Draft: this document is awaiting legal review and still contains placeholder company and contact details. Do not rely on it yet.
EU Privacy Rights
Last updated: 17-08-2026
This page supplements the Privacy Policy and applies if you are in the European Economic Area, the United Kingdom or Switzerland. It sets out each right you have over your personal data and, for each one, exactly how to use it.
Right of access (Article 15)
You can ask us to confirm whether we hold personal data about you and, if we do, to give you a copy of it together with an explanation of why we hold it, who we share it with and how long we keep it.
How to use it
Email PLACEHOLDER: privacy@example.com with "Subject access request" in the subject line, or use the Feedback page and choose the privacy topic.
Right to rectification (Article 16)
You can have inaccurate data about you corrected, and incomplete data completed.
How to use it
Most of it you can change yourself: your name, your learning goal and level, your app language and your settings are all editable in the app, and your billing details are editable in your subscription settings. For anything you cannot reach, email PLACEHOLDER: privacy@example.com.
Right to erasure (Article 17)
You can ask us to delete your personal data where we no longer need it, where you withdraw the consent we relied on and have no other basis, where you object and we have no overriding grounds, or where we have processed it unlawfully.
How to use it
Email PLACEHOLDER: privacy@example.com asking us to delete your account.
What that removes: your profile, your lesson progress, your review schedule, your saved words and your settings.
What it does not remove, and why: payment and refund records, and the record of an administrator granting you access, because we are required to keep accounting records and may need them to resolve a dispute; and any correction you suggested to lesson content, because it has become part of that content's editorial history. These are kept without your account attached.
Right to restriction of processing (Article 18)
You can ask us to stop using your data while keeping it, for example while we check something you say is inaccurate, or while we consider an objection you have made.
How to use it
Email PLACEHOLDER: privacy@example.com. While a restriction is in place we will store your data and not otherwise use it, except where the law allows.
Right to data portability (Article 20)
Where we process your data by automated means on the basis of your consent or our contract with you, you can ask for it in a structured, commonly used, machine-readable format, and ask us to send it to another service.
How to use it
Email PLACEHOLDER: privacy@example.com asking for an export. This covers your account details, your learner profile, your progress, your review schedule and your saved words.
Right to object (Article 21)
You can object to our using your data where we rely on our legitimate interests, and we must stop unless we can show compelling grounds that override your objection. Where we use your data for direct marketing, you can object at any time and we must stop immediately.
How to use it
Use the unsubscribe link in any marketing email, or email PLACEHOLDER: privacy@example.com for anything else.
Rights about automated decisions (Article 22)
You have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.
The app schedules your reviews and suggests your next lesson automatically. That is teaching, it has no such effect, and you can always choose differently. Decisions that do affect you, such as whether an account is suspended or a refund is granted, are made and recorded by a person.
How to use it
If you believe an automated decision has significantly affected you, email PLACEHOLDER: privacy@example.com and a person will review it.
Right to withdraw consent (Article 7(3))
Where we rely on your consent, you can withdraw it at any time, and withdrawing must be as easy as giving it was. Withdrawal does not make our earlier use of the data unlawful, and it does not cost you access to any lesson or feature.
How to use it
For cookies and advertising, open Manage Privacy Preferences and either turn the categories off or press Withdraw my consent. It takes effect at once, in this browser. For marketing email, use the unsubscribe link.
How long we take
PLACEHOLDER FOR LEGAL AND THE DPO: state the acknowledgement time and the fulfilment time, and the circumstances in which the one-month statutory period is extended. The GDPR default is one month from receipt, extendable by two further months for complex or numerous requests, with notice inside the first month.
We will ask you to confirm your identity before we act on a request, so that we do not hand your data to someone else.
Right to complain
If you are not satisfied with how we have handled your data or your request, you can complain to a supervisory authority: PLACEHOLDER: lead supervisory authority, or the data protection authority in the country where you live or work. In the EU you can find yours through the European Data Protection Board's member list.
We would rather hear from you first, at PLACEHOLDER: privacy@example.com.
Our data protection officer
For anything about this page or your rights: PLACEHOLDER: dpo@example.com.