Skip to content
← Back to Dashboard

Legal & trust

Privacy Policy

Last updated: April 19, 2026

1. Overview

GermanDost ("we", "our", "the app") is a German learning platform built for Urdu, Hindi, and Bangla speakers. The project is operated from Pakistan as an educational/hobby initiative. We do not collect personal data beyond what is strictly necessary for the app to function, and we are committed to being transparent about how we handle your information.

2. Data We Collect

Learning Progress (stored locally)

Your learning progress lives on your device in browser storage (localStorage and IndexedDB). This includes completed lessons, quiz scores, flashcard review states, game scores, streak data, and vocabulary progress. This data stays on your device and is not transmitted to our servers unless you create an account.

Account Information (optional)

If you create an account, we store your display name and email address for authentication and to sync your progress across devices. Account data is managed securely through our authentication provider.

Aggregate Analytics

We use Vercel Analytics and Speed Insights to understand how the app is used. These are privacy-friendly, first-party, cookieless analytics that do not track individual users across sites. We collect aggregate page views, performance metrics, and anonymous error reports via Sentry.

3. Data We Do NOT Collect

  • We do not sell your personal data to third parties
  • We do not use tracking cookies or advertising pixels
  • We do not collect location data
  • We do not access your contacts, camera, or microphone without permission
  • We do not share your learning data with other users
  • We do not store the sensitive details you type into the settle-in tools (calculators, scam scanner, Anmeldung tracker, benefits/APS/ Führerschein checkers) on our servers — nationality, residence-permit, income, rent and family inputs are processed in your browser and, where saved, kept in your device's local storage only

4. Text-to-Speech

The app uses your device's built-in text-to-speech engine to pronounce German words and sentences. Audio is generated locally on your device and is not sent to any server.

5. Offline Usage

GermanDost works offline using service workers and local storage. Your learning progress is saved on-device and syncs when you reconnect. No data is lost when you go offline.

6. Third-Party Services (Data Processors)

We rely on the following processors under Article 28 GDPR. Each has signed a Data Processing Agreement with us where applicable and operates under GDPR-compatible safeguards (standard contractual clauses for transfers outside the EU/EEA).

  • Vercel Inc. (USA) — Hosting, edge network, cookieless analytics, speed insights.
  • Supabase Inc. (USA / EU) — Database, authentication, file storage (EU region where available).
  • Resend (USA) — Transactional email delivery (receipts, invite emails, password resets).
  • Anthropic PBC (USA) via Vercel AI Gateway — AI conversation practice (Claude Sonnet 4.6). Messages you send to the AI chat are processed to generate responses; not used to train third-party models.
  • Stripe Payments Europe Ltd. (Ireland) — Global payment processing (credit/debit cards, Apple Pay, Google Pay, SEPA). PCI-DSS certified.
  • Razorpay Software Pvt. Ltd. (India) — Payment processing for India (UPI, cards, wallets).
  • TPL Life / JazzCash (Pakistan) — Payment processing for Pakistan (wallet, mobile).
  • Sentry (Germany / USA) — Anonymous error and crash reporting.
  • Cloudflare Inc. (USA) — DNS and edge network for germandost.com.

7. Your Rights under GDPR

If you are in the EU / EEA / UK, you have the following rights under Articles 15–22 GDPR:

  • Access — Request a copy of your data.
  • Rectification — Correct inaccurate data.
  • Erasure — Have your account and data deleted.
  • Restriction of processing — Limit how we use your data.
  • Data portability — Receive your data in a machine-readable format.
  • Objection — Object to certain processing.
  • Complaint to a supervisory authority — You may lodge a complaint with the German Federal Commissioner for Data Protection (BfDI) or your local EU data-protection authority.

To exercise any of these rights, email privacy@germandost.com. We respond within 30 days.

7a. Retention Periods

  • Local progress — until you clear your browser storage or uninstall the app.
  • Account data — until you delete the account, or 3 years after last activity.
  • Payment records — 10 years (required by German tax / commercial law, §147 AO, §257 HGB).
  • Support emails — 3 years.
  • AI chat transcripts — stored for 30 days for quality assurance, then deleted. You can opt out in your profile settings.
  • Analytics (aggregated) — retained for 12 months; never tied to an individual.

8. Children's Privacy

GermanDost is an educational app suitable for all ages. Users under the age of 16 should use the app with parental consent. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

9. Contact

For privacy questions, data access requests, or data deletion requests, please email us at support@germandost.com.

This privacy policy applies to the GermanDost web app (germandost.com) and the GermanDost Android app.

GermanDost is an independent educational project operated from Pakistan. It is not affiliated with the Goethe-Institut, TELC, or any German government body.