Privacy Policy

1. Who We Are

EnglishDoor is an AI-powered English learning platform operated by EnglishDoor, based in Spain. For any privacy-related questions, contact us at gluethetwo@gmail.com.

2. Data We Collect

We collect the following information when you use EnglishDoor:

• Account data: Name, email address, and password (encrypted)
• Usage data: Topics completed, lesson progress, credits used
• Conversation data: Messages exchanged with AI tutors (used to provide the service)
• Payment data: Billing information processed securely by Stripe (we do not store card details)
• Device data: Browser type, device type, IP address
• Push notification tokens: If you enable notifications

3. How We Use Your Data

We use your data to:

• Provide and improve the EnglishDoor learning experience
• Process payments and manage your subscription
• Send service-related emails (welcome, receipts, account updates)
• Send push notifications about your learning progress (if enabled)
• Monitor and improve the performance of our AI tutors
• Prevent fraud and ensure security

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate EnglishDoor:

• Supabase — database and authentication
• OpenAI — AI language model for tutoring conversations
• Stripe — payment processing
• Resend — transactional email delivery

Each of these services has their own privacy policy and data handling practices.

5. Cookies

EnglishDoor uses cookies and local storage to:

• Keep you logged in between sessions
• Remember your preferences and settings
• Analyse usage patterns to improve the service

You can control cookies through your browser settings or via our cookie banner. Disabling cookies may affect the functionality of the Service.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial reasons.

Conversation history is retained to provide the service and may be deleted upon request.

7. Your Rights (GDPR)

As a user based in Spain (EU), you have the following rights under the GDPR:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

To exercise any of these rights, contact us at gluethetwo@gmail.com. We will respond within 30 days.

8. Children's Privacy

EnglishDoor is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), encrypted passwords, and secure payment processing via Stripe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The date of the last update is shown at the top of this page.

11. Contact

For any privacy-related questions or requests:
📧 gluethetwo@gmail.com