Adatvédelmi szabályzat

1. Introduction

Welcome to Fluentia, operated by Arendt Digital LLC ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (visitfluentia.com), use our application (app.visitfluentia.com), or use any of our related services.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account information (email address, password)
• Profile information (name, gender, language preferences, learning level)
• Content you create (conversations with AI tutors, stories, grammar exercises, flashcard decks)
• Payment information (processed securely through Stripe; we do not store your full card details)
• Communications with us (support requests, feedback, contact form submissions)

2.2 Information Automatically Collected

When you use our services, we automatically collect certain information:

• Device information (device type, operating system, browser type)
• Usage data (pages visited, features used, time spent, learning progress and streaks)
• Log data (IP address, access times, error logs)
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Personalize your learning experience (AI conversations, content difficulty, recommendations)
• Generate AI-powered content tailored to your language level and preferences
• Detect, prevent, and address technical issues
• Comply with legal obligations

3.1 Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on the following legal grounds under the GDPR:

• Contract performance: Providing the core service (account management, AI conversations, learning features, payment processing) is necessary to fulfill our contract with you.
• Consent: Analytics cookies (such as Google Analytics) are used only with your explicit consent via our cookie banner.
• Legitimate interest: We process data for security monitoring, fraud prevention, debugging, and service improvement where these interests are not overridden by your rights.

4. AI Data Processing

Fluentia is an AI-powered language learning platform. To provide our core services, we send certain user data to third-party AI providers for processing:

• Conversation text: Messages you send in AI conversations are transmitted to our AI providers (Google Gemini and OpenAI) to generate responses
• Learning content: Text from grammar exercises, stories, and flashcards may be processed by AI providers to generate educational content
• Language preferences: Your native language, target language, and proficiency level are shared with AI providers to personalize responses
• Translation text: Text you request translations for is sent to DeepL for processing
• Text-to-speech text: Text you listen to is sent to AWS Polly or Google Cloud Text-to-Speech for audio generation

We use API-tier access to AI providers, which means your data is generally not used to train their models. However, AI providers may retain data temporarily for abuse monitoring and safety purposes in accordance with their own privacy policies. We encourage you to review the privacy policies of our AI providers listed in Section 5.

Important: Do not share sensitive personal information (such as financial details, health information, or government ID numbers) in AI conversations or any content you create on the platform.

5. Third-Party Services

We use third-party services that may collect or process information about you. These services include:

• Google Gemini: Primary AI provider for conversations, stories, and grammar content. Google Privacy Policy
• OpenAI: AI-powered content generation and text-to-speech. OpenAI Privacy Policy
• Supabase: Database, authentication, and storage services. Supabase Privacy Policy
• Stripe: Payment processing for subscriptions and purchases. Stripe collects payment information directly; we do not have access to your full card details. Stripe Privacy Policy
• Google Cloud Text-to-Speech: Text-to-speech audio generation. Google Privacy Policy
• AWS Polly: Text-to-speech audio generation. AWS Privacy Policy
• DeepL: Translation services. DeepL Privacy Policy
• Google Analytics: Website analytics on our marketing site (visitfluentia.com). Collects anonymized usage data via cookies. Only loaded with your consent. Google Privacy Policy
• Google OAuth: "Sign in with Google" authentication. When you choose to sign in with Google, we receive your email address and basic profile information from Google. Google Privacy Policy
• Vercel: Website hosting and content delivery. Vercel Privacy Policy

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Analytics cookies (such as Google Analytics) are only loaded after you provide consent via our cookie banner.

For more information, please see our Cookie Policy.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption of data in transit (HTTPS) and at rest, secure authentication via Supabase, and row-level security on our database. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data breach notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable law.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information and account
• Portability: Request transfer of your data in a portable format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise these rights, please contact us at dev@arendtdigital.com. We will respond to your request within 30 days.

9. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• No Sale of Personal Information: We do not sell your personal information to third parties

To exercise these rights, contact us at dev@arendtdigital.com.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

AI conversation history and learning data are retained while your account is active to support your learning progress. Cached data (such as text-to-speech audio and translation results) may be retained for performance purposes.

11. Children's Privacy

Our services are not intended for children under 13 years of age (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete that information.

12. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate (including the EU for some AI processing). By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will make reasonable efforts to notify you (such as a notice within the application).

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: dev@arendtdigital.com
Business Name: Arendt Digital LLC
Mailing Address: Madison Heights, Michigan 48071

We do not currently have a Data Protection Officer. For all privacy-related inquiries, please contact us at dev@arendtdigital.com.