Privacy Policy

1. Controller

The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer, as we are not required to do so under Article 37 GDPR and Section 38 of the German Federal Data Protection Act.

2. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include:

• Email address and password for account creation
• Usage data and learning progress
• Device and browser information for technical support
• Communications you send to us

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Communicate with you about products, services, and promotions
• Monitor and analyze usage patterns

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information in the following circumstances:

• With service providers who assist us in operating our platform
• When required by law or to protect our rights
• In connection with a business transfer or merger

5. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

6. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can control cookie settings through your browser preferences.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Data portability
• Opt-out of marketing communications

8. Legal Bases, Processors and Retention

We process your data on the following legal bases: performance of the contract (Art. 6(1)(b) GDPR) for your account, access entitlement and learning progress; compliance with legal obligations (Art. 6(1)(c) GDPR) for retention of billing records; and our legitimate interest (Art. 6(1)(f) GDPR) in the security of the service, which is why we store the IP address and browser of your login sessions in order to detect unauthorised account sharing and abuse.

We use the following service providers, who process data on our behalf or, where they act as the seller of record, as independent controllers:

• Creem — payment processing, checkout and billing
• Our hosting provider — operation of the servers on which the service runs
• Our email provider — delivery of verification and password reset emails

We retain account and learning data for as long as your account exists. You can delete your account at any time in your account settings, after which your personal data is removed. Billing records are retained for the statutory retention periods under German commercial and tax law.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected]