Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, store, and use your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

2. Data Controller

The data controller responsible for your personal data is The English Tenses (theenglishtenses.com).

3. Data We Collect

We may collect:

• Account information: email address (required), first name and last name (optional), password (hashed), profile picture (optional).
• OAuth authentication: if you sign in using Google, we receive your email address and basic profile information from Google according to their OAuth protocols.
• Payment information: processed securely by third-party providers; we do not store full payment details.
• AI chatbot conversations: conversation history with our English learning AI assistant.
• Cookies and tracking data: (see Cookie Policy).

4. Legal Basis for Processing

We process personal data on the following bases:

• Contractual necessity: to provide access to the Service.
• Legitimate interests: to improve the Service and prevent fraud.

5. How We Use Your Data

We use your data to:

• Provide and maintain the Service.
• Manage your subscription and account.
• Send service-related notifications.
• Comply with legal obligations.

6. Sharing Your Data

We may share data with:

• Payment processors for payment management.
• OpenAI for AI chatbot functionality (conversation text only, anonymized).
• Hosting service providers (Hostinger) for server infrastructure.
• Amazon SES for sending essential emails (account verification and password reset).
• Authorities if required by law.

We do not sell your personal data.

7. AI Conversation Processing

Our AI chatbot feature uses OpenAI's GPT API to provide English learning assistance. When you use the chatbot, your conversation text is sent to OpenAI for processing.

This anonymized processing means OpenAI cannot link conversation content to your specific user account. OpenAI processes this data according to their own data processing agreement and privacy policy.

Your conversation history is stored on our servers (located in Frankfurt, Germany) and you can delete your conversations at any time through your account settings.

8. International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (Germany). However, when you use our AI chatbot feature, anonymized conversation text is processed by OpenAI, which may involve transfers to the United States.

For any data transfers outside the EEA, we ensure adequate safeguards such as Standard Contractual Clauses (SCCs) or rely on other lawful transfer mechanisms recognized under GDPR.

9. Data Retention

We retain your data while your account is active. After account deletion, we retain data only as required for legal, tax, or reporting purposes.

10. Data Security Statement

We implement industry-standard security measures to protect your personal data, including encrypted connections (HTTPS), secure servers, and restricted access protocols. While we strive to safeguard your information, no online service can guarantee complete security.