Privacy Policy

1. Controller

YOUR COMPANY NAME

STREET + NUMBER, POSTCODE CITY, Germany

Email: legal@example.com

2. Data We Process

• Account and login data (email, authentication tokens)
• Course and lesson progress data
• Payment and subscription metadata via Stripe
• Assistant interaction content you submit
• Technical logs required for security and operation

3. Purposes and Legal Bases (Art. 6 GDPR)

• Service delivery and account features: Art. 6(1)(b)
• Billing, invoicing, legal obligations: Art. 6(1)(c)
• Service security and abuse prevention: Art. 6(1)(f)
• Optional cookies/analytics/marketing (if enabled): Art. 6(1)(a)

4. Processors and Recipients

• Supabase (authentication, database)
• Stripe (payments, subscriptions)
• AI model providers configured by us (OpenAI and/or Anthropic)
• Hosting and infrastructure providers

5. International Transfers

Where data is transferred outside the EEA, we rely on lawful transfer mechanisms such as adequacy decisions and/or Standard Contractual Clauses.

6. Retention

We retain personal data only as long as necessary for the stated purposes, legal obligations, dispute resolution, and enforcement of agreements.

7. Your Rights

You may request access, rectification, erasure, restriction, data portability, and object to processing, subject to legal conditions. You may withdraw consent at any time where processing is based on consent.

8. Complaints

You have the right to lodge a complaint with a supervisory authority, in particular in your habitual residence, workplace, or the place of an alleged infringement.

9. Cookies and Device Storage

See our Cookie Policy for details on technically necessary and optional storage technologies and consent controls.