Privacy policy

Article 1 — Data controller. The data controller is David Kinkead, Entreprise Individuelle (micro-entrepreneur), SIRET 89803518300018, residing at Ruelle Jacques Todesco, Peisey-Nancroix, 73210, France. Contact: [email protected].

Article 2 — Data collected.

• Account data: email address.
• Usage data: learning progress, session history.
• Technical data: IP address, recorded in server logs for 7 days.
• Authentication: a session cookie, strictly necessary for login.

Article 3 — Purposes. The data is processed to authenticate users, manage accounts, provide personalised practice, and improve the Service.

Article 4 — Legal basis. Processing relies on the performance of the contract (authentication, Service delivery) and on the legitimate interest of the publisher (security, improvement).

Article 5 — Sub-processors. The Service relies on the following sub-processors, each acting on behalf of the controller under Article 28 of the GDPR:

• Cartesia — text-to-speech.
• Google (Gemini) — generation of pedagogical explanations.
• Cloudflare R2 — storage of audio files.
• Mailgun — transactional email (OTP), EU region (api.eu.mailgun.net).
• Heroku (Salesforce) — EU region hosting.

Article 6 — Retention. Account and usage data are retained for the life of the account and deleted upon request. One-time codes expire after 15 minutes. Server logs are retained for 7 days.

Article 7 — Your rights. In accordance with the GDPR, you have the rights of access, rectification, erasure, portability, limitation, and opposition concerning your personal data. To exercise these rights, write to [email protected].

Article 8 — Complaint to the CNIL. If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy — TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Article 9 — Cookies. The Service uses only a session cookie strictly necessary for authentication. No tracking, analytics, or third-party cookies are placed.

Article 10 — Modification. The publisher may modify this policy. Users will be informed by email.