Privacy Policy

The data controller is:

We have not appointed a Data Protection Officer. Privacy questions should be sent to support@parolu.guru.

We collect and process the categories of personal data described below.

Account data

This may include:

• email address;
• name, if provided by your login provider or account profile;
• authentication provider information;
• Google account identifier, if you use Google login;
• magic link login information;
• account status;
• account creation and login timestamps.

Learning data

This may include:

• selected languages and courses;
• course progress;
• lesson progress;
• words and expressions shown to you;
• words marked as known, active, dormant, learned, or due for review;
• typed answers;
• review ratings;
• answer correctness;
• hint usage;
• review history;
• spaced repetition scheduling data;
• streaks, study time, and learning statistics;
• progress through levels, skills, lessons, or similar course structures.

AI interaction data

Some Parolu features use AI to generate or assist with explanations, feedback, examples, sentence support, synonym handling, grammar notes, and follow-up answers.

To provide those features, we may process and send relevant information to OpenAI, including:

• sentence context;
• target word or expression;
• your typed answer;
• correction or feedback context;
• follow-up questions you ask inside AI-supported features;
• generated explanations or answers;
• language pair and relevant learning context.

Parolu does not allow users to upload their own courses, decks, audio, or learning materials. We do not store user-generated learning content for publication or reuse as Parolu course content.

Technical data

This may include:

• IP address;
• device type;
• browser type and version;
• operating system;
• approximate location derived from technical information;
• language settings;
• timezone;
• pages or screens visited;
• dates and times of access;
• server logs;
• error and diagnostic information;
• security and anti-abuse signals.

Communication preferences and delivery data

If you enable learning reminder emails, we may process:

• whether reminders are enabled;
• when and under which consent wording you enabled or disabled them;
• the reminder type and scheduled local date;
• the language and due-word count used to personalize a reminder;
• delivery status and the email provider message identifier.

Payment and subscription data

If you subscribe to a paid plan, payment processing is handled by Stripe or another payment provider shown at checkout.

We may receive and store limited subscription-related information, such as:

• Stripe customer ID;
• subscription plan;
• subscription status;
• billing period;
• invoice status;
• payment event status;
• country or tax information needed for billing;
• cancellation status.

We do not store your full card number or full payment card details.

Analytics data

We use Google Analytics to understand how people find and use Parolu.

Google Analytics may process information such as:

• pages viewed;
• interactions with the website or app;
• browser and device information;
• approximate location;
• referral source;
• session information;
• cookie or similar analytics identifiers where enabled.

We collect data when:

• you create or use an account;
• you log in with Google or magic link;
• you select a language or course;
• you complete exercises;
• you type answers;
• you review words;
• you use AI-supported explanations or feedback;
• you start, manage, or cancel a subscription;
• you contact us;
• you visit the website or use the app;
• your browser, device, or network sends technical information;
• third-party services, such as Google, Stripe, Google Analytics, or OpenAI, provide information necessary for the Service.

We use personal data for the following purposes.

To provide Parolu

We use data to:

• create and manage your account;
• let you log in;
• show courses and lessons;
• provide exercises;
• record your answers;
• calculate review schedules;
• track progress;
• provide audio, explanations, feedback, and AI-supported features;
• synchronize your learning across sessions and devices.

To personalize learning

We use learning data to:

• decide which words should be shown;
• schedule reviews;
• identify words you already know;
• identify difficult items;
• adapt the learning flow;
• show progress and statistics.

To process subscriptions

We use payment and subscription data to:

• enable paid access;
• manage monthly subscriptions;
• process cancellations;
• handle billing status;
• prevent fraud;
• maintain accounting and tax records.

To provide AI-supported features

We use AI interaction data to:

• generate explanations;
• evaluate possible synonyms;
• explain grammar mismatches;
• answer follow-up questions;
• improve the usefulness of feedback;
• support language-learning interactions.

To maintain security and reliability

We use technical data and logs to:

• keep the Service secure;
• detect abuse, fraud, attacks, or unauthorized access;
• debug technical problems;
• monitor performance;
• maintain reliable operation.

