Privacy Policy

Data controller

The data controller is Roshan (Migrantalk), in connection with Saarland University (Universität des Saarlandes). Contact: roshanmazlomyar@gmail.com.

What data we process

• Account data: email address, name, country, and, if you register with a residence in Germany, a phone number. Your password is stored only as a hash, never in plain text.
• Verification status of your email address and phone number, and your account's creation date.
• Learning progress: completed exercises and your learning streak, linked to your account.
• Feedback: the text you submit, an optional email address, and the page and language the feedback was sent from.
• Usage statistics: a randomly generated, pseudonymous session identifier (stored in your browser's local storage, not a cookie), pages visited, and selected language. This identifier is not linked to your account.
• Session cookie: a technically necessary, httpOnly cookie used to keep you signed in.

Purposes of processing

We process this data to create and manage your account, to provide the learning platform and store your progress, to verify your identity via SMS code if you provide a German phone number, to improve the platform using feedback and usage statistics, and to communicate with you about your account or support requests.

Legal basis

Processing is carried out to fulfil our contract with you (Art. 6(1)(b) GDPR), on the basis of our legitimate interest in improving the platform (Art. 6(1)(f) GDPR), or, where you provide data voluntarily, on the basis of your consent (Art. 6(1)(a) GDPR).

Recipients and third parties

We do not share personal data with advertising networks and do not sell personal data.

• Vercel Inc.: hosting and delivery of the platform.
• Neon (Postgres): database storage for account and learning data.
• Resend: sends emails (for example confirmation and sign-in codes).
• Twilio: sends the SMS verification code, only if you provide a German phone number.
• Anthropic: if you use the AI correction in Writing or the pronunciation feedback, the text you enter for it (or the recognised speech) is sent to Anthropic's API for evaluation. Your name and email address are not sent with it. Please do not enter sensitive personal information into these fields.

Transfers to third countries

Some of the providers named above are based in the United States or operate systems there, so a transfer of personal data to the US cannot be ruled out. It relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses (Art. 44 et seq. GDPR).

Minimum age

Migrantalk is intended for people aged 16 and over. If you are younger, please use the platform only with the consent of a parent or guardian.

Retention period

Account-related data is retained for as long as your account exists. Upon request to the contact address above, your account and associated personal data will be deleted, unless a legal retention obligation applies.

Your rights

To exercise these rights, contact us at roshanmazlomyar@gmail.com.

• Access to the data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Lodging a complaint with a data protection supervisory authority

Cookies and local storage

We use one technically necessary session cookie. For usage statistics, we use a pseudonymous identifier in your browser's local storage instead of tracking cookies. We do not use cookies or identifiers from third-party advertising or analytics services.

Changes to this policy

This Privacy Policy may be updated to reflect changes to the platform or to applicable law. The current version is always available on this page.