Privacy Policy

1. Who we are

Learn Romanian Hub (“we”, “us”, “our”) is a Romanian language learning platform at learnromanianhub.com, operated by Artix Innovations, trading as Learn Romanian Hub, a business registered in the Netherlands.

• Registered address: Valse IJsboutpad 14, 4125 RJ Hoef en Haag, Netherlands.
• Chamber of Commerce (KVK): 92697895.
• VAT (BTW): NL004970684B26.

Artix Innovations is the data controller for your personal data. For data protection enquiries, contact support@learnromanianhub.com. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your own national supervisory authority.

The Service is for people aged 16 and over. We do not knowingly collect personal data from anyone younger; if we learn that an account belongs to someone under 16, we delete it.

2. Data we collect

• Account data: email address, display name (chosen by you).
• Sign in with Apple or Google: with Apple, we receive a unique identifier, your email address (which may be a private relay address) and, if you choose to share it, your name; with Google, a unique identifier, your email address, your name and your profile picture. After Sign in with Apple in the iOS app we also store an Apple token, encrypted, only so we can revoke our access when you delete your account.
• Learning data: lesson completions, SRS card states, pronunciation recordings (processed in-session, not stored — we keep your scores and a text transcript of what the speech engine heard), conversation transcripts, texts you submit for writing correction (with the corrections), placement test results.
• Audience profile: optional answers to three onboarding questions (why you’re learning, your level, time per week). Used to personalise your curriculum path. Your level and weekly time are also included in usage analytics (below); why you’re learning is never sent to analytics.
• Payment data: handled entirely by Stripe on the website, and by Apple for purchases in the iOS app. We receive only a subscription status (tier, renewal date) and the store’s reference for it, never card details.
• Usage analytics: page views and a few key events (sign-up, checkout started, purchase, lesson completed), sent to Google Analytics and PostHog, and other in-app events (lesson started, etc.), sent to PostHog only. Once you sign in, PostHog links them to your account ID together with a few learning details — your plan, level, starting level, weekly study time, interface language, whether you finished setup and your sign-up date — so we can see how different kinds of learners use the app. It never receives your name, your email or why you’re learning Romanian. Analytics cookies are only set if you opt in — see our Cookie Policy.
• Technical data: IP address (used for rate limiting, not stored long-term), browser type, error logs.
• Push notifications (iOS app): if you turn on reminders, we store your device’s notification token to send you at most one practice reminder a day on each device. You can turn reminders off in Settings → Email preferences (Learning reminders) or in your iPhone’s settings. Signing out removes this device’s token.
• Signup source: when you sign up we record how you found us — the referral or partner link you used, campaign tags in that link (such as utm_source), the page you landed on, the site that linked to us, a discount code you used at checkout, and your optional answer to “How did you hear about us?”. It stays in our own database, is used to measure our marketing and to pay our partners, and is never sent to analytics or advertising services. A partner who brought you sees only totals, never who you are.

3. How we use your data

• Deliver the service (lessons, SRS, AI conversation).
• Personalise your curriculum based on your onboarding profile.
• Process payments and manage subscriptions via Stripe and, for purchases in the iOS app, via Apple and RevenueCat.
• Improve the platform through usage analytics (only with your consent; Google Analytics is not linked to your account; PostHog is linked to your account ID, see section 6).
• Send account and service emails (account confirmation, password reset, billing) and, unless you switch them off in Settings → Email preferences or through the unsubscribe link, learning reminders, a weekly summary and occasional product news. We record whether our emails are delivered, opened or clicked, so we can stop mailing people who do not read them.
• Respond to support requests.
• Measure where our learners come from and pay the members and partners who refer them.

We do not sell your data. We do not use your data for advertising.

