Privacy Policy

Last updated: 31 October 2026

Lektor (lektor.app) helps you learn a language through content. This policy explains what personal data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

Who is responsible

Lektor is operated by Tiago Moita, Porto, Portugal (the "data controller"). Contact: lektor.app@gmail.com.

What we collect

Account data: your email address and, if you sign in with Google, your name and profile picture.
Learning activity: what you open and how you use it, plus your settings such as language and content preferences.
Invite and payment records: invite codes you redeem and a record of your purchase. Card details are handled by Stripe and never reach us.
Technical data: basic information your browser sends (such as IP address and device type), used to run and secure the service.

Why we use it

To create your account and let you sign in (performance of our contract with you).
To provide the service and remember your progress and settings (contract).
To process payments and keep required records (contract and legal obligation).
To understand, in aggregate, how Lektor is used so we can improve it (legitimate interest). Analytics never include the content you read or your email address.
To keep the service secure and prevent abuse (legitimate interest).

We do not sell your data and we do not use it for advertising.

Who processes data for us

We use trusted providers who process data only on our instructions:

Supabase: database, sign-in and file storage (servers in the EU).
Vercel: website hosting.
Stripe: payments.
PostHog: usage analytics (EU servers).
Google: optional "Sign in with Google".
Our email provider: sign-in and account emails.

Some providers may process data outside the EU. Where they do, they rely on safeguards approved by the European Commission, such as Standard Contractual Clauses.

Cookies and local storage

We only use storage that is necessary to keep you signed in and remember your settings. We do not use advertising or tracking cookies.

How long we keep data

We keep your account data while your account is active. If you ask us to delete your account, we delete your personal data within 30 days, except records we must keep by law (such as payment records).

Your rights

You can ask to access, correct, delete or export your data, and you can object to or restrict certain uses. Email us at lektor.app@gmail.com. You also have the right to complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt).

Changes

If we change this policy, we will update the date above and, for significant changes, let you know.