Privacy Policy
This is a translation provided for your convenience. The legally binding version is the German original.
1. Controller
The controller for the processing of data on this website is:
Kurt Scholz
Lerchenauer Str. 180, 80935 München, Germany
Email:
2. What data we process
- Account data: your email address and a password (stored encrypted by our authentication provider; not readable by us in plain text).
- Security question: a security question you choose and its answer, stored in hashed (non-reversible) form, used solely to reset your password.
- Exercise content: texts and answers you enter, worksheet images you upload, saved or shared results and the associated AI feedback.
- Vocabulary progress: your personal learning progress and your personal meaning adjustments.
- Technical data: your IP address is processed briefly to enforce usage quotas and prevent abuse.
3. Purposes and legal bases
- Providing the service and managing your account – Art. 6(1)(b) GDPR (contract or pre-contractual measures).
- AI-assisted correction and feedback on your input – Art. 6(1)(b) GDPR; the feedback is generated by an AI model (see section 5).
- Rate limiting and abuse prevention (processing of the IP address) – Art. 6(1)(f) GDPR (legitimate interest in stable, abuse-free operation).
4. Recipients and processors
To provide the service we use carefully selected providers with whom data-processing agreements (Art. 28 GDPR) are in place:
- Google (Firebase): authentication, database and file storage. Provider: Google Ireland Ltd. or Google LLC (USA).
- Vercel Inc. (USA): hosting of the application.
- Mistral AI SAS (France, EU): AI processing of the texts you enter and images you upload to generate corrections and feedback.
5. Processing by artificial intelligence
The texts you enter and images you upload are transmitted to and processed by the AI model of Mistral AI (EU) to generate corrections, feedback and exercises. The feedback shown is AI-generated and may contain errors.
6. Transfers to third countries
Google and Vercel may also process data in the USA. Such transfers take place on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR (EU standard contractual clauses or the EU-US Data Privacy Framework).
7. Retention period
Account-related data is stored for as long as your account exists. You can delete your account and all associated data yourself at any time (see “Account” in the application); the data is then removed without undue delay. Technical counters used for rate limiting are kept only briefly.
8. Your rights
Under the GDPR you have the right to:
- access (Art. 15), rectification (Art. 16) and erasure (Art. 17),
- restriction of processing (Art. 18) and data portability (Art. 20),
- object to processing based on legitimate interests (Art. 21).
You can delete your account and your data directly in the application under “Account”. For any other matters you can reach us at the email address given above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Bavarian State Office for Data Protection Supervision (BayLDA).
9. Cookies and tracking
This application uses no analytics, advertising or tracking services. Only technically necessary data required for operation and your login is processed.
