Privacy Policy
DRAFT – REQUIRES LEGAL REVIEW. This text is engineering documentation of current product behavior. It is not lawyer-approved and is not a compliance certification.
Effective for www.ichbinreza.de · Draft updated for counsel review · Operator: ICHBINREZA SPRACHTRAINING
REZA AI is operated in connection with ICHBINREZA SPRACHTRAINING. This draft describes personal data processed to provide German learning, AI speaking coaching, optional REZA WORLD peer features, billing, and support. It is not lawyer-approved and is not a "GDPR certified" claim.
Categories we process (when you use the product)
- Account / authentication (email, name, session, locale)
- Learning progress, ReviewCards, vocabulary / SRS
- AI tutor prompts and responses (when AI features are used)
- Speech: audio uploads for STT, transcripts, optional TTS audio (AI coaching path)
- Peer realtime audio via LiveKit when World/Talk media is configured (separate from AI coaching)
- World/social: profile, follows, partners, private chat, private partner notes (author-only), reports/blocks (16+ self-attestation for World — not government ID verification)
- Billing identifiers and subscription state via Stripe (card data stays with Stripe)
- Support requests you submit
- Security/audit logs and optional first-party product analytics events (see Cookies)
Processors / infrastructure (configuration-dependent) — named only where the repository actually supports them. No DPA, SCC, or server-location claims are made here:
- Postgres (primary application database)
- Redis (rate limits / job queues)
- Better Auth (authentication sessions)
- Stripe (payments / subscriptions / customer portal)
- Resend (transactional email when configured)
- OpenAI and/or Azure OpenAI (AI text, STT/Whisper-class models, TTS when configured)
- LiveKit (peer/AI realtime audio tokens when configured)
- S3-compatible object storage / MinIO (media uploads)
- Optional Sentry / OpenTelemetry endpoints when configured
AI & voice. AI feedback can be imperfect and does not guarantee exam outcomes. STT recognition confidence is not an acoustic pronunciation score unless a dedicated acoustic provider is enabled (none in 1.0). Retention of audio / transcripts beyond operational need is a counsel/operator decision where not already coded.
Legal bases. Draft placeholders for counsel: contract performance, consent where required (e.g. optional cookies/analytics), legitimate interests (security, fraud prevention, reliability). Counsel must finalize.
Your rights. Export and erase controls for signed-in users are available under Settings → Privacy (APIs /api/me/export, /api/me/erase). Contact info@ichbinreza.de or the controller on Impressum. Billing/audit records may be retained where required by law — counsel to confirm periods.
Retention. Account and learning records are kept while the account is active; erase flows delete or anonymize per product rules. Numeric retention periods for each category: LEGAL_REVIEW_REQUIRED.
Cookie preferences: banner + Cookie settings. See also Trust Center.