Privacy Policy

• Account information— your name and email address, from Google, Facebook, or the email address you sign in with. We don’t receive your password from Google or Facebook.
• Learning data— the words you save, questions you’ve seen, your review schedule, and pronunciation practice history, so your progress carries across devices.
• Subscription status— whether you’re on a trial or paid plan, and renewal dates. Full payment card details are handled by our payment provider and never stored on our servers.
• Basic technical data — things like login timestamps and error logs, used to keep the service secure and working.
• Analytics data, if you consent — pages viewed, approximate location, device and browser information, and interaction data collected through Google Analytics 4. We do not send your name, email address, learning answers, or pronunciation recordings to Google Analytics.

We process your data on these legal bases under the GDPR:

• Contract — to create your account, track your learning progress, and run your subscription.
• Legitimate interest — to keep NLern secure and working correctly.
• Legal obligation — where we need to keep billing records.
• Consent — for optional analytics cookies and measurement. You can withdraw this consent at any time through Cookie settings.

We share the minimum needed with:

• Google and Facebook, if you choose those sign-in methods (they authenticate you; we only receive your name and email back).
• Our payment provider, to process trial-to-paid billing.
• Hetzner Online GmbH, our hosting provider, which runs our servers and database within the EU.
• Google Ireland Limited, only if you accept analytics, to provide aggregated website usage reports through Google Analytics 4.

We don’t sell your data, and we don’t share it for third-party advertising.

Your learning data and account records are stored on EU-based servers. Where Google or Facebook process data outside the EEA as part of sign-in, they do so under their own GDPR-compliant safeguards (such as EU Standard Contractual Clauses).

We keep your account and learning data for as long as your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we’re legally required to keep billing records for longer.

Under the GDPR, you can ask us to:

• Give you a copy of the data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Restrict or object to certain processing

Contact us at support@nlern.app to use any of these rights. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Essential cookies keep you signed in, secure administrator sessions, and remember your cookie choice. These are required for the service and cannot be switched off through the analytics control.

If you choose Accept analytics, Google Analytics may set _ga and _ga_<measurement-id>first-party cookies to distinguish visitors and maintain session state. Google documents a maximum lifetime of two years for these cookies. NLern’s own nlern_cookie_consent cookie stores your choice for 180 days.

Analytics is denied by default. Google Analytics is not loaded until you consent, all Google advertising consent signals remain denied, and rejecting or withdrawing consent stops further analytics collection and removes accessible Google Analytics cookies from this site. You can change your choice at any time using the Cookie settings button.

NLern isn’t directed at children under 16.

If we make a material change to this policy, we’ll let you know before it takes effect.

Questions about your data: support@nlern.app. NLern is a product of TechSolutionsUtrecht, KvK 99202301, Utrecht, the Netherlands.