Privacy Policy

Who we are

drill (“the Service”) is operated by Ivan Nikola, an individual based in Hungary, who is the data controller for your personal data. You can reach us at info@langdrill.app.

What we collect and why

• Account data — your email address, managed on our behalf by Clerk, to create and secure your account.
• Learning data — your exercises, written answers, evaluations, vocabulary, reading entries, practice sessions, spaced-repetition state, and grammar-mastery scores, to provide the Service and track your progress.
• Usage data — counts of AI requests per day, to enforce fair-use limits.
• Diagnostics — error reports (your user ID only, no answer content) via Sentry, to keep the Service working.

Legal bases (GDPR Article 6)

• Performance of a contract — to provide the learning features you sign up for.
• Legitimate interests — security, abuse prevention, and error monitoring.
• Consent — for optional product analytics, which are off unless you opt in. We do not run analytics today.

Who processes your data (sub-processors)

We share data only with the service providers we rely on to run drill:

• Clerk — Authentication and account management.
• Amazon Web Services (AWS) — Compute, storage, speech synthesis and transcription.
• Anthropic — AI evaluation of your written answers.
• Neon — Database hosting.
• Upstash — Rate limiting.
• Vercel — Web application hosting.
• Sentry — Error monitoring (no cookies; user ID only).
• Langfuse — LLM-call observability (records your user ID and the text of your answers).
• Cloudflare — DNS and email forwarding for our contact address.
• PostHog — Product analytics and session replay (EU region; loads only after you opt in).
• Resend — Sending product emails such as the weekly progress summary (processes your email address and the email contents).

Some of these providers process data outside the European Economic Area; where they do, they rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

We keep your data while your account is active. When you delete your account, all of your personal data is deleted from our database.

Your rights

• Access & portability — download a machine-readable copy of your data from Settings → privacy & data → Download my data.
• Erasure — delete your account and all associated data from Settings → account → Security → Delete account.
• Rectification & objection — contact us at info@langdrill.app.
• You may also lodge a complaint with your local data-protection supervisory authority. As the controller is based in Hungary, our lead authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Cookies

We use only strictly-necessary cookies today. See our Cookie Policy for details.