🔒 Privacy Policy

1. Introduction

VerbTrainer ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our language learning platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name (optional)
• Payment Information: Processed securely by Stripe. We never store full credit card details.
• Support Communications: Messages you send to our support team

2.2 Automatically Collected Information

• Usage Data: Training sessions, accuracy rates, XP earned (stored locally in your browser)
• Technical Data: Browser type, device type, IP address (anonymized)
• Cookies: Essential cookies only for authentication and preferences

2.3 Information We Do NOT Collect

• We do not track you across other websites
• We do not sell your data to third parties
• We do not use advertising trackers

3. How We Use Your Information

• Provide Services: Deliver training modules, track progress, sync across devices
• Improve Platform: Analyze usage patterns to enhance features
• Customer Support: Respond to your inquiries and resolve issues
• Payment Processing: Handle transactions and prevent fraud
• Communication: Send important updates (opt-out available)

4. Data Storage & Security

Local Storage: Your progress is stored in your browser's localStorage by default. This means:

• Data stays on your device
• We cannot access it without your explicit consent
• Clearing browser data will delete progress (export regularly!)

Cloud Storage (Premium): Premium users can optionally enable cloud sync:

• Data encrypted in transit (TLS 1.3)
• Stored on secure servers (EU region)
• Backed up daily

Payment Data: Handled exclusively by Stripe (PCI DSS Level 1 certified). We never see or store your full card details.

5. Third-Party Services

We use the following trusted third-party services:

• Stripe: Payment processing (Stripe Privacy)
• Cloudflare: CDN and DDoS protection
• Plausible Analytics: Privacy-friendly, anonymized analytics (GDPR compliant)

We do NOT use: Google Analytics, Facebook Pixel, or any third-party advertising networks.

6. Your Rights (GDPR Compliance)

Under GDPR, you have the right to:

• Access: Request a copy of your data (Settings → Export Data)
• Rectification: Correct inaccurate information
• Erasure: Delete your account and all associated data (Settings → Delete Account)
• Portability: Export your data in JSON format
• Objection: Opt-out of marketing emails (unsubscribe link included)
• Restriction: Request we stop processing your data

To exercise these rights, email: privacy@verbtrainer.app

7. Data Retention

• Active Accounts: Retained as long as your account is active
• Inactive Accounts: Deleted after 24 months of inactivity (email notification sent first)
• Payment Records: Retained for 7 years (legal requirement for accounting)
• Support Tickets: Retained for 3 years

8. Children's Privacy

VerbTrainer is suitable for learners 13+ years old. We do not knowingly collect data from children under 13. If you believe we have accidentally collected such data, contact us immediately at privacy@verbtrainer.app.

9. International Transfers

Your data may be transferred to and processed in countries outside the EU. We ensure adequate protection through:

• EU Standard Contractual Clauses
• Adequacy decisions (e.g., UK, Switzerland)
• Privacy Shield equivalent frameworks

10. Changes to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated "Last Updated" date. Continued use of VerbTrainer after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@verbtrainer.app
Response Time: Within 30 days per GDPR requirements