Privacy Policy
Last updated: October 6, 2026
1. Data Controller
The data controller responsible for this application is:
DataFiora IT — Pratyushi Roy Oishee
Falltorstraße 2, 63486 Bruchköbel, Germany
Email: hello@deutschbridge.app
2. Data We Collect
| Data Type | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Email address | Account creation and authentication (OTP or Google Sign-In) | Art. 6(1)(b) — Contract |
| Name (optional, from Google Sign-In) | Personalising the in-app experience | Art. 6(1)(b) — Contract |
| Learning progress | Personalised learning path, streak tracking, XP | Art. 6(1)(b) — Contract |
| Chat messages | AI tutor conversation context | Art. 6(1)(b) — Contract |
| Pronunciation audio (derivatives only) | AI pronunciation scoring; raw audio is never stored | Art. 6(1)(a) — Consent |
| Subscription and purchase records | Unlocking paid features. For subscriptions bought in Google Play or the App Store we keep the product, the purchase token, the country of purchase, the status and the renewal date. We never receive your card or bank details. Deleted with your account. | Art. 6(1)(b) — Contract |
| Letters, messages and photos you submit to the Letter Helper (optional) | Explaining a German letter you received, or correcting one you wrote. The text or photo is sent through our server to Google's Gemini API to create the answer. We do not store the text, the photo or the answer. Please cover account, ID or tax numbers before you take a photo. | Art. 6(1)(b) — Contract |
| Community posts | Peer learning and AI corrections | Art. 6(1)(b) — Contract |
| Feedback messages (optional) | Reading bug reports and ideas you choose to send from Settings. If you tick the box, the app version and platform (Android or iOS) are added; nothing else about your device. Stored with your account, at most 5 per day, deleted with your account. | Art. 6(1)(a) — Consent |
We do not collect location data, contacts, or advertising identifiers. We do not sell your data to third parties.
3. Third-Party Processors
| Service | Purpose | Data Region |
|---|---|---|
| Supabase | Database, authentication, backend infrastructure | EU (Frankfurt, AWS eu-central-1) |
| Google (Gemini API, Sign-In) | AI tutor responses, pronunciation scoring, Letter Helper explanations and corrections (text and photos), and authentication | Google Cloud infrastructure |
| Google Play (Google Ireland Ltd) and Apple App Store (Apple Distribution International Ltd) | In-app subscription payments | EU / worldwide |
| Stripe | Card payments for subscriptions bought by card before in-app billing | EU / US (Stripe Ireland Ltd) |
4. Local Storage
The Deutsch Bridge AI app stores authentication tokens in secure local device storage (via Supabase). We do not use tracking cookies, analytics cookies, or advertising cookies. The landing website uses no cookies.
The app uses your camera or photo library only when you tap "Take photo" or "Choose photo" in the Letter Helper. The chosen photo is sent once to create the explanation and is not saved by us. The microphone is used only while you use voice input or a speaking or pronunciation exercise.
5. Data Retention
- Active accounts: Data is retained as long as your account is active.
- Deleted accounts: All personal data is permanently deleted within 30 days of an account deletion request.
- Chat history: Conversation context is not permanently stored — AI responses are ephemeral and not retained after the session.
- Letter Helper: Letters, messages, photos and the AI's answers are not stored by us; they are processed only to create the answer.
- Pronunciation audio: Raw audio is never stored. Only derived scores and IPA transcriptions are retained temporarily.
6. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access (Art. 15): Request a copy of all personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate personal data.
- Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to data processing based on legitimate interest.
- Right to lodge a complaint: You may lodge a complaint with the Hessian Commissioner for Data Protection and Freedom of Information (HBDI) or your local supervisory authority.
To exercise any of these rights, contact us at hello@deutschbridge.app. We will respond within 30 days.
7. Children
Deutsch Bridge AI is intended for users aged 13 and older. In Germany and certain other EU member states, users under 16 require parental or legal guardian consent for data processing. If you are under the applicable age, please obtain consent from a parent or legal guardian before using this app.
8. AI-Generated Content
This app uses artificial intelligence (Google Gemini) to generate language learning content, grammar explanations, pronunciation feedback, and explanations and corrections of letters. AI-generated responses may occasionally contain inaccuracies. Letter explanations are not legal advice; check dates and amounts against the original letter. This app supplements, but does not replace, formal language instruction.
9. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS 1.2+), secure authentication (OTP and OAuth 2.0), and row-level access controls on our database. Payments are handled by Google Play, the App Store or Stripe — we never see or store card numbers or payment credentials.
10. Content Sources and Credits
Word forms: Wiktionary, CC BY-SA 4.0. Grammatical word forms in Deutsch Bridge AI, such as plurals, articles and verb conjugations, are checked against Wiktionary (text by Wiktionary contributors, available through kaikki.org). This credit concerns learning content only; no personal data is sent to these services.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify users through the app. The "Last updated" date at the top reflects the most recent revision.
12. Contact
If you have questions about this Privacy Policy or your personal data, contact us at:
DataFiora IT — Pratyushi Roy Oishee
Falltorstraße 2, 63486 Bruchköbel, Germany
Email: hello@deutschbridge.app