Privacy Policy
Last updated: 2026-04-03
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data Collection on This Website
The responsible party for data processing on this website is: Mohammad Areesheh, Connollystr. 3, 80809 Munich, Germany, Email: support@areesheh.com, Phone: +49 152 23263751
2. Data Controller
The responsible party for data processing on this website is:
Mohammad Areesheh
Connollystr. 3
80809 Munich, Germany
+49 152 23263751
support@areesheh.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
3. Hosting
External Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated by a website.
A data processing agreement exists with the provider. Data transfer to the USA is covered by EU Standard Contractual Clauses.
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Legal basis: Art. 6(1)(f) GDPR (legitimate interest) and, if applicable, Art. 6(1)(b) GDPR (contract performance).
3a. Web Analytics (Vercel Analytics)
We use Vercel Analytics to collect anonymized usage statistics for our website. This data helps us improve our website performance and understand how visitors interact with our content.
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Data processed
- Page views (anonymized)
- Time spent on pages
- Device type (desktop, mobile, tablet)
- Browser and operating system
- Approximate geographic location (country/region, based on IP address)
- Referrer (where visitors came from)
Purpose: Improving website performance, understanding user interaction, optimizing user experience.
Legal basis: Art. 6(1)(a) GDPR (consent via our cookie/privacy banner). You can withdraw your consent at any time with future effect.
Privacy policy: https://vercel.com/docs/analytics/privacy-policy
Vercel Analytics is designed to be privacy-friendly: No cookies are used and full IP addresses are not stored. Even with this privacy-friendly setup, we only activate Vercel Analytics on our website after you grant analytics consent.
4. User Account and Course Access
For participating in our courses, we process the following personal data:
Data processed
- Full name
- Email address
- Password (hashed and encrypted)
- Course bookings and progress
- Learning materials accessed
Purpose
- Creation and management of your user account
- Providing course access
- Progress tracking
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Retention: Data is stored as long as your account is active. You can delete your account at any time.
5. Security Features
For the security of your account, we have implemented the following features:
Login History
To detect unauthorized access, we log the following data for each login:
Data processed
- IP address of the login device
- Timestamp of login
- Browser type and version
- Approximate location (country/city based on IP)
Purpose
- Detection and prevention of unauthorized access
- Investigation in case of account compromise
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in account security)
Retention: Login data is automatically deleted after 90 days.
Two-Factor Authentication (2FA)
To increase account security, we offer optional two-factor authentication:
You can disable 2FA at any time in your account settings.
Data processed
- 2FA configuration status (enabled/disabled)
- Recovery codes (encrypted)
- Authentication app token (hashed)
Purpose
- Protection of your account from unauthorized access
- Identity verification during login
Legal basis: Art. 6(1)(a) GDPR (consent - optional feature)
6. Payment Processing
For payment processing of course bookings, DeutschQuiz Plus subscriptions, and paid Library products, we use:
Provider: Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA
Data processed
- Name
- Email address
- Payment details (credit card data is entered directly at Stripe)
- Billing address (if required)
- Transaction data
- Checkout session data and fraud-prevention signals
Purpose
- Processing of payments
- Fraud prevention
- Invoicing
- Assigning paid access rights
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Privacy policy: https://stripe.com/privacy
Credit card data is collected and processed directly by Stripe. We have no access to the complete card data. Data transfer to the USA is based on EU Standard Contractual Clauses.
7. Video Conferencing
For conducting courses, we use:
Provider: Microsoft Teams (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA)
Data processed
- Display name
- Email address
- IP address
- Video/audio data during the meeting
- Participation timestamps
Purpose
- Conducting live lessons
- Interactive learning
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Detailed privacy policy at: https://privacy.microsoft.com/en-us/privacystatement
8. Database and Storage
For storing your data, we use:
Provider: Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992
Data processed
- All data from user accounts
- Course progress
- Communication data
- Library entitlements, purchases, access-token metadata, and download security logs
Security measures
- Encryption at rest and in transit
- Regular security audits
- Row Level Security for data access control
- Automatic backups
Legal basis: Art. 6(1)(b) GDPR (contract performance)
9. Email Communication
For sending emails, including secure Library access and claim emails, we use:
Provider: Brevo (formerly Sendinblue), 106 Boulevard Haussmann, 75008 Paris, France
Data processed
- Email address
- Name
- Email content
- Open and click rates (for newsletters)
Transactional emails
Settings / options
- Booking confirmations
- Password reset
- Course reminders
- Secure Library access emails
- Library claim links
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Newsletter
Settings / options
- Course announcements
- Special offers
- Learning tips
- Library offers and updates
Legal basis: Art. 6(1)(a) GDPR (consent)
You can unsubscribe from newsletters at any time. Every newsletter contains an unsubscribe link.
