ParoluPrivacy Policy
Last updated: October 31, 2026
Parolu is a language-learning app with an AI conversation coach. This policy explains what data we process when you use the Parolu app and this website, why, and what choices you have. Parolu is published by OrthoClear (“we”, “us”), which is the data controller. You can reach us at support@parolu.online.
Summary
- We use your data only to run Parolu and improve your lessons. We do not sell it and we show no ads.
- Your messages and spoken answers are sent to AI providers so the coach can reply, correct you and speak. Voice recordings are deleted right after they are turned into text.
- You can use Parolu as a guest without an email. You can delete your account at any time in the app.
Data we process
| Data | Why |
|---|---|
| Account: a random user ID; if you save your account, your email address or the ID and email of your Google account | To sign you in and keep your progress across devices |
| Learning profile: native and target language, app language, level, goals, interests, study rhythm, coach preferences, time zone | To plan lessons that fit you |
| Lesson content: your messages to the coach, transcripts of what you say, corrections, word cards, progress and what the coach remembers about you (you can view this in the app) | To run conversations, give feedback and schedule reviews |
| Voice: recordings you make when speaking to the coach | Converted to text and then deleted from our server immediately. We do not use your voice to identify you. |
| Subscription: plan, trial and renewal status received from Google Play. We never see your card details. | To give access to paid features |
| Technical data: IP address, device and app version, error logs | Security, abuse prevention and fixing bugs |
Reminders are scheduled on your device. We do not use advertising IDs, tracking SDKs or third-party analytics.
Legal bases
- Contract: to provide the app and the features you ask for (account, lessons, subscription).
- Consent: where the law requires it, for transferring your messages and voice to AI providers abroad. You can withdraw consent at any time by deleting your account.
- Legitimate interest: security, preventing abuse and improving the service.
- Legal obligation: where the law requires us to keep records.
Who we share data with
We use the following service providers. They process data only on our instructions.
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online | Servers and database | Finland (EU) |
| OpenRouter, and through it AI model providers (such as OpenAI, Google, Anthropic, ElevenLabs) | Coach replies, corrections, speech-to-text and text-to-speech | United States |
| Resend | Sending sign-in codes by email | United States / EU |
| Sign in with Google, Google Play billing | United States / global | |
| RevenueCat | Managing subscription status | United States |
AI requests contain the conversation text needed for the reply and your learning profile, not your email address. We ask providers not to use this data to train their models where that option exists. We may also disclose data if required by law or to protect our rights.
International transfers
Some providers are outside Türkiye and the European Economic Area. Where required, transfers rely on standard contractual clauses or your explicit consent.
How long we keep data
- Account and lesson data: while your account is active. When you delete your account, sign-in is disabled immediately and the data is permanently deleted within 30 days.
- Voice recordings: deleted right after transcription.
- Email sign-in codes: expire after 10 minutes.
- Server logs: a short time for security, then deleted.
- Records we must keep by law (for example, purchase records): for the legally required period.
Your rights
Under the Turkish Personal Data Protection Law (KVKK, article 11) and the EU/UK GDPR, you can ask to access, correct, delete or export your data, object to or restrict its processing, and withdraw consent. Email support@parolu.online from the address linked to your account; we reply within 30 days. You can also complain to the Personal Data Protection Authority (KVKK) in Türkiye or your local data protection authority.
To delete your account, see Delete your account.
Children
Parolu is intended for people aged 16 and over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Security
Data is encrypted in transit (HTTPS). Passwords are not used; sign-in codes and session tokens are stored only as hashes. Access to servers is restricted.
Changes
We will update this page when our practices change and show the date above. For important changes we will also notify you in the app.
Contact
OrthoClear · support@parolu.online