Privacy Policy
Last Updated: January 12, 2026
1. Introduction
VerbTrainer ("we", "our", "us"), operated by Pierre LEMON, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our language learning platform.
This policy applies to all users of VerbTrainer, whether you use the free version or a premium plan. By using our service, you consent to the processing of your data as described in this policy.
2. Information We Collect
2.1 Information You Provide
When you create an account and use VerbTrainer, we collect the following information that you actively provide:
- Account Information: Email address, display name (optional)
- Payment Information: Processed securely by Stripe. We never store full credit card details.
- Learning Data: Your exercise responses, progress, XP points, and streaks
- Support Communications: Messages you send to our support team
2.2 Automatically Collected Information
We automatically collect certain technical information when you use the service:
- Usage Data: Training sessions, accuracy rates, XP earned (stored locally in your browser)
- Technical Data: Browser type, device type, IP address (anonymized)
- Cookies: Essential cookies only for authentication and preferences
2.3 Information We Do NOT Collect
We want to be transparent about what we do not do:
- We do not sell your personal data to third parties
- We do not track you across other websites
- We do not use advertising trackers
- We do not use facial recognition or biometric data
3. How We Use Your Information
We use the collected information for the following purposes:
- Provide Services: Deliver training modules, track progress, sync across devices
- Personalization: Adapt learning paths and recommendations based on your progress
- Communication: Send important updates, security notices, and support responses
- Analytics: Understand usage patterns to improve the user experience
- Payment Processing: Handle transactions and prevent fraud
- Security: Detect and prevent fraud, abuse, and security threats
4. Data Storage & Security
4.1 Local Storage (Free Users)
Your progress is stored in your browser's localStorage by default. This means:
- Data stays on your device
- We cannot access it without your explicit consent
- Clearing browser data will delete progress (export regularly!)
- Data does not sync between devices
Premium Cloud Sync
Premium users get access to secure cloud storage with encrypted data syncing between devices. All data is encrypted with AES-256 during transfer and at rest. Stored on secure servers (EU region), backed up daily.
4.2 Security Measures
- HTTPS/TLS encryption for all data traffic
- Passwords hashed with bcrypt
- Regular security audits
- Least-privilege access controls
- Automatic session expiry after inactivity
4.3 Payment Data
Handled exclusively by Stripe (PCI DSS Level 1 certified). We never see or store your full card details.
5. Third-Party Services
We use the following trusted third-party services that may process your data:
Handles all payments and subscriptions. We never store your card details. Stripe is PCI DSS Level 1 certified. Stripe Privacy
Provides content delivery and DDoS protection. Data is processed within EU/EEA when possible.
Used for website analytics to understand user behavior and improve our service. We do NOT use Facebook Pixel or any third-party advertising networks.
6. Your Rights (GDPR Compliance)
Under GDPR, you have the right to:
- Access: Request a copy of your data (Settings → Export Data)
- Rectification: Correct inaccurate information
- Erasure: Delete your account and all associated data (Settings → Delete Account)
- Portability: Export your data in JSON format
- Objection: Opt-out of marketing emails (unsubscribe link included)
- Restriction: Request we stop processing your data
- Withdraw Consent: Withdraw your consent at any time
To exercise these rights, email privacy@verbtrainer.app or go to Settings → Privacy in the app. We respond within 30 days per GDPR requirements.
7. Data Retention
We retain your personal data as long as necessary to provide the service:
- Active Accounts: Retained as long as your account is active
- Inactive Accounts: Deleted after 24 months of inactivity (email notification sent first)
- Deleted Accounts: All personal data deleted within 30 days of request
- Payment Records: Retained for 7 years (legal requirement for accounting)
- Support Tickets: Retained for 3 years
8. Children's Privacy
VerbTrainer is suitable for learners 13+ years old. We do not knowingly collect data from children under 13. If you believe we have accidentally collected such data, contact us immediately at privacy@verbtrainer.app.
Users between 13 and 16 years old require parental consent to create an account, in accordance with GDPR provisions on children's consent.
9. International Transfers
Your data may be transferred to and processed in countries outside the EU. We ensure adequate protection through:
- EU Standard Contractual Clauses
- Adequacy decisions (e.g., UK, Switzerland)
- Additional technical and organizational safeguards
10. Changes to This Policy
We may update this Privacy Policy occasionally. Material changes will be notified via email and/or an in-app notice at least 30 days before they take effect. Continued use of VerbTrainer after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or to exercise your rights:
Response Time: Within 30 days per GDPR requirements.