# Privacy policy – Parloquo As of 25 October 2026. This policy covers the website parloquo.app, the web app, the browser extension and the Parloquo smartphone app. The [German version](/de/datenschutz/) is the binding one. ## Controller Florian Wieser Wehlistraße 65 1200 Wien Österreich Questions about privacy and requests for access, deletion or objection: [privacy@parloquo.app](mailto:privacy@parloquo.app) ## In short - For an account we need your email address. - The text you read with Parloquo is sent to AI models that translate it and adapt it to your level. The model providers do not store it. - Your vocabulary deck and your progress are kept on our server, so they are the same on every device. - We use no advertising cookies and sell no data. - You can download your data or delete it together with your account at any time, in the settings under Account. ## Account and sign-in We store your email address, the hash of your password if you sign in with one, the interface language, the language you learn, your level and your daily goal. Purpose: signing in, emails in your language, the same state on every device. Legal basis: contract (Art. 6(1)(b) GDPR). Accounts are managed by Supabase, Inc. in a data centre in Ireland. Sign-in codes and account notices are sent through Resend (Plus Five Five, Inc., USA), which receives your email address and the content of the email. ## Reading, translating and AI features When you open an article with Parloquo, the app sends the text of the page and its address to our server. The server has AI models translate and simplify the text. Questions about the text, words for the word card, wishes for exercises and your answers go to the models in the same way. Legal basis: contract (Art. 6(1)(b) GDPR). - We reach the models through OpenRouter, Inc. (USA), using only endpoints that neither store requests nor train on them. - Claude Haiku (Anthropic) runs on Google Cloud (Vertex AI) or Amazon Web Services (Bedrock). - Public pages in a language other than the one you learn are first translated by a Tencent model (China). Only the text of the page goes there, without your user ID, address or title. Pasted texts and pages without a public address are not sent to Tencent. Parloquo cannot tell whether a page with a public address sits behind a login. Please do not use Parloquo on pages with personal content such as mailboxes, customer portals or health data. We keep finished paragraphs of public pages without any link to you, so other readers get the same paragraph faster. Texts, translations and explanations are generated by AI and can contain mistakes. ## Learning and usage Our server (Cloudflare D1) holds your vocabulary deck with example sentences and the page address, your reviews, the addresses of the articles you read each month (for pasted texts only a checksum), your plan and your use of AI credits (counts and costs, no content). Purpose: the deck, your statistics and the limits of your plan. Legal basis: contract. Only on your device: settings, reading list and the history of recently read articles. The offline dictionaries are downloaded as files; our server does not see which words you look up. ## Payment Subscriptions are sold by Link (Stripe) as the merchant. Link processes your name, email, billing address and payment details as an independent controller (privacy policy: [link.com/privacy](https://link.com/privacy)). We pass on your email address and user ID and only store the Stripe customer and subscription number, its status and its end date. For customers in the EU, Stripe Technology Europe Ltd. (Ireland) is responsible. ## Product analytics To improve Parloquo we count visits to the website and which features are used, with language, level, plan and app (PostHog, servers in Frankfurt). Never included: addresses or titles of pages you read, article text, questions, words or translations. For AI calls we record duration, tokens and cost. The website sets no cookies for this. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You can object at any time; an email to [privacy@parloquo.app](mailto:privacy@parloquo.app) is enough. ## Hosting and logs Website, server and database run on Cloudflare, Inc. With every request Cloudflare processes your IP address and technical details of the request to deliver the page and fend off attacks. Legal basis: legitimate interest in secure operation. Cloudflare also forwards email sent to parloquo.app addresses to our mailbox. ## Browser extension The extension reads a page only when you switch Parloquo on there; you grant access to a website in the browser yourself. It keeps settings and your sign-in in the browser's storage and talks only to our server. ## Recipients outside the EU Cloudflare, Supabase, OpenRouter, Google, Amazon and Resend are based in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, otherwise on the European Commission's standard contractual clauses. Standard contractual clauses also apply to Tencent (China). ## How long we keep data As long as your account exists. When you delete your account, we immediately remove your data on our server, your analytics data and your login, and cancel a running subscription. Database backups still contain the data for up to 30 days. Link keeps payment records for the periods required by law. ## Your rights You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Export and deletion work directly in the settings under Account → “Your data”, everything else by email to [privacy@parloquo.app](mailto:privacy@parloquo.app). You can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, [www.dsb.gv.at](https://www.dsb.gv.at)). There are no automated decisions with legal effect. The level suggestion is only a suggestion. Parloquo is not directed at children under 14.