1. Introduction
Welcome to AirTalk ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website airtalk.pro and use our language learning application at app.airtalk.pro (collectively, the "Services").
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Polish Personal Data Protection Act of 10 May 2018, and other applicable data protection laws.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
AirTalk Email: airtalk.school@gmail.com
For any privacy-related inquiries or to exercise your rights, please contact us at the email address above.
3. Definitions
To help you understand this policy, we distinguish between two types of users:
- Visitor: A person who browses our marketing website without creating an account.
- User/Student: A person who has registered for an account and uses our language learning application.
4. Information We Collect
4.1 Information from Website Visitors
When you visit our website, we may automatically collect:
- Technical Data: IP address, browser type and version, device type, operating system, time zone setting, and general location (country/region).
- Usage Data: Pages viewed, time spent on pages, click patterns, and referral source (how you found us).
- Cookies: We use cookies and similar tracking technologies. See Section 10 for details.
4.2 Information from Registered Users
When you create an account using Google Sign-In, we receive and store:
- Account Information: Name, email address, and profile picture provided by Google.
- Profile Information: Language preferences, learning goals, and profile settings you configure.
- Learning Data: Course progress, lesson completion, quiz scores, vocabulary lists, practice history, and time spent learning.
Note: We do not store passwords. Authentication is handled entirely by Google OAuth, meaning you sign in securely through your Google account.
4.3 Information You Provide Voluntarily
- Contact Forms: Name, email, and message content when you contact us.
- Newsletter: Email address if you subscribe to our newsletter.
5. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain the Services | Contract performance (Art. 6(1)(b)) |
| Create and manage your account | Contract performance (Art. 6(1)(b)) |
| Track learning progress and personalize your experience | Contract performance (Art. 6(1)(b)) |
| Send transactional emails (account updates, notifications) | Contract performance (Art. 6(1)(b)) |
| Respond to your inquiries | Legitimate interest (Art. 6(1)(f)) |
| Analyze website usage and improve our Services | Legitimate interest (Art. 6(1)(f)) |
| Send marketing communications | Consent (Art. 6(1)(a)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
6. Data Sharing and Third Parties
We share your data with the following categories of service providers:
6.1 Infrastructure & Hosting
- Hetzner Cloud (Germany, EU): Our servers and databases are hosted in Hetzner data centers in Germany, ensuring your data remains within the European Union.
6.2 Authentication
- Google OAuth: We use Google Sign-In as our sole authentication method. When you sign in, Google processes your authentication and shares your basic profile information (name, email, profile picture) with us. We do not have access to your Google password. Please refer to Google's Privacy Policy.
6.3 Analytics
- Google Analytics: We use Google Analytics to understand how visitors interact with our website. Google Analytics collects anonymized usage data. You can opt out using the Google Analytics Opt-out Browser Add-on.
6.4 DNS & Security
- Cloudflare: We use Cloudflare for DNS management and security. Cloudflare may process technical data (IP addresses) to route traffic securely.
We do not sell your personal data to third parties.
7. International Data Transfers
Your data is primarily stored and processed within the European Union (Germany). When we use service providers outside the EU (such as Google), we ensure appropriate safeguards are in place:
- EU-US Data Privacy Framework for certified US providers
- Standard Contractual Clauses (SCCs) approved by the European Commission
8. Children's Privacy
In accordance with Polish law implementing GDPR Article 8, users must be at least 16 years old to create an account without parental consent.
If you are under 16, you must have your parent or guardian's permission to use our Services. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected data from a child under 16 without proper consent, please contact us immediately.
9. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Account & Learning Data | Duration of account + 3 years after deletion request |
| Analytics Data | 26 months (Google Analytics default) |
| Contact Form Submissions | 2 years |
| Server Logs | 90 days |
You may request deletion of your account and associated data at any time (see Section 11).
10. Cookies
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for the website to function (e.g., session management, security). These do not require consent.
Analytics Cookies
Used by Google Analytics to collect anonymized usage statistics. These are only placed with your consent.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.
11. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15): Request a copy of your personal data.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
- Right to Restriction (Art. 18): Limit how we process your data.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
- Right to Withdraw Consent (Art. 7): Withdraw consent at any time for processing based on consent.
How to Exercise Your Rights:
- Email us at airtalk.school@gmail.com
- Use the "Delete Account" option in your account settings (for registered users)
We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Polish supervisory authority:
President of the Personal Data Protection Office (UODO) ul. Stawki 2, 00-193 Warsaw, Poland Website: uodo.gov.pl
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption: All data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted.
- Access Control: Only authorized personnel have access to personal data.
- Secure Authentication: We use Google OAuth for authentication, eliminating the risk of password breaches on our platform.
- Secure Infrastructure: Our servers are hosted in secure Hetzner data centers in Germany with physical and network security measures.
- Regular Backups: Data is regularly backed up to prevent loss.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours and inform affected users without undue delay.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify registered users via email
- Display a notice on our website
We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: airtalk.school@gmail.com Facebook: AirTalk on Facebook Instagram: @airtalk.school
This Privacy Policy was last updated on February 15, 2026.