This policy explains what personal data Parlune collects, why, who we share it with, and the rights you have over it. We keep it short and in plain English.
1. Who we are
Parlune (“Parlune”, “we”, “us”, “our”) operates the website parlune.co and the app at app.parlune.co. We are the “data controller” responsible for your personal data. You can reach us at [email protected].
2. The data we collect
- Account details — your name and email address, provided when you sign in with Google or register with an email one-time code.
- Learning data — the YouTube links you import, the transcripts and translations we generate for them, the words and sentences you save, and your review progress.
- Billing data — your subscription plan and usage. All payments are taken by our Merchant of Record, Lemon Squeezy, on their own secure checkout. We never see, receive, handle or store any of your payment details — no card numbers, and nothing else you enter at checkout.
- Technical data — IP address, browser and device information, and cookie / analytics data, used to run and secure the service.
3. How and why we use your data
Under applicable data protection law we rely on the following legal bases:
- To provide the service (performance of a contract) — creating your account, importing and transcribing videos, saving your words, running spaced-repetition review, and taking payment.
- Our legitimate interests — keeping the service secure, preventing abuse, fixing bugs and improving how Parlune works.
- Your consent — optional analytics cookies (see section 6). You can withdraw consent at any time.
- Legal obligation — where we must keep records (for example, tax) or respond to lawful requests.
4. AI processing of video content
To turn a video into a lesson, the audio and the transcript we generate are sent to trusted third-party AI providers for speech recognition, re-segmentation and translation. This content is processed only to create your study material. We do not use your saved words, transcripts or learning activity to train our own or anyone else’s AI models.
5. Who we share data with
We don’t sell your data. We share it only with the service providers (“processors”) that help us run Parlune, and only as far as they need it:
- Payments — Lemon Squeezy, our Merchant of Record, handles checkout, card processing, subscriptions and sales tax / VAT.
- Hosting & database — Vercel runs the service; our application code executes in Frankfurt, Germany. MongoDB Atlas stores your account and learning data in Belgium. Vercel operates a global network, so requests may pass through servers outside the EU in transit.
- Email — Resend delivers sign-in codes and account emails.
- Analytics — PostHog (EU-hosted) provides privacy-friendly usage analytics, only after you opt in.
- AI & transcription providers — Groq, Google, AssemblyAI, fal, Anthropic and OpenAI provide the speech-recognition and translation described in section 4. A proxy provider is used to fetch public video audio.
Some of these providers are based in other countries, so your data may be transferred internationally. Where it is, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
6. Cookies & analytics
We use a small number of cookies to keep you signed in and to run the site. Optional analytics cookies (PostHog) are only set if you accept them via our cookie banner — nothing analytics-related is loaded until you agree, and you can change your mind at any time.
7. How long we keep it
We keep your account and learning data for as long as your account exists. You can delete your account — and everything in it — yourself at any time from your account settings, or email us and we’ll do it for you. Once your account is deleted this data is gone, except for the limited records we’re legally required to keep (such as the billing and tax records held by our payment provider). See our Data Deletion page for the exact steps.
8. Your rights
We act as the data controller for your personal data and handle it in line with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). You have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email [email protected].
9. Children
Parlune is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we’ll delete it.
10. Changes to this policy
We may update this policy from time to time. If we make a significant change we’ll update the date above and, where appropriate, let you know by email.
11. Contact
Questions about your privacy? Email [email protected].