9a. Digital Library ("Library")
When you request, unlock, or purchase free or paid digital resources in our Library, we process the data required to deliver that resource securely.
Data processed
- Email address
- Requested or purchased Library product
- Language / locale
- Access status (free, purchase, claim, redemption)
- Timestamps for request, entitlement, and delivery
- For secure downloads: account relation, IP address, browser / user-agent data, and the result of the download attempt
Purpose
- Providing requested or purchased Library content
- Managing your access rights
- Sending secure access and claim emails
- Preventing abuse and protecting our digital content
Legal basis: Art. 6(1)(b) GDPR (providing requested or purchased digital content), Art. 6(1)(a) GDPR (optional marketing consent when requesting a free Library resource), and Art. 6(1)(f) GDPR (access security, abuse prevention, and protection of our rights in digital content).
Free Library resources
For free Library resources, we store your email address, the requested product, locale, consent text, and the request timestamp and IP address in order to send the access link and document the delivery request.
Optional marketing consent
If you choose to receive marketing emails when requesting a Library resource, that consent is processed separately from the delivery of the resource. Delivery of the requested resource is treated as service communication; marketing emails require your separate consent and the double opt-in flow described in Section 14.
Secure delivery and download protection
Library files are stored in non-public storage. Downloads are only provided after an entitlement check through short-lived signed links. For paid PDF files, we generate a personalized version with a watermark or reference marking before download in order to help detect abuse and unlawful sharing.
Guest access and claim links
If you request or purchase a Library resource without an active user account, we send a time-limited access or claim link to your email address. For this purpose, we store only a hashed token, its expiry time, and its usage status.
Retention: We retain entitlement and purchase data as long as required for contract performance, support, rights management, and applicable tax or commercial retention duties. Hashed claim/access tokens are stored only with expiry and usage status; they expire after 24 hours or when used. Download and security logs are kept only as long as necessary for access security, abuse detection, and enforcement of our rights.
10. Cookies
Our website uses cookies. These are small text files that your browser automatically creates and stores on your device when you visit our website.
Necessary Cookies
Settings / options
- Session cookies (for login function)
- Security cookies (CSRF protection)
- Cookie consent status
- Guest play limit cookie (dq_guest_fp) – a random identifier to enforce daily quiz limits for non-registered users. Contains no personal data. Duration: 1 year.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Analysis Cookies
Currently we do not use analysis cookies. Should this change, we will ask for your consent in advance.
11. DeutschQuiz – Free Learning App
We operate a free learning app ('DeutschQuiz') at quiz.areesheh.com for practicing the German language. DeutschQuiz can be used without registration (with limited features) or with a user account for the full experience.
Legal basis: Art. 6(1)(b) GDPR (contract performance – for registered users), Art. 6(1)(f) GDPR (legitimate interest in providing a free learning tool – for unregistered users)
What data do we collect in DeutschQuiz?
Data processed
- Account data: email address, name, profile picture (optional), language settings
- Learning progress: quiz results, score (XP), current level, streak data (daily learning chains)
- Game statistics: number of completed quizzes, correct/incorrect answers, average accuracy, leaderboard ranking
- Streak freezes: number of remaining and used streak protections
- Bookmarks: quiz questions saved by the user
- Saved Words: German nouns (with their article) bookmarked by the user in the Article Trainer
- Article Trainer data: training attempts (mode, CEFR level, correctness), best streak values and high scores in the grammar trainer (der/die/das)
- Settings: sound on/off, language, notification preferences
- Device information: when using as a PWA (Progressive Web App), standard browser information is collected
Purpose of data processing
The data is used to provide quiz functionality, run the Article Trainer (grammar exercises), track progress, power the leaderboard, run the streak system (motivation through daily learning), enable the Saved Words feature, and deliver a personalized learning experience.
