🔒

Privacy Policy

Last updated: January 1, 2026

1. Data Controller

OpiFluent ("we") is the data controller for your personal data. Contact: [email protected]

2. Data We Collect

We collect: email address, password (hashed), preferred language, CEFR level, learning statistics (XP, streak, words learned), session history. We do not collect payment data (handled by Stripe).

3. Purpose of Processing

Your data is used to: provide the learning service, personalize your experience, track your progress, send transactional emails (account confirmation, magic link).

4. Legal Basis

Processing is based on: contract performance (Art. 6.1.b GDPR) for service delivery, your consent (Art. 6.1.a GDPR) for marketing communications.

5. Retention Period

Your data is kept as long as your account is active. After account deletion, data is erased within 30 days.

6. Your Rights (GDPR)

You have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17 — button in your profile), portability (Art. 20 — contact us), objection (Art. 21). To exercise your rights: [email protected]

7. Hosting

Data is hosted on Supabase (EU Frankfurt region, Germany) and Vercel (Edge Network). These providers are GDPR compliant.

8. Cookies

We only use functional cookies (auth session). No advertising or third-party tracking cookies.

9. Contact

For any questions: [email protected]

© 2026 OpiFluent · 🌍