Privacy

Who looks after your data

Angus James Goldsmith operates Laskavo and is responsible for your learning data. Flat 5, 18 Brunswick Place, Brighton and Hove, East Sussex, BN3 1NA, United Kingdom

support@laskavo.co.uk

What we use and why

We use your verified sign-in identity, email and optional name to provide your account. We store the vocabulary, grammar notes, passages, answers and progress you choose to save so you can study them. This processing provides the service you request.

We record request identifiers, usage quantities, approximate provider costs and subscription status to protect accounts, limit abuse, manage service costs and operate billing. These activities support our legitimate interests in running a secure, sustainable service. We retain records where the law requires them.

Please use ordinary learning examples and avoid uploading other people’s personal information or sensitive documents. Upload only textbook material you are allowed to use. This pilot is for adults aged 18 or over.

Services that process information

Clerk handles sign-in. Vercel hosts the app and Neon stores learning records. Cloudflare R2 stores encrypted recovery copies when production backups are enabled. Anthropic receives the images, text, relevant vocabulary and answers needed for the AI feature you request. Google Cloud receives the Ukrainian text when you request spoken pronunciation. Uploaded images are processed for extraction; the app does not keep an image library.

Cloudflare also forwards messages sent to our support email. When scheduled recovery and maintenance checks are enabled through GitHub Actions, GitHub temporarily processes the learning records needed for those checks.

When subscriptions open, Paddle will act as the seller and payment provider. Payment details go to Paddle’s checkout. The app stores payment and subscription identifiers, not full card details. Paddle applies its own privacy notice.

Some providers process information outside the UK. Their data-processing agreements and applicable transfer safeguards must be in place before the production pilot opens. Anthropic’s commercial API does not use customer content for training by default; provider retention and safety exceptions are described in its API retention documentation.

Retention and deletion

Your saved learning material remains available while your account is open. Account deletion removes it from the live database and closes access. It also requests removal of your Clerk sign-in account. An interrupted identity-removal request stays queued for completion.

Routine production backups expire within 30 days. If a recovery incident requires keeping a copy longer, access remains restricted and deletion requests must be applied before restored data is used. A limited deletion record supports this process. Operational usage records are removed 90 days after account deletion. Saved request responses expire after 30 days; minimal request identifiers remain while the account is open to prevent duplicate changes. Minimal billing records may be retained for applicable accounting, dispute and legal requirements; Paddle also maintains its own records.

Pronunciation audio may stay in a private temporary server cache for up to 15 minutes. Application error logs omit learning text, submitted answers, uploaded images and payment details. Hosting and authentication providers may keep security logs under their own retention policies.

Your choices and rights

You can download your records from Account. You can request access, correction, deletion, restriction or objection to processing, and portability where applicable. Contact us to exercise these rights or raise a concern. You can also complain to the UK Information Commissioner’s Office.

We use essential authentication cookies and browser storage for sign-in and operation. This release has no advertising cookies or optional analytics. We do not sell learning data or use it for advertising.