Privacy Policy

Ahoj is operated by Galata Gichile (Slovakia) (the controller). This policy explains what personal data we process when you use the website and app.

Contact the controller at galata30gichile@gmail.com. How scores and AI replies work.

This is a product privacy notice, not legal advice. If you live in the EU or EEA you have rights under the GDPR, including the right to complain to a supervisory authority such as the Office for Personal Data Protection of the Slovak Republic (ÚOOÚ).

Depending on how you use Ahoj, we process:

• Account data: email, optional name and avatar, sign-in method (email or Google), CEFR level, and reminder preferences.
• Learning data: lesson progress, quiz and exam attempts, vocabulary review, skill practice (including writing text and speaking transcripts), and in-app feedback.
• Billing data: Stripe customer and subscription identifiers, plan, payment status, and billing address when collected for tax. Card numbers are handled by Stripe, not stored on our servers.
• Technical data: session cookies, basic device/browser signals, and error reports.

• To create and secure your account, and to provide lessons and practice (contract).
• To bill Premium, run trials, handle failed payments, refunds, and VAT where Stripe Tax applies (contract).
• To remember your CEFR track and keep you signed in (contract / legitimate interest).
• To generate AI practice and feedback when you start those activities (contract).
• Optional due-card reminder emails if you turn them on in Profile (consent). We send at most one per day, and only if cards are due and you have not studied yet.
• To fix bugs and keep the service secure (legitimate interest).
• Google sign-in is optional; we receive the account details Google shares with us (consent).

We use essential cookies for authentication (Supabase session) and a cefr_track cookie so your chosen level can follow you before it is saved on your profile. We also store a consent cookie after you accept cookies and the terms. We do not use advertising cookies.

The browser may also store a local cache of vocabulary review and alphabet practice on your device. Clearing site data removes that cache; signed-in progress stored on the server remains until you delete your account.

We use other companies to run Ahoj:

• Supabase — accounts, database, and file storage (including avatars and grammar PDFs).
• Stripe — checkout, subscriptions, invoices, and the customer portal.
• Google — optional sign-in, and Gemini for some text, speech, and listening audio.
• Groq — backup text generation when Gemini is unavailable.
• Sentry — error monitoring when that service is configured.

Some of these providers process data outside the EU. They publish their own terms and, where required, Standard Contractual Clauses. Speaking and writing submissions are sent to the AI provider so it can return feedback. Do not include extra personal data in those answers.

We keep account and learning data until you delete the account. Stripe may retain payment records for tax and accounting. Error logs are kept only as long as needed to debug. After deletion we may keep a minimal record that an account was removed, to prevent abuse.

You can view and update name, email preferences, and level in Profile. You can delete your account there as well. You may also ask for access, correction, erasure, restriction, objection, or a copy of data you provided (portability), where the GDPR applies.

Write to galata30gichile@gmail.com for a privacy request. You can also send a message with the in-app feedback control while signed in.

Ahoj is not directed at children under 16. If we learn we have an account for a child without appropriate consent, we will delete it.

We may update this policy. The “Last updated” date will change. See also the Terms of Service.