This policy explains what information Español Deluxe collects when you use the app, why we collect it, who we share it with, and how you can control or delete it. We wrote it in plain language on purpose — no legal jargon you have to decode.
Español Deluxe is operated by Karla Luesch, a sole proprietor (ZZP) registered in the Netherlands — Chamber of Commerce (KvK) number 99817004, VAT (BTW) identification number NL005412309B73. For the purposes of this policy, this is the "data controller" — meaning the person who decides what data is collected and why, and who answers for it.
| Data | When |
|---|---|
| Email address | When you sign in (we use passwordless sign-in — you never create a password we could leak) |
| Name | If you enter it during onboarding, so the app can greet you by name |
| Learning progress | Category completion percentages, streak, and practice days — generated automatically as you use the app |
| Basic usage events | Things like "session started" or "today's practice completed," so we know the app is working and can improve it |
| Technical error logs | If something breaks in the app, we log the error message and the page it happened on, so we can fix it |
We do not collect payment card details — those are handled entirely by our payment processor (see section 4), and never touch our servers. We do not collect health, financial, or other sensitive data, and the app is not designed to.
We do not sell your data, and we do not use it to build an advertising profile of you.
We use a small number of trusted service providers ("subprocessors") to run the app. Each one only gets the minimum data it needs to do its job:
| Provider | What it does | Data involved |
|---|---|---|
| Supabase | Stores your account and app data, and handles sign-in | Email, name, progress, usage/error events |
| Vercel | Hosts the app so it loads in your browser | Standard technical request data (e.g. IP address) needed to serve the page |
| Hotmart | Processes payments once you subscribe (not active yet) | Email and subscription/billing details — your card details go directly to Hotmart, never to us |
We do not currently use any analytics, advertising, or tracking provider — no Google Analytics, no Meta Pixel, no similar tool. If that ever changes, we will update this page and ask for your consent first where required (see section 6).
Our hosting (Vercel) and database (Supabase) both run their servers in the European Union, and our company is based in the Netherlands — so your data does not need to leave the EU to be processed. If we ever add a provider located outside the EU, we will name it here and explain the safeguard used.
We don't use AI to generate the app's content, and we don't use it to make decisions about you. We do use your device's built-in speech recognition for the "say it out loud" exercises: when you tap the microphone, your phone or browser (not our servers) sends that short audio clip to Apple's or Google's speech-to-text service — whichever one your device already uses for dictation — to turn it into text so the app can check your answer. We never receive or store the audio itself, only the resulting text. If you'd rather not use this, every exercise also accepts a typed answer instead of the microphone. If we ever add AI that generates content or processes your data on our own servers, we will describe it here — what it does, what data it sees, and how to opt out — before turning it on.
Español Deluxe does not use cookies or local storage for advertising or tracking. We use only what's strictly necessary to make the app work — for example, keeping you signed in. Because nothing non-essential is used, there is no cookie consent banner: there is nothing optional to consent to. If that changes (for example, if we add analytics), we will add a banner that lets you accept or reject it equally easily, before anything non-essential loads.
Under EU/Dutch privacy law (and equivalent rights in other regions), you can:
You can delete your account yourself, at any time, from Account → Delete my account inside the app. This permanently deletes your login, your name, your progress, and your streak. Anonymous technical logs that can no longer be tied to you (like an old error log) may be kept only for system stability, never to identify you. For anything else, email us at hola.amiga2026@gmail.com and we'll handle it within 30 days.
If you believe we've mishandled your data, you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
If you live in California, you have the same rights above under the California Consumer Privacy Act (CCPA/CPRA), plus the right to know the categories of data we collect and why (see section 2 and 3) and the right to non-discrimination for exercising these rights. In plain terms: we do not sell or share your personal information with anyone for money or for advertising, and we never will without updating this page first. To exercise any of these rights, email hola.amiga2026@gmail.com.
Español Deluxe is intended for adults and is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect data from children under 16; if we learn that we have, we will delete it.
Your data is protected with row-level security on our database (meaning the system itself blocks anyone — including us, by default — from reading another user's data), encrypted connections, and passwordless sign-in (so there's no password of yours for us to lose). No system is 100% risk-free, but we don't cut corners here.
If we make a material change to this policy — for example, adding a new subprocessor or starting to use analytics — we will update the date at the top and notify you by email before the change takes effect.
Questions about your data or this policy? Email hola.amiga2026@gmail.com.