Privacy Policy

1. Who we are

German With Caro is a German vocabulary learning application operated from Luxembourg (7, rue Vauban). This policy explains what personal data we collect, why we collect it, and how we protect it.

2. Data we collect

We collect only what is necessary to provide the service:

• Email address: Used to create and identify your account.
• Learning data: Your review history, XP, streak, badges, and daily goal — stored so your progress is saved across sessions.
• Session data: An authentication token stored in a browser cookie to keep you logged in.

We do not collect analytics data, advertising identifiers, device fingerprints, or any other tracking information.

3. Legal basis (GDPR)

We process your data on the basis of contract performance (Art. 6(1)(b) GDPR) — your data is processed solely to deliver the learning service you signed up for.

4. Data processor — Supabase

We use Supabase (Supabase Inc.) as our backend infrastructure provider. Supabase stores your account information and learning data on our behalf and acts as a data processor under a Data Processing Agreement. Supabase is GDPR-compliant and may store data on servers in the United States or the European Union. For details, see supabase.com/privacy.

No other third parties have access to your personal data.

5. Cookies

We use only essential cookies required for authentication. These cookies are set by Supabase to maintain your login session. No analytics, advertising, or third-party cookies are used. See our Cookie Policy for details.

6. Data retention

Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, please contact us using the details in the Impressum.

7. Your rights under GDPR

As a user in the European Economic Area, you have the right to:

• ·Access the personal data we hold about you
• ·Correct inaccurate data
• ·Request deletion of your data ("right to be forgotten")
• ·Receive your data in a portable format
• ·Restrict or object to processing
• ·Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at the address listed in the Impressum.

8. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.