Home
Vocabulary
Lessons
Conjugation
  • Home
  • Vocabulary
  • Lessons
  • Conjugation
  • Games
  • Tools
Loading…

Loading your experience...

Master German with interactive lessons, exercises, and real-world practice.

Quick Links

  • Explore
  • Vocabulary
  • Grammar
  • Conjugation
  • Translation
  • Podcasts
  • Scenarios
  • Writing Coach
  • Exams
  • Games

Resources

  • FAQ
  • Support
  • Premium

Follow Us

© DeutschBoost. All rights reserved.

Made withfrom Aymane

ImprintRefund PolicyPrivacy PolicyTerms of ServiceCookie Policy

Privacy Policy

Last updated: June 7, 2026

Operator / Controller

DeutschBoost is operated by Aymane Naja, Maison Ibrahimi, Rue Abdellah Rajii 18, Casablanca, Maroc. For privacy questions or requests, contact privacy@deutschboost.com.

1. Introduction

At DeutschBoost, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services. It describes your data protection rights and how to exercise them.

For information about how we use cookies and similar technologies, please see our Cookie Policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you provide directly to us, such as:

  • Name and contact information (email address)
  • Account credentials (username, password)
  • Payment information (processed by our payment processor — we do not store full payment card details)
  • Profile information (avatar, language preferences, CEFR level)
  • Learning progress, quiz answers, vocabulary lists, and study activity
  • Communications you send to us (support inquiries, feedback)

2.2 Information Collected Automatically

We automatically collect certain information when you visit, use, or navigate our website, including:

  • IP address
  • Browser type and version, device type, operating system
  • Usage patterns, pages visited, time spent on pages, feature interactions
  • Referring website or source
  • Authentication and session tokens (via Supabase)

2.3 Retention Periods

We retain your personal data only as long as necessary to fulfil the purposes described in this policy:

  • Account data: Retained for the duration of your account, plus 30 days after deletion to allow for account restoration, then permanently deleted.
  • Learning progress: Retained for the duration of your account. Anonymised after account deletion.
  • Payment information: Not stored by us. Our payment processor (Lemon Squeezy) retains transaction records as required by tax law (typically 5–10 years depending on jurisdiction).
  • Usage analytics: Aggregated data retained indefinitely; individual-level data retained for 24 months.
  • Support communications: Retained for 3 years after the last contact.
  • AI feature interactions: Prompts sent to AI providers are not stored by us beyond the duration of the request, except in anonymised form for quality improvement with your consent.

3. How We Use Your Information & Legal Bases

Under data protection law (including the GDPR), we must have a lawful basis for each processing activity. The table below explains how and why we process your data.

PurposeData CategoriesLawful Basis
Providing and maintaining your account and our servicesAccount credentials, profile info, learning progressContract (GDPR Art. 6(1)(b)) — necessary to perform the service you signed up for
Personalising your learning experienceLearning progress, preferences, quiz resultsContract (GDPR Art. 6(1)(b)) — personalisation is integral to the service
Processing payments and subscriptionsPayment info, email, purchase historyContract (GDPR Art. 6(1)(b)) — necessary to fulfil your purchase
Communicating with you about your account and our servicesEmail address, account infoContract (GDPR Art. 6(1)(b)) — service-related communications; or Legitimate interest (GDPR Art. 6(1)(f)) — for non-transactional updates
Analysing usage patterns to improve our servicesUsage data, page views, feature interactionsConsent (GDPR Art. 6(1)(a)) — analytics cookies are only activated after your consent; or Legitimate interest (GDPR Art. 6(1)(f)) — for essential analytics that do not require consent
Providing AI-powered features (Gemini, Groq, OpenRouter)User prompts and inputs submitted to AI featuresLegitimate interest (GDPR Art. 6(1)(f)) — in providing interactive learning; or Consent (GDPR Art. 6(1)(a)) — where required by applicable law
Detecting and preventing fraudulent activitiesAccount data, IP address, usage patternsLegitimate interest (GDPR Art. 6(1)(f)) — protecting our service and users from fraud and abuse
Complying with legal obligationsTransaction records, account dataLegal obligation (GDPR Art. 6(1)(c)) — tax, consumer protection, and other legal requirements

4. Information Sharing

We share your personal data only where necessary and in accordance with applicable law. We do not sell your personal information to third parties.

