Privacy Policy

This privacy policy explains how Langkit ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services.

1. Data Controller

The data controller responsible for this website is:
Jesco Wuester
Jescowuester@langkit.app

2. Data We Collect

We collect the following categories of personal data:

Account Data

• Email address (provided during registration)
• Display name (if provided)
• Authentication data (managed by our authentication provider)

Usage Data

• Learning progress and session history
• Card review data and scheduling information
• Feature usage patterns

Technical Data

• IP address
• Browser type and version
• Device information
• Cookies and similar technologies

3. Purpose and Legal Basis

We process your data for the following purposes:

• Contract performance (Art. 6(1)(b) GDPR): Providing and maintaining your account, delivering the learning service, and tracking your progress.
• Legitimate interest (Art. 6(1)(f) GDPR): Improving our service, ensuring security, and preventing abuse.
• Consent (Art. 6(1)(a) GDPR): Sending optional communications, if you have opted in.

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — Authentication and database hosting (Supabase Privacy Policy)
• Vercel — Website hosting and cookieless, privacy-friendly web analytics. Vercel Web Analytics does not use cookies and does not collect data that identifies you or track you across sites (Vercel Privacy Policy)

5. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it.

6. Your Rights

Under the GDPR, you have the following rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your data
• Right to restriction — Request restriction of processing
• Right to data portability — Receive your data in a structured format
• Right to object — Object to processing based on legitimate interest

To exercise any of these rights, please contact us at hey@langkit.app.

7. Cookies

We use essential cookies required for authentication and basic functionality. These are strictly necessary and do not require consent. We do not use tracking or advertising cookies. Our web analytics (Vercel) is cookieless and does not store any information on your device.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted data transmission (TLS), secure authentication, and access controls.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "last updated" date.

10. Contact & Supervisory Authority

If you have questions about this privacy policy, contact us at hey@langkit.app.

You also have the right to lodge a complaint with your local data protection supervisory authority. In Germany, this is the relevant state data protection authority (Landesdatenschutzbeauftragter).