Privacy policy

Last updated: 11 October 2026

Slovenim is a free website for learning Slovenian. This policy explains what we store about you, why, who helps us run the site, and how you can see, change or delete your data. In short: we keep only what the course needs to work, we don't show ads, we don't sell data, and we don't track you across the web.

Who runs Slovenim

Slovenim is run by an individual developer under the name Slovenim, which is not a registered company. Slovenim decides how your personal data is used, which makes it the "controller" under the EU General Data Protection Regulation (GDPR). You can reach us by email at slovenim@gmail.com.

What we store

Your account: your email address, the name you choose to display, and your password, which is stored only in hashed form, so nobody can read it. If you sign in with Google, we receive your name and email address from Google, but not your Google password.
Your settings: daily goal, timezone, interface language, theme, audio autoplay and flashcard session size.
Your learning: which lessons and units you've completed, your placement test result, your answers to exercises and quizzes and their scores, your flashcards and how you rated them, XP, streaks and badges.
Speaking practice (only if you use the speaking tutor): the text you practised, the words speech recognition heard and your result. We don't keep your voice recordings.
Your subscription (only if you subscribe): your plan, its status and renewal date, and the customer and subscription numbers our payment provider gives us. We never see or store your card details.
Technical data: when you visit, our hosting providers automatically record basic request information such as your IP address, browser type and the pages you open. We use it only to keep the site running and secure.

We don't ask for and don't want any other personal information, such as your address, phone number or payment details (payments are handled entirely by Creem, see below).

Why we use it

To provide the course you signed up for: saving your progress, scheduling your flashcards, and awarding XP and badges. This is necessary to perform our agreement with you (GDPR Article 6(1)(b)).
To send emails you need: confirming your address and resetting your password. We don't send newsletters or marketing.
To keep the site secure and working, for example to stop abuse and to fix errors. This is our legitimate interest (GDPR Article 6(1)(f)).

We don't use your data for advertising, profiling or automated decisions about you.

Cookies

We use only the cookies the site needs: one that keeps you logged in, and ones that remember your chosen theme (light or dark) and interface language. There are no analytics, advertising or third-party tracking cookies, so we don't ask for cookie consent.

Who helps us run the site

These providers process data on our behalf, only to deliver the service:

Supabase: database, sign-in and audio storage. Your account and learning data are stored on servers in Frankfurt, Germany.
Vercel: hosts the website and delivers pages to you through servers around the world.
Our email delivery provider: sends sign-up and password-reset emails.
Google: only if you choose to sign in with Google.
Creem: only if you buy a subscription. Creem is our reseller (merchant of record): it processes the payment, collects your payment and billing details directly, handles taxes and invoices, and lets you manage the subscription. It tells us your email address, plan and payment status. Creem processes payment data as an independent controller under its own privacy policy.
Microsoft Azure: only if you use the speaking tutor. Each recording is sent to Azure speech recognition in the EU to turn it into text, and isn't stored by us or kept by Microsoft after it has been processed.

Some of these companies are based in the United States. Where data leaves the European Economic Area, they protect it with the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Lesson audio is recorded in advance; no personal data is involved. If a recording is missing, your browser may read the text aloud with its own speech engine. Some browsers send that text to their maker's online service to do this.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile and all your learning data are deleted immediately. Copies may remain in our database provider's backups for a short time, until they're overwritten. Technical logs are kept for a limited time by our hosting providers.

Your rights

You can use most of your rights yourself, at any time, on your Profile page:

See and take your data: "Export my data" gives you everything we store about you as a JSON file.
Correct it: change your name and settings in the profile settings.
Delete it: "Delete account" permanently removes your account and all your data.

You also have the right to restrict or object to how we use your data. If you think we've handled your data wrongly, you can complain to the data protection authority in your country. In Slovenia, that is the Information Commissioner (Informacijski pooblaščenec). To use any of these rights, or for any other question about your data, email us at slovenim@gmail.com.

Children

Slovenim is not intended for children under 16. Please don't create an account if you are younger.

Security

All connections to Slovenim are encrypted (HTTPS). Each learner's data is separated in the database, so nobody else can see your progress. Passwords are never stored in readable form.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change affects how we use your data in an important way, we'll tell you on the site before it takes effect.