We may share your information with:

  • Service providers who process data on our behalf under strict Data Processing Agreements (DPAs), including hosting, analytics, authentication, and payment processing
  • Legal authorities when required by law, to protect our rights, or to prevent fraud or abuse
  • Business partners only with your explicit consent

Specific Service Providers

We use the following service providers, each of whom acts as a data processor (or independent controller where noted):

  • Vercel Inc. (hosting and performance) — Privacy Policy
  • Supabase Inc. (authentication, database, storage) — Privacy Policy
  • Google Gemini (AI features) — Privacy Policy
  • Groq Inc. (AI features) — Privacy Policy
  • OpenRouter (AI features) — Privacy Policy
  • Lemon Squeezy (payment processor, merchant of record) — Privacy Policy

5. Cookies & Similar Technologies

We use essential cookies to provide core functionality (such as keeping you signed in). We also use analytics technologies (Vercel Analytics) to understand how our services are used and to improve them. Where required by law, analytics are only activated after you provide consent.

We also use localStorage in your browser to store your cookie consent preferences, theme selection, and certain UI state. This data stays on your device and is not automatically sent to our servers.

For complete details about the cookies and similar technologies we use, including a full cookie table and instructions on how to manage your preferences, please see our Cookie Policy.

6. International Data Transfers

Your personal data may be transferred to, and processed in, countries other than your own. Our service providers are located in various jurisdictions, including:

  • United States — Vercel, Supabase, Google (Gemini), Groq, OpenRouter, Lemon Squeezy
  • Morocco — DeutschBoost (operator)

When we transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed adequate by the European Commission, we rely on:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission — we ensure our service providers sign DPAs incorporating SCCs where required
  • Adequacy decisions where applicable

To obtain a copy of the relevant safeguards, contact us at privacy@deutschboost.com.

7. Data Security

We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:

  • Encrypted connections (HTTPS) for all data in transit
  • Encrypted data at rest where supported by our providers
  • Row-Level Security (RLS) on Supabase to isolate user data
  • Access controls limiting data access to authorised personnel only
  • Regular security assessments and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. If you have questions about our security practices, contact us at privacy@deutschboost.com.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information under applicable data protection law (including the GDPR, UK GDPR, and other relevant regulations):

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") — request deletion of your personal data, subject to certain exceptions
  • Right to restriction of processing — request that we limit how we use your data
  • Right to data portability — request a copy of your data in a structured, machine-readable format
  • Right to object to processing — object to processing based on legitimate interests, including direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal
  • Right to lodge a complaint with a supervisory authority — if you believe we have processed your data in violation of applicable law, you have the right to file a complaint with your local data protection authority

How to Exercise Your Rights

To exercise any of these rights, email us at privacy@deutschboost.com. We will respond within 30 days (or such shorter period as required by applicable law).

To protect your privacy, we may need to verify your identity before processing your request. This may involve asking you to confirm information associated with your account or provide additional identifying information. We will not discriminate against you for exercising any of your rights.

Supervisory Authority

If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority. A list of EEA data protection authorities is available at edpb.europa.eu. If you are in the United Kingdom, you may contact the Information Commissioner's Office (ICO).

9. EU Representative

Since DeutschBoost is operated from outside the European Economic Area, we have designated an EU representative in accordance with Article 27 of the GDPR:

[EU Representative Name/Company]
[EU Representative Address]
Email: [representative email]

This section will be updated once an EU representative has been formally appointed. Until then, please direct all data protection inquiries to privacy@deutschboost.com.

10. Children's Privacy

Our services are intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe a child under 16 has provided personal information, please contact us at privacy@deutschboost.com and we will take steps to delete it promptly.

11. Automated Decision-Making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Any automated features (such as level recommendations or learning path suggestions) are designed to enhance your experience and are subject to human oversight.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Where changes are significant, we may also notify you by email or through the service.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: privacy@deutschboost.com
  • Postal address: Maison Ibrahimi, Rue Abdellah Rajii 18, Casablanca, Maroc