be available within the app or on the website.