Privacy Policy

Last updated: 16 September 2026

Who we are

KorrektWort ("we") is operated by Mohammad Mirzakhanidehkordi, Scharrnstraße 2, 38100 Braunschweig, Germany. Contact: contact@korrektcode.de. We are the controller of your personal data under the GDPR.

What we collect

• Account data: your name, email address and profile picture if you sign in with Google, or only your email address if you sign in with an email link, and your chosen native language.
• Approximate country: a two-letter country code derived from your network location when you sign up (for example DE). We never store your IP address, and nothing more precise than the country. We use it to understand where our learners are.
• Learning data: the words you save, personal notes, review progress, saved grammar lessons, generated stories, and the German texts you paste into the Explain feature together with their analyses and your follow-up questions (stored so you can re-read them; you can delete each saved text yourself).
• Practice conversations are processed to generate replies and corrections; the conversation itself is not stored on our servers. Only the short lesson summaries you explicitly choose to save are kept.
• Invite data: if you sign up through an invite or school link, we store which code you used (see "Invites and school codes" below).
• Notification data: if you enable push notifications, your browser's push subscription (a technical endpoint, no message content); you can disable it anytime.
• Billing data: credit balance, a credit ledger, and payment references (payments are processed by Stripe; we do not store card details).
• Technical data: minimal logs needed to operate, secure, and fairly rate-limit the service.

Google user data

If you choose Sign in with Google, Google shares with us, with your permission, your name, email address, profile picture and a Google account identifier (the "openid", "email" and "profile" permissions). We use this only to create your KorrektWort account, to sign you in, and to show your name and picture inside the app. We do not ask for access to anything else in your Google account, such as Gmail, Drive, Calendar or your contacts, and we do not keep the access tokens Google issues when you sign in.

We do not sell Google user data, we do not use it for advertising, and we do not share it with anyone except the processors listed below, and only as far as needed to run KorrektWort. It is stored with the rest of your account in our database (Neon, EU region) and is erased when you delete your account. You can also remove KorrektWort's access at any time in your Google Account settings.

KorrektWort's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why we use it (legal basis)

To provide the service you signed up for (Art. 6(1)(b) GDPR), to keep it secure and working (legitimate interests, Art. 6(1)(f)), and to process payments you initiate.

Processors we use

We share data only with providers that help us run KorrektWort, under data-processing agreements: Google (sign-in), our hosting and database providers (Vercel, Neon, EU region), Anthropic (the AI behind enrichment, text explanations, practice conversations, stories, and correction of texts you write yourself: it receives the words, texts, and messages you submit to those features), Resend (sign-in and progress emails), Stripe (payments), and Sentry (error monitoring, EU region: when something breaks it receives a technical error report, from which we remove your identity, cookies and the content of your request before it is sent). If you enable push notifications, reminders are delivered through your browser vendor's push service (e.g. Google, Apple, or Mozilla). We measure site usage with Vercel Web Analytics, which is cookieless and collects no personal identifiers. Some processing may occur outside the EU under appropriate safeguards.

Invites and school codes

If you sign up through a friend's invite link or a school/partner code, we store which code you used, to grant bonus credits and to show the inviter or partner aggregated statistics only: how many people joined through the code and combined, non-identifying activity numbers (such as total words added, reviews done, and a distribution of CEFR levels). A school or partner never sees your name, your email, your words, or any other individual data.

Notifications and emails

Push reminders are strictly opt-in and can be turned off anytime in Account or in your browser settings. To the email address of your account we send two kinds of email about the service you use: a review reminder when words are due and you have not been active (at most one every three days, and none after three go unanswered), and a weekly progress summary. The legal basis is our legitimate interest in helping you keep learning (Art. 6 (1)(f) GDPR) together with § 7 (3) UWG, as they concern the service you signed up for. You can object at any time, free of charge: with the unsubscribe link in every email, your mail app's unsubscribe button, or the email setting in Account. We do not track whether you open these emails or click their links. Sign-in and payment emails are transactional and required for the service.

Separately, and only if you switch it on yourself in Account, we send an occasional note about new features in KorrektWort: at most once a quarter, only about KorrektWort itself, and never an advertisement for anything else. This one is off unless you turn it on, because it is promotional rather than part of the service. The legal basis is your consent (Art. 6 (1)(a) GDPR, § 7 (2) UWG), which you can withdraw at any time with the same switch or the unsubscribe link in the email, with no effect on anything else.

Cookies

We use only strictly necessary cookies: a session cookie that keeps you signed in and a security (CSRF) cookie that protects the sign-in flow. They are required for the service to work and therefore need no consent (§25 TTDSG). We set no advertising or tracking cookies; our usage statistics (Vercel Web Analytics) work without cookies and without personal identifiers, which is why you see no cookie banner here.

Retention

We keep your data while your account exists. You can delete your account at any time from the Account page, which permanently erases your personal data.

Your rights

You have the right to access, correct, export, and delete your data, and to object to or restrict processing. You can export your data and delete your account yourself on the Account page, or contact us at contact@korrektcode.de. You may also complain to a supervisory authority.