Privacy Policy

1. Data Controller

Wesley B. Calloway (sole trader, Slovakia), trading as Just Talk English, is the data controller responsible for personal data processed via Word Rizzler. Contact: justtalkenglish@gmail.com.

1a. Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle handles checkout, payment processing, tax compliance, invoicing, subscription management, customer service inquiries related to billing, and refunds. When you make a purchase, Paddle is the data controller for the payment data you submit at checkout; see Paddle's privacy notice at paddle.com/legal/privacy.

2. Data we collect

• Account data: email address, display name, authentication credentials.
• Learning data: saved words, quiz attempts, stories, sentences you submit.
• Usage data: page views, login events, feature interactions (anonymous, aggregated).
• Consents: the date and version of policies you accepted.

We do not store IP addresses, precise location, or device fingerprints.

3. Lawful basis (GDPR Art. 6)

• Contract performance — to provide the app you signed up for.
• Legitimate interest — basic anonymous analytics for service improvement.
• Consent — optional analytics cookies and marketing emails (opt-in).

4. How we use your data

• Provide and maintain the app.
• Personalise your learning experience.
• Process payments for paid plans.
• Send transactional emails (account, billing, security).
• Detect fraud and abuse.

5. AI processing

Your lookups and quiz inputs are sent to AI providers (e.g. Google, OpenAI) to generate definitions, examples and stories. Inputs are processed transiently and are not used by us to train models. Do not enter sensitive personal data.

6. Sub-processors

• Supabase (database & auth, EU region) — hosting.
• Google / OpenAI — AI model inference.
• ElevenLabs — text-to-speech.
• Paddle.com Market Limited — Merchant of Record for payments, subscription billing, tax, invoicing, and refund handling.

7. Data retention

We keep account data while your account exists. You can delete your account at any time from Settings; deletion is permanent and removes all associated learning data within 30 days from backups.

8. Your rights under GDPR

• Access (Art. 15) — download all your data from Settings.
• Rectification (Art. 16) — edit your profile.
• Erasure (Art. 17) — delete your account from Settings.
• Restriction & objection (Art. 18, 21) — contact us.
• Portability (Art. 20) — your data export is provided as JSON.
• Lodge a complaint with your local supervisory authority (in Slovakia: Úrad na ochranu osobných údajov SR).

9. International transfers

Some sub-processors may process data outside the EEA. We rely on Standard Contractual Clauses where applicable.

10. Security

Data is encrypted in transit (TLS) and at rest. Authentication uses industry-standard hashing. Access to production data is limited to authorised personnel.

11. Children

The service is not directed to children under 16. If you believe a minor has provided personal data, contact us and we will delete it.

12. Changes

We will notify you of material changes by email or in-app banner. Continued use after changes constitutes acceptance.

13. Contact

Questions or requests: justtalkenglish@gmail.com.