Privacy Policy

1) Data Controller

Alberto Alejandro Del Carpio Olemar
Digital Polyglot
Heußweg 3, 20257 Hamburg, Germany
Questions or requests: support@digitalpolyglot.com
Legal contact: contact@digitalpolyglot.com

2) Data We Collect

• Account data (name, email, user ID, auth provider ID).
• Authentication metadata (including social login identifiers).
• Subscription and billing status (plan, trial status, Stripe customer/subscription IDs).
• Learning data (progress, favorites, saved content, listening/reading activity).
• Technical and device data (IP, browser, logs, timestamps).
• Mobile device identifiers, operating system, and app version (when you use the mobile app).
• Push notification tokens (when you enable reminders or notifications).
• In-app purchase metadata (when applicable).
• Analytics and product usage events.
• Support and feedback communications.

3) Sources of Data

• Directly from you.
• Automatically through app usage and cookies/local storage.
• From service providers (authentication, payments, infrastructure).

4) How We Use Data

• Provide and secure your account and the Services.
• Personalize story recommendations and learning experience.
• Manage subscriptions, trials, and billing.
• Measure product performance and improve features.
• Prevent fraud and abuse; comply with legal obligations.
• Provide customer support and service communications.

We may use aggregated and de-identified usage data to develop, train, and evaluate algorithmic and machine-learning systems that improve learning recommendations, content quality, and educational outcomes. We use identifiable data to train such systems only where we have a valid legal basis under applicable data protection law or your explicit consent.

5) Legal Bases (EEA/UK)

Where applicable, we process data under contract performance, legitimate interests, consent (when required), and legal obligations.

6) Service Providers

We use third-party processors to operate and improve the Services. Current processors include:

• Clerk (authentication and identity)
• Stripe (payments and billing)
• Vercel (hosting and edge infrastructure)
• Sentry (error monitoring)
• Google Analytics (web analytics, used only with your consent)
• OpenAI (speech-to-text transcription and content generation in the Studio editorial workflow)
• Anthropic (content generation and editorial review in the Studio)
• ElevenLabs (text-to-speech generation for story narration)
• Sanity (content management for stories, vocabulary, and assets)
• Modal (compute infrastructure for self-hosted text-to-speech)

We do not sell identifiable personal data for money. We may share aggregated, de-identified, or anonymized data (data that cannot reasonably be used to identify you) for research, product improvement, partnerships, and analytics purposes, in compliance with applicable law.

7) Business Transfers

If we are involved in a merger, acquisition, reorganization, sale of assets, or insolvency event, personal data may be transferred or disclosed as part of that transaction, subject to the receiving party honoring the protections of this Privacy Policy or providing equivalent protections. We will provide notice where required by applicable law.

8) International Transfers

Several of our service providers are located outside the European Economic Area, including in the United States (for example: Clerk, Stripe, Vercel, Sentry, Google Analytics, OpenAI, Anthropic, ElevenLabs, Sanity, and Modal). Where we transfer personal data outside the EEA, we apply safeguards such as the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914/EU), the EU-US Data Privacy Framework where the recipient is certified, or other lawful transfer mechanisms.

9) Retention

We retain personal data only as long as needed to provide Services, support your account, comply with legal obligations, and resolve disputes. Indicative retention periods:

• Account and profile data: until you request deletion or close your account.
• Learning data and progress: while your account is active; aggregated or anonymized after deletion where permitted by law.
• Product usage events and analytics: typically up to 24 months in identifiable form, then aggregated or deleted.
• Technical logs: typically up to 90 days.
• Support and feedback communications: typically up to 24 months after the last contact.
• Billing, invoicing, and tax records: retained as required by law (in Germany, generally up to 10 years under §147 AO).

10) Your Rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to withdraw consent where applicable. Contact us at support@digitalpolyglot.com.

If you are in the EEA/UK, you may also have the right to lodge a complaint with your local supervisory authority. For users in Germany, the competent authority for our establishment is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

11) Account & Data Deletion

You can request account/data deletion by emailing support@digitalpolyglot.com. For Facebook Login users, deletion instructions are available at /data-deletion.

12) Security

We implement reasonable technical and organizational safeguards, but no system is completely secure.

13) Children

The Services are intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided personal data without verifiable parental consent, please contact support@digitalpolyglot.com and we will delete it.

14) Policy Changes

We may update this policy and will publish updates on this page with a revised date.