How we handle your data

• Account data: Your email, your preferred UI language, and your onboarding answers (target level, timeline, reason, interests).
• Test results: Your responses, computed CEFR levels, generated feedback, and saved vocabulary.
• Payment data: Handled by Stripe. We never store your full credit card number — only Stripe customer IDs.
• Audio recordings: When you use the speaking section of the paid test or voice conversation practice, we capture audio to transcribe what you said. Test clips (up to 90 seconds) are transcribed and the audio deleted within 24 hours; conversation audio is streamed for real-time transcription and not kept after the session. The transcribed text is kept with your result or session.
• Basic analytics: Pages visited, session timing, approximate device. We don't sell this and don't associate it with external ad identifiers.

To provide the CEFR level assessment, generate personalized feedback, remember your progress, and bill you if you buy a paid test or subscribe. Nothing else. We don't build an ad profile on you, and we don't sell your data to third parties.

• Supabase: Database + authentication + storage (United States).
• Vercel: Application hosting.
• Stripe: Payment processing.
• Anthropic: Language processing to grade your responses. Anthropic does not use our data to train their models.
• OpenAI: Audio transcription and generation. OpenAI does not use our API data for training.
• Deepgram: Real-time speech recognition during conversation practice. It processes your audio to transcribe it and does not use it for training.
• ElevenLabs / Microsoft Azure: Voice generation (text-to-speech) and pronunciation assessment.
• PostHog: Product analytics (usage events). No advertising identifiers.
• Resend: Transactional email delivery (sign-in, receipts, notices).

• Request a copy of your data: email help@getnivelo.com.
• Request correction or deletion: you can delete your account from Settings → Privacy, or email us.
• Opt out of communications: from your email (unsubscribe link) or from your app preferences.

If you're in the European Economic Area or the UK, you have the right to access, correct, port, restrict, or object to the processing of your data, and to lodge a complaint with your data protection authority. Our legal basis is performing our contract with you (providing the service) and our legitimate interest in operating and improving Nivelo.

If you're a California resident, you have the right to know what personal data we collect, to request its deletion, and not to be discriminated against for exercising those rights. We do not sell or share your personal data, so there is no sale to opt out of.

We use cookies to keep your session active, remember your UI language, and for the pre-signup anonymous test. We don't use ad-tracking cookies. No Facebook pixel, no Google Ads.

If we update this policy, we'll notify you by email at least 30 days before material changes take effect.

Questions or requests: email help@getnivelo.com. We respond within 24-48 business hours.