Privacy policy

What we collect

• Your account: your email address. If you sign in with Google, we also receive your name and profile picture from Google.
• Your answers when you set up Parlatio: the language you learn from, why you want to learn Swedish and your starting level. We use them to build your personal plan.
• Your progress and settings: which scenarios and levels you practiced and completed, which help you used, practice time, and your language and app settings.
• How you found us: the campaign tags in the link you arrived from (for example utm_source) and the website that sent you, saved with your account when you sign up.
• Security data: when you request or enter a login code, we briefly store your email address or IP address to limit abuse. These records are deleted automatically after 24 hours.
• Technical data: basic logs (such as IP address, browser and errors) to keep the service secure and working.
• Your weekly goal and reminders: the number of days per week you want to practice and, if you turn reminders on, your browser's notification subscription.
• Your email preferences: whether you want our practice reminder and weekly summary emails and, if you opted in, when and how you did it (at login, during the initial setup, after a conversation or in settings), the exact text you agreed to and its language.

AI and your conversations

• When you practice, your voice recording and the text of the conversation are sent to our AI provider, OpenAI, to transcribe what you say, generate replies, help and feedback.
• We don't store your audio or the content of your conversations. After a conversation, its text is kept only on your device (in your browser's local storage) so we can show your feedback, also if you close the tab and come back later. It is deleted as soon as your feedback is ready, after 7 days at the latest, and when you log out or delete your account.
• According to OpenAI's terms for business customers, data sent through their API is not used to train their models and may be kept by OpenAI for up to 30 days for abuse monitoring.
• Parlatio's AI can make mistakes. It is a practice tool, not a certified course or professional advice.

Why we use your data

• To give you the service: log in, run the conversations, build your plan and save your progress (contract).
• To keep the service secure, prevent abuse and understand which channels bring people to Parlatio (legitimate interest).
• To count visits to our website (legitimate interest).
• To measure how the app is used with Google Analytics and the results of our ads, only if you accept cookies (consent).
• To send you practice reminders, only if you turn them on (consent). You can turn them off at any time in My plan or in your browser settings.
• To email you practice reminders (for example when you're behind your weekly goal), a weekly summary of your practice, tips and Parlatio news, only if you opt in (consent). The box is never ticked for you. These emails are sent through Resend and use your practice data (days and minutes practiced, your weekly goal and your next scenario). You can unsubscribe at any time with the link in every email or with the switch in My plan → Weekly goal & reminders. We keep a record of when and how you consented. If you tap “Remind me” in a conversation, we send you one reminder (a notification or an email) at the time shown, and nothing more. To know which emails are useful, the links in our emails go through our own address (links.parlatio.app) before opening Parlatio, so we can see whether a link was clicked. We don't use this for anything else.

We don't sell your data.

Cookies and local storage

• Necessary: your login session (until you log out, up to about a year), a cookie that remembers you completed setup (1 year), if you open an invite link a cookie with only the invite code so your invite still works when you sign up (30 days), a cookie that remembers for 30 minutes that you ticked the email box on the login page, so we can save your choice, and your language and cookie choices saved in your browser.
• Conversation text (necessary): the text of your recent conversations, kept in your browser's local storage until your feedback is ready (7 days at most). It is deleted when you log out or delete your account.
• Onboarding answers (necessary): before you create an account, your onboarding answers (language, goals, level, weekly goal and email choice) are kept in your browser's local storage so your plan isn't lost. They are deleted when you sign up, or after 7 days at most. When you continue to sign-up, the same answers (no email or other personal data) are also added to the sign-in link, so they still work if the sign-in opens in another browser.
• Analytics (optional): Google Analytics through Google Tag Manager, only if you click "Accept".
• First visit (optional): a cookie that remembers how you found us (campaign link and the website you came from, 30 days), only if you click "Accept". If you don't, we only save this when you sign up in the same visit, from the link you used, without storing anything on your device.
• Advertising measurement (optional): Meta Pixel (Meta Platforms Ireland) and Google Ads conversion tracking (Google Ireland), only if you click "Accept".
• If you reject, no analytics or advertising cookies are set. You can change your choice at any time in Cookie settings.

Visitor statistics (Vercel Web Analytics)

To understand how many people visit Parlatio and which pages they view, we use Vercel Web Analytics, provided by Vercel Inc. (USA). It doesn't use cookies or store anything on your device. When you load a page, Vercel uses your IP address and browser information to create a temporary identifier that changes every day and isn't linked to your account. Your IP address isn't stored. We only see totals: visits, pages, where you came from, country, device type and campaign links. Legal basis: our legitimate interest in measuring and improving our website (GDPR Art. 6(1)(f)). Vercel is certified under the EU-U.S. Data Privacy Framework. You can turn this off with 'Don't count my visits' in the cookie settings.

We also count, per day, how many times the cookie banner was shown, accepted or rejected, and how many times the sign-up steps (start button, onboarding steps, plan screen, sign-in page, sign-up) were reached, together with the kind of link the visit came from (for example a campaign name or the website you came from). We also count which other languages people ask for in the first onboarding step, and the language their browser is set to. These are totals only, with no information about you.

Who processes data for us

Supabase (database and login), Vercel (hosting and web analytics), OpenAI (speech recognition and AI), Resend (login codes, service emails about your account such as a one-time welcome email or a reminder you asked for, click measurement on email links, and practice reminder, weekly summary and news emails only if you opt in), Google (Google sign-in and, with your consent, Analytics and Google Ads), Meta Platforms Ireland (Meta Pixel, with your consent), Cloudflare (Turnstile, protection against bots at sign-up).

Some of them are based in or process data in the United States. In those cases transfers are covered by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

How long we keep it

• Your account data: while your account is active. You can delete your account at any time from the menu ("Delete account"); this deletes your account, progress and plan immediately. You can also ask us by email, and we will do it within 30 days. Accounts with no activity for 24 months are deleted.
• Your email consent record: while your account is active, so we can show when and how you consented.
• Security records: 24 hours.
• Technical logs: kept for a short time by our hosting provider.

Your rights

You can ask to access, correct, delete or export your data, object to its use, or withdraw your consent at any time. Write to info@parlatio.app. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Age

Parlatio is meant for people aged 16 or older.

Changes

If we change this policy, we'll update this page and the date above.