Privacy Policy

Last updated: 3 August 2026

Who we are

KorrektWort ("we") is operated by Mohammad Mirzakhanidehkordi, Scharrnstraße 2, 38100 Braunschweig, Germany. Contact: contact@korrektcode.de. We are the controller of your personal data under the GDPR.

What we collect

• Account data: your email and name (from Google sign-in), and your chosen native language.
• Approximate country: a two-letter country code derived from your network location when you sign up (for example DE). We never store your IP address, and nothing more precise than the country. We use it to understand where our learners are.
• Learning data: the words you save, personal notes, review progress, saved grammar lessons, generated stories, and the German texts you paste into the Explain feature together with their analyses and your follow-up questions (stored so you can re-read them; you can delete each saved text yourself).
• Practice conversations are processed to generate replies and corrections; the conversation itself is not stored on our servers. Only the short lesson summaries you explicitly choose to save are kept.
• Invite data: if you sign up through an invite or school link, we store which code you used (see "Invites and school codes" below).
• Notification data: if you enable push notifications, your browser's push subscription (a technical endpoint, no message content); you can disable it anytime.
• Billing data: credit balance, a credit ledger, and payment references (payments are processed by Stripe; we do not store card details).
• Technical data: minimal logs needed to operate, secure, and fairly rate-limit the service.

Why we use it (legal basis)

To provide the service you signed up for (Art. 6(1)(b) GDPR), to keep it secure and working (legitimate interests, Art. 6(1)(f)), and to process payments you initiate.

Processors we use

We share data only with providers that help us run KorrektWort, under data-processing agreements: Google (sign-in), our hosting and database providers (Vercel, Neon, EU region), Anthropic (the AI behind enrichment, text explanations, practice conversations, stories, and correction of texts you write yourself: it receives the words, texts, and messages you submit to those features), Resend (sign-in and progress emails), and Stripe (payments). If you enable push notifications, reminders are delivered through your browser vendor's push service (e.g. Google, Apple, or Mozilla). We measure site usage with Vercel Web Analytics, which is cookieless and collects no personal identifiers. Some processing may occur outside the EU under appropriate safeguards.

Invites and school codes

If you sign up through a friend's invite link or a school/partner code, we store which code you used, to grant bonus credits and to show the inviter or partner aggregated statistics only: how many people joined through the code and combined, non-identifying activity numbers (such as total words added, reviews done, and a distribution of CEFR levels). A school or partner never sees your name, your email, your words, or any other individual data.

Notifications and emails

Push reminders are strictly opt-in and can be turned off anytime in Account or in your browser settings. We may send you a weekly progress email, which you can switch off in Account or with the one-click link in the email itself. Sign-in and payment emails are transactional and required for the service.

Cookies

We use only strictly necessary cookies: a session cookie that keeps you signed in and a security (CSRF) cookie that protects the sign-in flow. They are required for the service to work and therefore need no consent (§25 TTDSG). We set no advertising or tracking cookies; our usage statistics (Vercel Web Analytics) work without cookies and without personal identifiers, which is why you see no cookie banner here.

Retention

We keep your data while your account exists. You can delete your account at any time from the Account page, which permanently erases your personal data.

Your rights

You have the right to access, correct, export, and delete your data, and to object to or restrict processing. You can export your data and delete your account yourself on the Account page, or contact us at contact@korrektcode.de. You may also complain to a supervisory authority.

This is a starting template and not legal advice, have it reviewed before launch.