To understand and improve the product

We use analytics and aggregated product data to:

• understand how Parolu is used;
• improve onboarding, learning flows, and course structure;
• measure product performance;
• identify confusing or broken parts of the Service;
• make design and content improvements.

To communicate with you

We may use your email address to:

• support account access;
• respond to your messages;
• send important service, billing, security, or legal notices.
• send optional, personalized reminders about due reviews and returning to learning, if you enable them.

Learning reminder emails may use your name, timezone, learning language, recent learning dates, and due-review count. The current schedule allows up to two emails after a pause in learning and a Monday planning email when relevant, with no more than three learning reminder emails in seven days. Any completed review stops the pause sequence.

These reminders are off by default. You can turn them off in Settings or use the unsubscribe option in any reminder email. Turning them off does not affect account, security, billing, or legal messages.

To comply with legal obligations

We may use data to:

• comply with tax and accounting rules;
• respond to lawful requests;
• enforce our Terms of Service;
• protect our rights and the rights of users;
• meet legal and regulatory obligations.

Where the GDPR applies, we rely on the following legal bases.

Contract

We process data where necessary to provide Parolu under our Terms of Service, including account access, learning features, review scheduling, AI-supported learning features, subscriptions, and customer support.

Legitimate interests

We process data where necessary for our legitimate interests, including:

• securing the Service;
• preventing abuse;
• improving Parolu;
• understanding usage;
• maintaining server logs;
• debugging;
• developing better learning experiences;
• protecting our legal rights.

We use this basis only where our interests are not overridden by your rights and freedoms.

Consent

We rely on consent where required, including for certain analytics cookies or similar technologies and optional learning reminder emails.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that happened before consent was withdrawn.

Legal obligation

We process data where necessary to comply with legal obligations, including tax, accounting, consumer protection, and regulatory obligations.

Parolu uses OpenAI to provide AI-supported language-learning features.

When you use AI-supported features, relevant learning context may be sent to OpenAI so that OpenAI can generate explanations, feedback, examples, or answers.

This may include:

• the language you are learning;
• the sentence or exercise context;
• the target word or expression;
• your typed answer;
• feedback context;
• your follow-up question;
• related course or learning context.

AI output may be inaccurate, incomplete, unnatural, or inappropriate in some contexts. You should not rely on AI-generated content for important, professional, legal, medical, immigration, academic, or safety-critical communication.

We use AI processing to provide the Service and improve the learning experience. We do not sell your AI interaction data.

Parolu supports Google login and magic link login.

If you use Google login, Google may provide us with information such as your email address, name, and account identifier, depending on the permissions and information available from Google.

If you use magic link login, we use your email address to send or validate a login link. Login emails are used for account access, not marketing.

Paid subscriptions are processed by Stripe.

Stripe may collect and process payment details, billing information, card information, authentication data, fraud prevention data, and related transaction information.

We receive limited information from Stripe that allows us to manage your subscription, such as customer ID, subscription status, plan, invoice status, and payment event information.

We do not store your full card number or full card details.

Stripe processes personal data according to its own privacy and security practices.

We use Google Analytics to understand how users interact with Parolu and to improve the Service.

Google Analytics may use cookies or similar technologies. Where required by law, analytics cookies or similar technologies should be used only after appropriate consent.

You can control cookies through your browser settings and, where available, through Parolu’s cookie or consent controls.

Google may process analytics data according to its own privacy and data processing terms.

Parolu uses cookies, local storage, or similar technologies.

Essential technologies

These are needed to:

• keep you logged in;
• maintain session security;
• remember basic settings;
• provide core app functionality;
• prevent abuse;
• support billing or account access.

Essential technologies are necessary for the Service and cannot always be disabled without affecting functionality.

Analytics technologies

We may use analytics cookies or similar technologies to understand product usage and improve Parolu.

Where required, we ask for consent before using non-essential analytics technologies.

You can also control cookies through your browser settings. Blocking cookies may affect some features.

We maintain server logs to operate, secure, and debug the Service.

Server logs may include IP address, timestamps, request information, browser or device information, error information, and related technical data.

We use server logs for security, reliability, debugging, abuse prevention, and operational monitoring.

Parolu does not currently allow users to upload or import their own courses, decks, sentences, audio, notes, or learning materials.

