Privacy policy

This policy explains what Lesetag collects, why, where it is kept and who else sees it. It covers this website and the Lesetag app for iPhone and Android.

Who is responsible

Franklin Rodriguez, Germany. Email: hello@lesetag.app. Write to this address for anything about your data.

This website

The website sets no cookies, has no analytics and loads nothing from other companies: the fonts are served from lesetag.app itself. It is hosted by Cloudflare, which processes your IP address, browser type and the page you asked for in order to deliver the page and protect it from attacks. We do not use this information for anything else. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

If you email us, we use your address and message only to answer you and delete them when the conversation is over, unless we need them to meet a legal obligation.

The app

To give you an account and the app’s features we process (Art. 6(1)(b) GDPR, to provide the service you asked for):

• Account: your email address, your name if you give one, and a hash of your password. If you sign in with Google or Apple, we receive your email address and name from them; Apple can hide your real address.
• Preferences: interface and explanation language, topics, level, daily number of new words, your exam date if you set one.
• Learning data: the pieces you open, the words you add or mark as known, your review history, drill answers and mock exam results.
• What you write and say: texts you send for correction, questions you ask about a passage, and in speaking practice (paused for now) the transcript of what you said. Recordings are sent for transcription and never stored: the server keeps only the text, and the phone deletes the recording after each turn.
• Notifications: if you turn them on, a push token for your device.

We do not sell your data, show ads or use any analytics or advertising SDK in the app.

Who else processes it

We use these service providers. They process data only on our behalf and under data processing terms:

• Cloudflare (Cloudflare, Inc. and its EU entities) hosts the app’s server, database and media. The database is located in Western Europe and media storage is in the EU.
• AI model providers. To correct a text, answer a question or run a speaking turn, we send the content needed for that task (the text, question or recording, and the German passage it is about) to a model provider. We never send your email address or name.
  • Anthropic (Claude) handles these tasks. Under its commercial terms Anthropic does not train models on this content, processes it under its data processing addendum, and deletes it within 30 days; it keeps it longer only when its safety systems flag a request (up to 2 years) or the law requires it. Customers in the EU contract with Anthropic Ireland, Limited.
  • Illustrations for pieces are made with Cloudflare Workers AI and contain no personal data.
• Resend sends account emails: the address confirmation and password resets.
• Expo (650 Industries) delivers push notifications if you turn them on.
• Google and Apple, if you choose to sign in with them.
• App Store, Google Play and RevenueCat, once paid plans are available, handle purchases and subscription status. We never see your card details.

Some of these providers are based in the United States. Transfers there rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

Account and learning data are kept while your account exists. When you delete your account, everything linked to it is deleted from the database. Copies in backups disappear when those backups expire. Server logs are kept for a few days at most.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, restrict or object to its processing, and receive it in a portable format (Art. 15 to 21 GDPR). Where you gave consent, such as for notifications, you can withdraw it at any time. Write to hello@lesetag.app. You also have the right to complain to a data protection authority, for example the one where you live or work.

Children

Lesetag is not meant for children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, the new version is published here with a new date. If a change affects how we use data you already gave us, we tell you in the app first.