Privacy Policy

• We collect what we need to teach you English and run your account, nothing more.
• Your writing and speaking are sent to Google (Gemini API) to generate lessons and feedback, and are not used to train public AI models.
• Payments are handled by Paddle as the merchant of record; we never see your full card details.
• Analytics only run after you accept them in the cookie banner.
• You can export or delete your data at any time from your profile, and you can complain to a data protection authority.

The controller responsible for your data is Ing. Vít Hofman, a sole trader registered in the Czech Trade Register, IČO 02065681, VAT ID CZ8602215072, place of business tř. Tomáše Bati 332, 765 02 Otrokovice, Czech Republic. We have not appointed a Data Protection Officer, as we are not required to; privacy requests are handled by the controller directly. Contact us through the contact form or at info@sawuh.cz.

• Account details: your email, name, the language you speak, your country and time zone, and optionally a profile photo and any personal context you add to tailor lessons.
• Learning activity: your lessons, answers, level, progress, vocabulary, streaks and time on task, and the text and voice recordings you submit for grading, speaking and conversation practice.
• Company membership (only if you join a company workspace): your company, branch and department, plus aggregated activity your administrator can see. Administrators never see the content you produce.
• Billing data: your plan, seats, billing country and payment status. Card and bank details are collected and stored by Paddle, not by us.
• Support and messages: what you send us through the contact form or by email.
• Technical data: sign-in records, device and browser information, IP address and basic usage logs needed to run and secure the Service, and cookie or analytics data where you have consented.

We only process your data where the law lets us. Our bases under the GDPR are:

• Performance of a contract: to create your account, deliver and personalise your learning, and provide support.
• Legal obligation: to keep tax and accounting records and answer lawful requests.
• Legitimate interests: to secure the Service, prevent abuse, and improve how it works, balanced against your rights.
• Consent: for optional analytics cookies and optional marketing or progress emails. You can withdraw consent at any time.

To generate lessons, grade writing and speaking, and give feedback, our features send the text you write and, for speaking practice, your voice recordings to our AI provider, Google, through the Gemini API. This data is processed to produce your result. Under our terms with Google, your prompts and content are not used to train Google's public models.

Grading and level estimates are produced with the help of AI, but they are learning aids that you can retry and that never carry a legal or similarly significant effect on you. We do not use your data for automated decisions of that kind within the meaning of Article 22 GDPR.

We use a small number of strictly necessary cookies to sign you in, remember your language and keep the Service secure; these do not need consent. With your consent, we also use Google Analytics to understand how the site is used so we can improve it. Analytics and any non-essential cookies load only after you accept them in the cookie banner, and we apply Google Consent Mode so no analytics data is sent until then. You can change your choice at any time by clearing the banner cookie or contacting us.

We share data only with the service providers (processors) we need to run Futoriq, under contracts that require them to protect it:

• Google (Gemini API) - AI generation, grading and speech processing.
• Google Analytics - website analytics, only with your consent.
• Paddle.com Market Ltd - our merchant of record: payments, invoicing, tax and refunds.
• Brevo - transactional and optional progress emails.
• Hetzner Online GmbH - EU hosting and object storage that runs the Service and stores uploaded files.

We may also disclose data where the law requires it, or to protect our rights and users. We do not sell personal data or share it for cross-context behavioural advertising.

Our servers and storage are in the European Union (Hetzner, Germany). Some providers, such as Google and Paddle, may process data outside the EU, including in the United States. Where they do, the transfer is protected by an appropriate safeguard under the GDPR, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework. You can ask us for details of the safeguard that applies.

We keep your account and learning data for as long as your account is active. When you delete your account, we delete or anonymise your learning data promptly and remove it from routine backups within 90 days. We keep the limited billing and tax records the law requires (in the Czech Republic, generally up to 10 years), and we keep contact messages only as long as needed to deal with your request.

We use encryption in transit, access controls, EU-based hosting and the principle of least privilege, and we keep the amount of personal data we hold to what we need. No service can promise perfect security, but if a breach ever affects your rights, we will notify the competent authority and, where required, you, without undue delay.

Subject to local law, you can ask us to give you access to your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. You can export or delete everything yourself from your profile page. To make any other request, use the contact form or write to info@sawuh.cz. We answer within the time the law allows, normally one month, and we never charge for a reasonable request.

European Economic Area and United Kingdom. You have all the GDPR (or UK GDPR) rights above and the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

California, United States. If you are a California resident, you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing. We do not sell your personal information or share it for cross-context behavioural advertising, and we honour Global Privacy Control signals. You will never be discriminated against for exercising these rights.

Colombia. Under Law 1581 of 2012 (habeas data) you may know, update, rectify and delete your data and revoke your authorisation for its processing. You can exercise these rights through our contact channels and, if unresolved, before the Superintendencia de Industria y Comercio (SIC).

Brazil. Under the LGPD you have rights of confirmation, access, correction, anonymisation, portability and deletion, and you may contact Brazil's data protection authority (ANPD). Mexico and the rest of Latin America. You have the rights granted by your local law, including access, rectification, cancellation and objection, and you can exercise them through the contacts above.

Futoriq English is intended for people aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as the Service or the law changes. We post the current version here with its date and, for material changes, tell you inside the Service. Continuing to use Futoriq after a change means you accept the updated policy.

Questions or requests about your privacy are welcome through the contact form or at info@sawuh.cz. If you are in the EU and are not satisfied with our response, you may complain to your local data protection authority.