Profile Photo (Avatar)
You can optionally upload a profile photo that is displayed on your profile and on the leaderboard. The following applies: • Allowed formats: JPEG, PNG, WebP (max. 2 MB) • When uploading, the image is resized to a maximum of 512×512 pixels and converted to WebP format. All metadata (EXIF data such as location, device information) is automatically stripped. • The profile photo is hosted in publicly accessible storage. It is visible to other users if you appear on the leaderboard. • You can change or delete your profile photo at any time. When your account is deleted, the profile photo is automatically and completely removed from storage. • We do not use profile photos for biometric identification or facial recognition. Legal basis: Art. 6(1)(a) GDPR (consent – uploading is voluntary)
AI-generated quiz content
Quiz questions are partially generated using artificial intelligence (OpenAI). No personal data from users is transmitted to OpenAI. The generated content is stored on our servers and reviewed before publication.
Audio content in DeutschQuiz
AI-generated audio files (ElevenLabs, 1209 Orange Street, Wilmington, DE 19801, USA) are used for pronunciation exercises. Audio files for quiz questions and the placement test are pre-generated and cached on our servers – no personal data is transmitted to ElevenLabs in this process.
Real-time Text-to-Speech for AI Dialogue (Premium)
In the AI Dialogue Partner feature (DeutschQuiz Plus only), the AI conversation partner's responses are generated as speech in real-time by ElevenLabs. Only the AI-generated German response text is transmitted to ElevenLabs – no personal data, no user input, and no user voice recordings. The generated audio data is used only for immediate playback and is not permanently stored.
Provider: ElevenLabs, Inc., 1209 Orange Street, Wilmington, DE 19801, USA
Legal basis: Art. 6(1)(b) GDPR (contract performance – providing the premium feature)
Privacy policy: https://elevenlabs.io/privacy
Spaced Repetition system
DeutschQuiz uses a scientifically-based spaced repetition system to optimize your learning outcomes. For this purpose, we store when you answered specific questions and how well you performed.
Progressive Web App (PWA)
DeutschQuiz can be installed as a PWA on your device. In this case, quiz data is cached locally (offline functionality). No additional personal data is collected.
Rewarded Ads
DeutschQuiz uses 'Rewarded Ads' – video advertisements that users voluntarily watch in exchange for in-app benefits (e.g. hints, life restoration, double XP). Watching these ads is entirely voluntary. Data processing by Google AdSense is as described in the Advertising section.
Guest Play Limits (Non-Registered Users)
To prevent abuse and ensure fair usage, we limit unregistered users to 1 free quiz per day. To enforce this limit, we store: (a) a cryptographic hash (HMAC-SHA256) of your IP address – the raw IP address is never stored; (b) a randomly generated identifier in an HttpOnly cookie (dq_guest_fp). Neither the hashed IP nor the random cookie identifier can be used to identify you personally. This data is automatically deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing service abuse and ensuring fair resource allocation).
Retention: Learning progress data: as long as your account is active. Upon account deletion, all quiz data is deleted. Anonymous usage data (without account): 1 year.
11a. DeutschQuiz Plus – Premium Subscription
We offer a paid premium subscription ('DeutschQuiz Plus') that unlocks additional features in the DeutschQuiz app (unlimited hearts, ad-free usage, exam mode, double rewards, AI pronunciation training).
Legal basis: Art. 6(1)(b) GDPR (contract performance – providing the subscription service)
What data do we collect for DeutschQuiz Plus?
Data processed
- Subscription plan (monthly/yearly)
- Subscription status (active, cancelled, expired)
- Start and end of the current billing period
- Payment provider (Stripe for web, RevenueCat/App Store for native app)
- Provider subscription ID (technical identifier at the payment provider)
- Cancellation date (if applicable)
- Free trial status (if applicable)
Purpose of data processing
The data is used to manage your subscription, unlock premium features, process billing, and communicate about your subscription status (e.g. renewal, expiration, cancellation).
Payment processing via Stripe (Web)
When you subscribe to DeutschQuiz Plus via the website, payment is processed through Stripe. The data collected corresponds to Section 6 (Payment Processing). Stripe receives your email address and payment information to process recurring payments.
Payment processing via RevenueCat (Native App)
When you subscribe to DeutschQuiz Plus via the native app (iOS/Android), payment is processed through the respective app store. We use RevenueCat as an intermediary to manage in-app purchases.
Provider: RevenueCat, Inc., 633 Tarava St, Suite 101, San Francisco, CA 94116, USA
Data processed
- App user ID
- Purchase and subscription data from the app store
- Device and platform information
Privacy policy: https://www.revenuecat.com/privacy
Managing your subscription
You can manage and cancel your subscription at any time: Via the Stripe Customer Portal (web subscriptions) or via the subscription management of your app store (native app). Upon cancellation, access remains until the end of the current billing period.
Retention: Subscription data: as long as the subscription is active + 30 days after expiration. Payment receipts: 7 years (tax retention requirement under §147 AO). Upon account deletion, subscription data is pseudonymized.
11b. Advertising (Google AdSense)
On certain pages of our website and in the DeutschQuiz app, advertisements are displayed via Google AdSense. This allows us to finance free content such as DeutschQuiz.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Art. 6(1)(a) GDPR (consent – for personalized advertising with cookies), Art. 6(1)(f) GDPR (legitimate interest – for contextual, non-personalized advertising without cookies)
What data is processed?
Data processed
- IP address (for delivering regional advertising)
- Cookie data (only with your consent in the EEA/UK/Switzerland)
- Device and browser information
- Ad interactions (clicks, impressions)
Cookies and consent
In the European Economic Area (EEA), United Kingdom, and Switzerland, personalized advertising cookies are only set with your explicit consent. You can withdraw or adjust your consent at any time via the consent management platform (Google Consent Mode). Without your consent, only contextual, non-personalized ads are displayed.
Purpose
Financing the free DeutschQuiz offering and other free content. Delivering relevant advertisements.
Where are ads displayed?
Ads are only displayed on public pages and in the DeutschQuiz app. No ads are displayed in protected areas (dashboards, booking process, authentication pages, legal pages) or during active quiz gameplay.
Your rights
You can disable personalized advertising at: https://adssettings.google.com. You can withdraw your consent to advertising cookies at any time. Details about data processing by Google can be found at: https://policies.google.com/privacy
Privacy policy: https://policies.google.com/privacy
11c. Advertising in the Native App (Google AdMob)
In the native Android and iOS versions of the DeutschQuiz app, we use Google AdMob for ad placement (interstitial, app-open, and rewarded ads).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Art. 6(1)(a) GDPR (consent for personalized advertising), Art. 6(1)(f) GDPR (legitimate interest for contextual advertising)
What data is processed?
Data processed
- Device identifiers (Advertising ID / IDFA)
- IP address
- Device and app information
- Ad interactions (clicks, impressions, app-open/interstitial ads, and completions of rewarded ads)
Consent and Tracking Transparency
On iOS, the App Tracking Transparency (ATT) permission is requested before initializing AdMob. You can decline tracking – in this case, only non-personalized ads are shown. On both platforms, the Google UMP (User Messaging Platform) is used to obtain GDPR consent. Without your consent, no personalized ads will be displayed.
Purpose
Financing the free DeutschQuiz app.
Privacy policy: https://policies.google.com/privacy
11d. App Analytics and Crash Reports (Firebase)
In the native Android and iOS versions of the DeutschQuiz app, we use Firebase Analytics (only after your analytics consent) and Firebase Crashlytics by Google.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Art. 6(1)(a) GDPR (consent for Firebase Analytics) and Art. 6(1)(f) GDPR (legitimate interest for Firebase Crashlytics to analyze errors and improve app stability)
Firebase Analytics
If you enable analytics in the privacy settings, Firebase Analytics collects app usage statistics to improve the user experience. We do not transmit a direct account ID to Firebase.
Purpose: Understanding app usage, improving learning features, identifying popular content.
Data processed
- App usage events (e.g. quiz started, quiz completed, Article Trainer used)
- Screen views within the app
- Device type, operating system, and app version
- Approximate location (country/region, based on IP address)
- App instance ID (anonymous, device-specific identifier)
Firebase Crashlytics
Crashlytics automatically collects crash reports if the app terminates unexpectedly.
Purpose: Detecting and resolving app errors to improve stability.
Data processed
- Crash logs (stack traces)
- Device model and operating system version
- App version
- Crashlytics installation ID (anonymous identifier)
Privacy policy: https://firebase.google.com/support/privacy
11e. Speech Recognition and Pronunciation Training (Azure Speech Services)
In DeutschQuiz, we use Microsoft Azure Speech Services for speech recognition (speech-to-text) and pronunciation assessment. This feature allows users to practice their German pronunciation and receive feedback.
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (Azure services are provided via European data centers where available)
Legal basis: Art. 6(1)(b) GDPR (contract performance – providing the pronunciation training feature) and Art. 6(1)(a) GDPR (consent – microphone use requires your active permission via the browser permission prompt)
What data is processed?
Data processed
- Audio recordings of your speech (for real-time transcription and pronunciation assessment)
- The reference text to be spoken (for comparison during pronunciation assessment)
- Technical metadata (audio format, sample rate)
How is your voice data processed?
Your audio recordings are transmitted to and processed by Microsoft Azure Speech Services in real-time. Microsoft processes the audio data solely for providing the service (transcription and pronunciation assessment). Audio recordings are not permanently stored by Microsoft and are not used for training AI models. After processing, audio data is immediately discarded.
What do we receive back?
From Azure, we receive only: the transcribed text, an overall pronunciation score (AccuracyScore, FluencyScore, CompletenessScore, ProsodyScore), and detailed assessments of individual words and phonemes. The original audio recordings are not stored on our servers.
Pronunciation score storage (Premium)
For DeutschQuiz Plus users, pronunciation assessment results (scores, word evaluations – no audio recordings) are stored in your learning history to track your progress. Upon account deletion, this data is deleted.
Free users
For free users, the speech recognition feature is limited to a restricted number of uses per day. Native browser text-to-speech is used instead of ElevenLabs. Full pronunciation assessments are not permanently stored in your learning history. If you actively save a result inside a separate challenge feature (for example the daily tongue twister), we store only the challenge score/game state, not a full pronunciation history. To enforce the daily limit, we also keep a technical usage counter per account for up to 24 hours.
Retention: Audio recordings: Not stored (real-time processing, immediately discarded). Pronunciation scores (Premium): As long as your account is active. Upon account deletion: immediate deletion.
Privacy policy: https://privacy.microsoft.com/en-us/privacystatement
11f. AI Dialogue Partner (Anthropic Claude)
DeutschQuiz offers an AI Dialogue Partner for practicing German conversation. This feature uses Anthropic Claude, a large language model, to simulate realistic conversations in everyday situations.
Provider: Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA
Legal basis: Art. 6(1)(b) GDPR (contract performance – providing the learning feature)
What data is processed?
Data processed
- Your typed or spoken text messages in the dialogue (after speech recognition, as text)
- The conversation history within a dialogue session (for contextual responses)
- The selected conversation scenario and language level
- System prompts to control AI behavior (contain no personal data)
How is your data processed?
Your text messages are sent via our server (API route) to the Anthropic API. Anthropic processes the data solely to generate the AI response. Anthropic does not permanently store user data and does not use conversation data for training their models (per Anthropic API terms of use). The conversation history is only held in memory for the duration of the active session.
AI Conversation Analysis
After completing a dialogue, the entire conversation history is sent once to Anthropic to generate a summary and analysis of your language performance (grammar errors, suggestions for improvement, topics covered). This analysis is displayed to you and is not permanently stored on our servers.
Usage Limits
To control costs and ensure fair usage, daily usage limits apply: Premium users: 5 dialogue sessions per day. Free users: 1 dialogue session per day. These limits are enforced server-side.
Important Notes
The AI Dialogue Partner is a practice tool and not a substitute for professional language instruction. AI responses and corrections may contain errors. No personal data (name, email, etc.) is transmitted to Anthropic – only conversation content. Please do not enter sensitive personal information in the dialogue.
Retention: Conversation content: Not permanently stored. Processed only for the duration of the active dialogue session. Dialogue analysis: Displayed to the user and not permanently stored on our servers.
Privacy policy: https://www.anthropic.com/privacy
11g. Push Notifications in the Native App
In the native Android and iOS versions of DeutschQuiz, you can enable push notifications for learning reminders, security alerts, and content updates.
Provider: Google Firebase Cloud Messaging / Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Art. 6(1)(a) GDPR (consent for voluntary push notifications) and Art. 6(1)(f) GDPR (legitimate interest for security-related notifications such as new login alerts).
What data is processed?
Data processed
- FCM device token for the respective device
- Platform (iOS or Android)
- Notification preferences (categories, reminder time, quiet hours, timezone)
- Push delivery and open logs (type, sent timestamp, opened timestamp)
Activation and withdrawal
Voluntary push notifications are only used after you enable them via the operating system permission or the app settings. You can disable push notifications at any time in your device or app settings. Security-related notifications (for example a new login alert) may still be sent if you have push notifications generally enabled.
Purpose
Sending learning reminders, streak alerts, security notifications for new logins, and product/content updates.