4. Legal basis (GDPR)

We process your data under:

• Contract performance: account data, learning data, payment processing.
• Legitimate interests: error monitoring; recording how you found us (a discount code, a partner or friend code from the web address or typed at sign-up, and the referral, partner or campaign link if you allowed those cookies) to measure our marketing and pay referral partners; and the reminder, summary and product-news emails and their delivery reporting (section 3), which you can switch off at any time.
• Consent: usage analytics (the analytics cookie choice on the website, Settings → Privacy in the app; see section 6), the referral and partner cookies (the cookie banner), audience profiling and the “How did you hear about us?” question (both optional; you can skip them), and practice reminders in the iOS app (push notifications, which you turn on yourself).

5. Data retention

• Account data: retained while your account is active. Deleted within 30 days of account deletion request.
• Learning data: retained while your account is active.
• Conversation transcripts: retained while your account is active, and deleted with your account.
• Analytics events: retained for 12 months in PostHog. The learning details linked to your account ID are not yet removed automatically when you delete your account — ask us and we will delete them.
• Payment records: your Stripe customer profile (name, address, saved payment methods) is deleted with your account. Invoices and charge records are retained by Stripe as required by tax and accounting law, independent of your account.
• Deletion record: to evidence that a deletion was carried out and to help prevent fraud, we keep a minimal, non-identifying record — a non-identifying account reference and a one-way hash of your email, with no name, address, or other personal details.
• Signup source: retained while your account is active and deleted with it. Commission records we need for accounting are kept without your identity.
• Push notification tokens: kept until you sign out on that device or the device stops accepting them. The Apple token from Sign in with Apple: deleted when we revoke our access, at the latest when you delete your account.

6. Third-party services

• Supabase (EU West): database and authentication.
• Stripe: payment processing.
• Anthropic: AI features (tutor conversations, writing correction and feedback on written answers); what you write there is sent to the Anthropic API.
• Azure AI Speech (Microsoft): pronunciation scoring; your recording is sent for scoring and not stored.
• Resend: email delivery, including delivery, open and click reporting.
• PostHog (EU region): usage analytics and the learning details listed above, linked to your account ID (consent-based).
• Google Analytics: usage analytics, not linked to your account (consent-based; not used in the iOS app).
• Azure Application Insights: error monitoring and diagnostics.
• Microsoft Azure Static Web Apps: hosting (EU West).
• Apple: Sign in with Apple, App Store payments for subscriptions bought in the iOS app, and push notifications.
• RevenueCat (USA): receives the status of App Store subscriptions from Apple; it gets your account ID and purchase history, never your payment details.
• Google: Sign in with Google, if you use it.
• Microsoft Bookings: booking Mădălina’s group classes (the name and email you enter on the booking page).

7. Your rights

Under GDPR and applicable data protection law, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your data in a portable format.
• Withdraw consent (for usage analytics, audience profiling, referral and partner cookies, and push reminders).
• Ask us to restrict processing, or object to processing based on legitimate interests.
• Lodge a complaint with your national data protection authority.

To exercise these rights, email: support@learnromanianhub.com. We’ll respond within 30 days.

8. Cookies

We use essential cookies to keep you signed in (Supabase Auth) and to process payments securely (Stripe). With your consent, we also use analytics cookies (Google Analytics and PostHog) to understand how the platform is used and improve it. Once you sign in, PostHog links these events to your account ID (a random code, not your name or email; see section 2). Analytics cookies are not set until you opt in, and you can change your choice at any time via the “Cookie preferences” link in the footer. We do not use advertising cookies. For the full list of cookies and how to manage them, see our Cookie Policy.

We also use two first-party attribution cookies (ref_code and lrh_attr, 30 days) that remember which referral, partner or campaign link brought you, so we can credit them if you sign up. They hold no personal data and are never shared with advertisers. They are set only if you allow “Referral and partner links” in the cookie banner.

Without these cookies, a partner or friend code in the web address (such as ?ref=…) or one you type at sign-up is still stored with your account when you sign up, so the partner or friend can be credited; nothing is stored on your device for it.

9. Changes to this policy

We’ll notify registered users by email of material changes at least 14 days before they take effect. The “last updated” date at the top of this page reflects the most recent revision.