You may type answers and, where AI-supported features are available, ask follow-up questions. These inputs may be processed to provide the Service and may be reflected in learning history, feedback, or AI interaction processing as described in this Privacy Policy.

We do not use user-provided answers or questions as public Parolu course content.

We may share personal data with service providers that help us operate Parolu.

These may include:

• hosting and infrastructure providers;
• authentication providers, including Google;
• payment processors, including Stripe;
• AI providers, including OpenAI;
• analytics providers, including Google Analytics;
• email providers, including Resend, for magic link, operational, and optional learning reminder emails;
• legal, accounting, tax, or compliance advisers;
• public authorities, courts, or regulators where required by law.

We share only the data reasonably needed for the relevant purpose.

We do not sell personal data.

Parolu is operated from Poland, but some service providers may process data outside Poland, the European Economic Area, or your country of residence.

Where required by law, we use appropriate safeguards for international transfers. These may include:

• adequacy decisions;
• Standard Contractual Clauses;
• contractual, technical, and organizational safeguards;
• other lawful transfer mechanisms.

We keep personal data only as long as needed for the purposes described in this Privacy Policy.

In general:

• account and learning data are kept while your account is active;
• after account deletion, personal data is deleted unless limited retention is needed for legal, billing, tax, security, dispute, or backup reasons;
• billing and accounting records may be kept as required by applicable law;
• server logs are kept for a limited period needed for security, debugging, and operations;
• learning reminder consent and delivery records are kept while needed to respect your preference, prevent duplicate messages, demonstrate consent, and maintain email deliverability;
• backups are deleted or overwritten according to normal backup rotation;
• aggregated or anonymized data may be kept because it no longer identifies you.

You can delete your account through the Service where this feature is available.

After account deletion, we delete your personal data unless we must keep limited information for legal, billing, security, dispute, tax, accounting, or backup reasons.

Account deletion may permanently remove your learning history, progress, course state, review schedule, and subscription-related access inside Parolu.

If you cannot delete your account in the app or need help, contact support@parolu.guru.

Depending on where you live and the laws that apply, you may have rights regarding your personal data.

Under the GDPR, these may include:

• the right to access your personal data;
• the right to correct inaccurate data;
• the right to delete your data;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw consent where processing is based on consent;
• the right not to be subject to certain decisions based solely on automated processing;
• the right to lodge a complaint with a supervisory authority.

To exercise your rights, contact support@parolu.guru.

We may need to verify your identity before responding. We will respond within the time required by applicable law.

If you are in Poland, you may contact the Polish supervisory authority:

Parolu uses automated scheduling and personalization to support learning.

For example, the Service may automatically decide:

• which word to show next;
• when a word should return for review;
• whether a word appears to be difficult;
• whether an item should move through the learning flow;
• how progress is calculated.

This personalization is part of the learning service. It does not produce legal, financial, employment, credit, healthcare, or similarly significant decisions about you.

Parolu does not set a separate minimum age and is not specifically directed to children.

If you are not legally able to use the Service or make purchases on your own, you should use Parolu only with the consent and supervision of a parent or legal guardian.

If a parent or guardian believes that a child has provided personal data unlawfully or without required consent, they can contact us at support@parolu.guru.

The same Privacy Policy applies to individual users, teams, schools, and organizations.

Parolu does not currently provide organization-admin visibility into learner progress.

If team, school, or organization features are enabled in the future, organization administrators may be able to see certain account, access, and learning progress information for users connected to that organization. We will describe such features in the Service or update this Privacy Policy where appropriate.

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

No online service can be completely secure. You are responsible for keeping your login method, email account, and devices secure.

If you believe your account or data has been compromised, contact support@parolu.guru.

Parolu may contain links to third-party websites or services.

We are not responsible for the privacy practices of third-party websites or services. You should read their privacy policies before using them.

We may update this Privacy Policy from time to time.

If changes are minor, we may update the “Last updated” date. If changes are material, we will try to notify you through the Service, by email, or by another reasonable method.

The updated Privacy Policy applies from the date stated in it or from the date it is made available, unless a later date is specified.

For questions, requests, or complaints about this Privacy Policy or your personal data, contact: