Who we are
GoGermany is a German language learning platform operated by Abdullah Tayyab, c/o Rafiq, Dunckerstraße 20, 10437 Berlin, Germany. You can reach us at hello@gogermany.me.
What data we collect
We collect only what is necessary to provide the service:
- —Account information: your email address and optional display name, provided when you sign up or via Google Sign-In.
- —Learning progress: which chapters you have visited, exercise attempts, and scores. This data powers your dashboard and progress tracking.
- —Google profile data (OAuth only): if you sign in with Google we receive your name and email address. We do not receive your password or any other Google account data.
- —Payment data (paid plans only): payment is processed entirely by Stripe. We never see or store your card number, expiry, or CVV. We receive only a confirmation of payment and a customer reference. See the Stripe section below.
Why we process your data
- —To provide the service (contract performance, Art. 6(1)(b) GDPR): your account and learning progress are required to deliver GoGermany.
- —Analytics — only with your consent(Art. 6(1)(a) GDPR): if you accept analytics cookies, we use Google Analytics and PostHog to understand how learners use the platform and improve it. You can withdraw consent at any time (see “Cookies & consent” below).
- —To process payments (contract performance, Art. 6(1)(b) GDPR): payment data is shared with Stripe to fulfil your purchase.
- —To send transactional emails (legitimate interest, Art. 6(1)(f) GDPR): account confirmation, password reset, and purchase receipts.
Cookies & consent
We use two categories of cookies and local storage:
- —Essential (always active): Supabase authentication session token (keeps you logged in) and theme preference. These are required for the service to function and do not require consent under TTDSG.
- —Analytics (consent required):Google Analytics (GA4) and PostHog session recording and event tracking. These are only activated after you click “Accept All” in the cookie banner.
You can withdraw your analytics consent at any time by clearing your browser's local storage for this site (or by contacting us). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Who we share data with
We do not sell your data. We use the following sub-processors:
- —Supabase — database and authentication. Data stored in EU data centres. Privacy policy.
- —Vercel — web hosting and CDN. Privacy policy.
- —Stripe — payment processing. When you purchase a plan, Stripe collects your card details, billing address, and IP address directly. We receive a payment confirmation and Stripe customer ID only. Stripe is PCI-DSS compliant and processes data under a Data Processing Agreement. Privacy policy.
- —Google Analytics (GA4) — analytics only, with consent. If you accept analytics cookies, your usage data (pages visited, session duration, device type) is sent to Google LLC, USA. Google processes this data under the EU–US Data Privacy Framework. Privacy policy.
- —PostHog — analytics & session recording, with consent. If you accept analytics cookies, PostHog records your interactions (clicks, navigation, exercise attempts) to help us improve the course. Data is stored on PostHog's EU cloud servers (eu.posthog.com). Sensitive form fields are not recorded. Privacy policy.
- —Google (OAuth only) — if you sign in with Google. Privacy policy.
Data retention
Your account data and learning progress are retained for as long as your account is active. When you delete your account (Settings → Account), all personal data is permanently deleted from our systems within 30 days. Anonymised, aggregated statistics may be retained. Stripe retains payment records for up to 7 years as required by German tax law.
Your rights (GDPR)
As a user in the European Union, you have the right to:
- —Access the personal data we hold about you
- —Correct inaccurate data (via Settings → Account)
- —Delete your account and all associated data (via Settings → Account)
- —Withdraw consent for analytics cookies at any time
- —Object to processing or request restriction
- —Lodge a complaint with the German data protection authority (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, bfdi.bund.de)
To exercise any of these rights, email hello@gogermany.me. We will respond within 30 days.
Changes to this policy
If we make material changes to this policy we will notify you by email or by a notice within the app before changes take effect. The date at the top of this page always reflects when the policy was last updated.