Your privacy matters

Clear about your data. Careful with it.

This policy explains what CertiLang collects, why we use it, who helps us provide the platform, and the choices available to you.

Last updated: August 20, 2026

CertiLang ("we", "our", or "us") operates the website certilang.com and the learning platform at learn.certilang.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Section 01

Information We Collect

Personal Information

When you register for an account, we may collect:

  • Name and email address
  • Account credentials (password is encrypted)
  • Profile information (target exam, current German level)
  • Payment information (processed securely via Stripe)

Usage Data

We automatically collect information about how you use our platform:

  • Learning progress and exercise completion
  • Writing and speaking submissions (for AI feedback)
  • Device information and browser type
  • IP address and general location
Section 02

How We Use Your Information

We use the information we collect to:

  • Provide and improve our AI-powered learning services
  • Personalize your learning experience based on your level and goals
  • Process payments and manage subscriptions
  • Send important account notifications and updates
  • Send marketing emails (only with your consent)
  • Analyze usage patterns to improve our platform
  • Provide customer support
Section 03

Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using SSL/TLS
  • Passwords are hashed and never stored in plain text
  • Payment processing is handled by Stripe (PCI-DSS compliant)
  • Regular security audits and updates
  • Access controls and authentication for our team
Section 04

Third-Party Services

We work with trusted third-party services to provide our platform:

SupabaseDatabase and authentication
StripePayment processing
OpenAIAI-powered feedback and analysis
ResendTransactional emails
VercelWebsite hosting
Google AnalyticsOptional website analytics
PostHogOptional product and website analytics
MetaOptional advertising measurement and retargeting

These providers have their own privacy policies and handle your data according to their terms.

Cookies and similar technology

Your Analytics and Advertising Choices

We use a necessary cookie to remember your privacy choices. If you consent, Google Analytics and PostHog help us understand website and platform usage. If you separately consent to advertising, the Meta Pixel may use cookies or similar identifiers to measure advertising, attribute actions such as account registration, and create audiences for relevant advertising and retargeting.

  • Optional analytics and advertising tools are disabled until you choose to allow them.
  • We do not send writing submissions, speaking recordings, passwords, or contact-form contents to Meta.
  • Campaign, page, device, browser, IP-derived, cookie, and event data may be processed by these providers when the relevant category is allowed.
  • You can withdraw or change your choice at any time by opening this privacy settings link.

Meta may use information received through its Business Tools for measurement, ad delivery, matching, and related purposes under its own terms. Browser controls and industry opt-out tools may provide additional choices, but they do not replace the controls available on this website.

Section 05

Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

AccessRequest a copy of your personal data
RectificationCorrect inaccurate or incomplete data
ErasureRequest deletion of your personal data
PortabilityReceive your data in a portable format
ObjectionObject to processing of your data
Withdraw ConsentWithdraw consent for optional analytics, advertising, or marketing emails

To exercise these rights, contact us at [email protected].

Section 06

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account:

  • Your personal data will be deleted within 30 days
  • Some anonymized data may be retained for analytics
  • Legal and financial records may be kept as required by law
Section 07

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Section 08

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

Questions about your data?

We're here to give you a clear answer.