Privacy

parleu is the controller of your data under the GDPR. The operator's legal name and address will be published here before this policy is final.

Write to us about your data at privacy@parleu.com.

• Your account

  When you sign in with Google, we receive your name, email address, and profile picture, and keep the sign-in tokens Google gives us so you stay signed in. If Google asks you to share the gender on your Google profile and you allow it, we read it once, only so Speak addresses you with the right grammatical forms, and only when you haven’t chosen them yourself. Each session also keeps your IP address and browser name to keep your account safe.

  Legal basis: to provide the service you signed up for (GDPR Art. 6(1)(b)).

• Your learning

  Your settings, lessons done, words and review cards, daily study minutes, the books and audio you upload, and your saved words and sentences. This is the app itself: without it, your progress would be lost.

  Legal basis: to provide the service you signed up for (GDPR Art. 6(1)(b)).

• Speak: your conversations and About you

  Your Speak conversations and their feedback, and what you choose to tell your conversation partners under About you: the name to call you, how to address you grammatically, your city, what you do, a few interests, and why you’re learning. All of it is optional except the conversation itself; you can change or delete it any time, and it goes with your account. Your turns and About you go to Google’s Gemini to answer you; recordings are turned into text by Cloudflare and aren’t kept.

  Legal basis: to provide the service you signed up for (GDPR Art. 6(1)(b)).

• Text you ask the app to explain

  When you tap a word for its explanation, add a book, check what you understood or import a deck, the word, its sentence or a short passage goes to Google's Gemini to answer you. Audio you upload is turned into text by Cloudflare. Word audio is spoken by Google's voices.

  Legal basis: to provide the service you signed up for (GDPR Art. 6(1)(b)).

• Daily reminder

  Only if you turn it on in Settings: we keep your browser's push address and send at most one reminder a day, through your browser's own push service. It shows counts, never lesson or book text. Turn it off at any time.

  Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

• "Tell me when it's ready"

  For a language that is not open yet: your email address, the language, the page language and the date. We write to you once, when that language opens. To stop abuse of the form we keep a one-way scrambled form of your network address for a day.

  Legal basis: your consent for the email (Art. 6(1)(a)); our legitimate interest in stopping abuse for the scrambled address (Art. 6(1)(f)).

Parleu stores only what the site needs to work on your device, which is why there’s no cookie banner. Nothing on your device is used for analytics or advertising.

Cookies: your sign-in session (for a guest, the guest account it belongs to), the language of the pages (one year), the language you picked to learn on this page (one year), whether you hid the offer bar (until the offer ends), and, while you answer the Get started questions, your answers (one hour), so they reach your new account after Google sign-in. The app also keeps your settings, lessons, and progress that haven’t been sent yet on your device so it works offline; that stays on your device.

No advertising cookies, no tracking across sites, and no ads.

We count page visits with Cloudflare Web Analytics, which sets no cookies, stores nothing on your device, and doesn’t identify you. We only see totals, such as visits per page and country. Background jobs, such as turning audio into text, log only numbers and error codes, never your text.

Inside the app, our own server notes what you do so we can see what works: for example, that you started or finished a lesson, closed a review session, changed a setting, or asked for a locked lesson, along with your plan, the language you’re learning, and your own language. These events carry a scrambled account number made with a secret key, never your name, email address, or user ID, and never lesson or book text. Nothing is read from or stored on your device for these events. They’re kept by Cloudflare Analytics Engine for three months, then deleted.

Legal basis: our legitimate interest in understanding how Parleu is used and making it better (GDPR Art. 6(1)(f)). You can object at any time: turn off “Help improve Parleu” in Settings, and from then on nothing is recorded for your account.

Get started counts how many people reach each of its steps, per day and language only: no account, address or cookie is tied to those counts.

Get started also runs Cloudflare Turnstile, an invisible check that identifies automated sign-ups before it creates your account. It’s the only script from outside Parleu besides the visit counter. It runs only on that page, and anything it reads in your browser is used only for that check, never for advertising or to track you across sites. Legal basis: our legitimate interest in keeping Parleu safe from abuse (GDPR Art. 6(1)(f)).

Cloudflare Hosts the app, its database, and your uploads; keeps encrypted backups of your progress and our usage statistics; turns uploaded audio into text; and sends us technical alerts.

Google provides the sign-in, Gemini for word explanations and the other help above, and the voices for word audio.

Both are based in the United States and may process data outside the EU under their data protection terms, including the EU Standard Contractual Clauses. We do not sell or share your data with anyone else.

Your account and learning data stay while you have an account; ask us and we’ll delete them. A “tell me when it’s ready” email stays until we’ve written to you or you ask us to remove it. The scrambled network address is deleted after a day. Usage events are deleted after three months. Encrypted backups are overwritten over time.

You can ask to see the data we hold about you, correct it, delete it, take a copy with you, limit or object to how we use it, and withdraw a consent you gave. Write to the address above and we answer within a month. You can also complain to your data protection authority.