Ewalingo is committed to protecting its users' privacy. This policy describes the data collected, its use, and your rights in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).
1. Data Collected
We collect the following data: your email address and display name upon registration; your learning progress data (vocabulary learned, scores, levels, streaks, XP); content you import (articles, audio files); technical data (IP address, browser, access logs); and your learning preferences (target language, objectives, session duration).
2. Purpose of Processing
Your data is used to: provide and improve the learning service; personalise exercises and recommendations; ensure security and prevent abuse; generate anonymised usage statistics; send you service-related notifications (if you have consented).
3. Legal Basis
The processing of your data is based on the performance of the contract (provision of the subscribed service) and our legitimate interest in improving the service. For marketing communications, the legal basis is your explicit consent.
4. Hosting and Transfers
The service is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), within the European Union. No data transfers are made to countries outside the EU without adequate safeguards.
5. Retention Period
Your data is retained for the duration of your active account. Upon account deletion, your personal data is deleted within 30 days, except for data required by law (billing: 10 years).
6. Your Rights
Under the GDPR, you have the following rights: access to your data, rectification, erasure ('right to be forgotten'), portability, restriction of processing, and objection. To exercise these rights, contact us at: dpo@ewalingo.com
7. Cookies
We use only strictly necessary functional cookies for the service to work (user session, language preferences). No advertising or third-party tracking cookies are used.
8. Sub-processors
Our main sub-processors are: Hetzner Online GmbH (hosting) and language model (LLM) providers for exercise generation. These sub-processors are bound by contractual data protection obligations.
9. DPO Contact
Data Protection Officer: dpo@ewalingo.com. You also have the right to lodge a complaint with your national data protection authority.