Privacy Policy

Data Controller

The party responsible for data processing on this website is:

Data Collection & Processing

We collect and process the following data to provide and improve our services:

• Google Account Data (Name, Email, Avatar) via Clerk for secure authentication
• Learning history and spaced repetition metrics for personalized study schedules
• User-generated vocabulary lists, ratings, and study preferences
• Anonymized usage metrics to enhance application performance

Purpose of Data Processing

Your data is strictly used for the following purposes:

• Secure user authentication and session management via Clerk (with Google Login)
• Tailoring the learning algorithm (FSRS) to your memory retention
• Continuous optimization of app features and user experience
• Essential service notifications and account updates

Legal Basis for Processing

We process your personal data in accordance with Art. 6 GDPR based on:

• Contractual Necessity (Art. 6(1)(b) GDPR): To provide the app functions (Login, Learning progress).
• Legitimate Interest (Art. 6(1)(f) GDPR): For security and technical optimization of the services.
• Consent (Art. 6(1)(a) GDPR): Where you have explicitly granted it.

Third-Party Disclosures

We do not sell your personal data. Data is shared only when necessary:

• With Clerk (Authentication Provider) and Google (Identity Provider)
• With Vercel Inc. (Hosting) and Prisma Data (Database)
• With analytics providers (anonymized) to understand usage patterns

International Data Transfers

As we use service providers like Vercel, Clerk, and Google, data may be transferred to the USA. This transfer is safeguarded by adequacy decisions (Data Privacy Framework) or Standard Contractual Clauses to ensure a level of data protection consistent with EU standards.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. You may request account deletion at any time, which will permanently erase your data.

Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right to access your stored personal data
• Right to correct inaccurate or incomplete data
• Right to request deletion of your data ('Right to be forgotten')
• Right to receive your data in a structured, machine-readable format
• Right to object to the processing of your data

Cookies & Local Storage

We use only essential cookies and local storage to maintain your login session and save learning states. As these are technically necessary for the operation of the app, no separate consent (opt-in) is required.

Data Security

We employ industry-standard technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

Policy Updates

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated to you.

Contact Us

For privacy-related inquiries or to exercise your rights, please contact: