Privacy Policy

This Privacy Policy explains what personal data AuraLingovia ("we", "us", "our") collects when you use our TELC B2 exam preparation platform, why we collect it, who we share it with, and the choices and rights you have. It should be read together with our Terms of Service and Cookie Policy.

1. Information We Collect

Account & profile data — your name, email address, password (stored as a salted hash, never in plain text), preferred exam level, target level, and interface language.

Usage & learning data — exercises you complete, answers you submit, scores, study streaks, XP/achievements, and essays or spoken responses you submit for AI-assisted feedback.

Payment-related data — for D17 Mobile Transfer, the payment confirmation screenshot(s) you upload and metadata we derive from them (amount, reference, timestamp) to verify your payment; for Lemon Squeezy card payments, only high-level order and subscription metadata (plan, status, renewal date) — your full card number is entered directly into Lemon Squeezy's payment page and never reaches our servers.

Device & security data — IP address, a device fingerprint, and basic device/browser information, used to secure accounts and to detect fraudulent or duplicate payment attempts.

Communications — messages you send us via email or Telegram support, and records of notifications we send you.

2. How We Use Your Information

• To create and operate your account and deliver the exercises, exam simulations, and feedback you request;
• To verify payments, activate and manage subscriptions, and prevent payment fraud;
• To generate AI-assisted feedback on writing and (where enabled) spoken responses;
• To send you service communications — payment confirmations, subscription status, security alerts — and, where you have not opted out, occasional product updates;
• To maintain the security, integrity, and reliability of the Service, including detecting abuse; and
• To comply with legal obligations.

3. Legal Basis for Processing

Where applicable data-protection law (such as the EU/UK GDPR) requires a legal basis, we rely on: performance of our contract with you (delivering the Service you signed up for), our legitimate interests (security, fraud prevention, improving the Service), and your consent where we ask for it (for example, optional marketing communications or non-essential cookies).

4. Who We Share Data With

We do not sell your personal data. We share it only with service providers who help us run AuraLingovia, under contractual confidentiality obligations:

• Supabase — our database, authentication, and file-storage provider (EU-hosted infrastructure), which stores your account, learning, and payment-metadata records;
• Anthropic (Claude) and Google (Gemini) — AI providers used to grade written essays and, where enabled, evaluate spoken exam responses. Only the specific submission being graded is sent, solely to generate your feedback;
• Lemon Squeezy — our card-payment processor and merchant of record, once card payments are active; they receive the billing details needed to process your payment directly;
• Email and Telegram — used to deliver account, payment, and support notifications you trigger or that relate to your account; and
• Law enforcement or regulators, where we are legally required to disclose information.

5. International Data Transfers

Our core infrastructure is hosted in the EU. Some service providers we use (including our AI processors) are based in the United States. Where personal data is transferred outside your country, we rely on the transfer mechanisms those providers make available (such as standard contractual clauses) to protect it.

6. Data Retention

We keep your account and learning data for as long as your account is active, so you keep access to your history and progress. If you close your account, we delete or anonymize personal data within a reasonable period, except where we must retain records (for example, payment records) to meet legal, tax, or fraud-prevention obligations.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data (most profile fields can also be edited directly in your account settings);
• Request deletion of your data, subject to the retention exceptions above;
• Request an export of your data in a portable format;
• Object to or restrict certain processing, and withdraw consent where processing is based on consent; and
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at Support@auralingoviatestdeutsch.academy. We will respond within a reasonable timeframe, generally within 30 days.

8. Cookies & Similar Technologies

We use cookies and local storage for authentication, remembering your language/theme preference, and basic analytics. See our full Cookie Policy for details and how to control them.

9. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), Row-Level Security so accounts can only ever read their own records, and hashed (never plain-text) password storage via our authentication provider. No method of transmission or storage is 100% secure, but we work to keep your data protected and to respond quickly if an issue is identified.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes here with a new "Last updated" date, and for material changes we will make reasonable efforts to notify you directly.

12. Contact

Questions or requests about your data? Contact our team at Support@auralingoviatestdeutsch.academy or via our Contact page.