Retention: Push tokens: until logout, account deletion, or device inactivity (automatic cleanup after at most 180 days without refresh). Notification preferences: until changed or account deletion. Delivery and open logs: 180 days.
12. Contact Forms
When you contact us via the contact form, we process:
Data processed
- Name
- Email address
- Your message
Purpose
- Processing your inquiry
- Contact follow-up
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest)
Retention: Messages are stored until your request has been fully processed, then deleted according to retention requirements.
13. Public Teacher Profiles
On our website, we display information about our teachers to provide transparency about our teaching staff and help you choose courses.
Data processed
- Teacher's name
- Profile photo (avatar)
- Biographical text (in various languages)
- Areas of expertise and qualifications
- Optional links (website, LinkedIn, etc.)
Purpose: Providing information about our teaching staff to prospective students.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest - transparency about teaching staff). Teachers consent to the publication of their profile information as part of their employment or contractor agreement.
Teachers can decide whether their profile is publicly visible and can update their profile information at any time or request deletion.
14. Newsletter
With your consent, you can subscribe to our newsletter. This also covers optional marketing opt-ins you may give when requesting a free Library resource:
Data processed
- Email address
- Name (optional)
- Subscription timestamp
- IP address at signup
- Open and click rates
Legal basis: Art. 6(1)(a) GDPR (consent)
Library marketing opt-ins
If you opt in to marketing while requesting a free Library resource, that consent is stored separately from the service email used to deliver the resource. Without completing double opt-in, you will only receive the requested service email and no marketing emails.
Double opt-in: We use the double opt-in process: After signing up, you will receive a confirmation email. Only after clicking the confirmation link will you be added to the newsletter.
Unsubscribe: You can unsubscribe at any time via the unsubscribe link in every email or by emailing support@areesheh.com.
Retention: Your data will be stored until you unsubscribe from the newsletter.
14a. Course Notifications
You can sign up for notifications about new courses or the availability of specific course levels.
Provider: Sent via Brevo (see Section 9).
Data processed
- Email address
- Desired course level / course type
- Time of registration
- IP address (for proof of consent)
Purpose: Notification via email as soon as a suitable course is available.
Legal basis: Art. 6(1)(a) GDPR (consent).
Retention: Until the notification has been sent or you revoke your consent. You can unsubscribe at any time.
15. Your Rights
According to the GDPR, you have the following rights:
To exercise your rights, contact us at: support@areesheh.com
Right of Access (Art. 15 GDPR)
You can request information about whether we process your personal data and, if so, what data it is.
Right to Rectification (Art. 16 GDPR)
You can request correction of inaccurate data.
Right to Erasure (Art. 17 GDPR)
You can request deletion of your data (right to be forgotten).
Right to Restriction (Art. 18 GDPR)
You can request restriction of data processing.
Right to Data Portability (Art. 20 GDPR)
You can request your data in a machine-readable format.
Right to Object (Art. 21 GDPR)
You can object to data processing.
16. Account Deletion
You can delete your account at any time:
Retention: After account deletion, remaining data is deleted within 30 days. DeutschQuiz data is deleted immediately. Legal retention obligations (e.g., payment records for 7 years) remain unaffected.
17. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
https://www.lda.bayern.de
18. AI-Generated Content and AI-Powered Features
We use artificial intelligence to create certain content on our website and to provide interactive learning features in the DeutschQuiz app.
Pre-generated Audio Content (ElevenLabs)
The audio files for our placement test and quiz questions were created using ElevenLabs, an AI-based text-to-speech service. This audio content does not contain any personal data and is used solely for educational purposes. No personal data was transmitted to ElevenLabs during creation.
Real-time Text-to-Speech (ElevenLabs – Premium)
In the AI Dialogue Partner, the AI conversation partner's responses are generated as speech in real-time by ElevenLabs. Details can be found in Sections 11 (DeutschQuiz) and 11e–11f.
Speech Recognition and Pronunciation Training (Azure Speech Services)
For pronunciation training, we use Microsoft Azure Speech Services for speech recognition and pronunciation assessment. Audio recordings are processed in real-time and not permanently stored. Details can be found in Section 11e.
AI Dialogue Partner (Anthropic Claude)
The AI Dialogue Partner uses Anthropic Claude to simulate realistic conversations in German. Conversation content is only processed for the duration of the session. Details can be found in Section 11f.
Quiz Content Generation (OpenAI)
Quiz questions are partially generated using OpenAI. No personal data is transmitted to OpenAI.
Principles of Our AI Usage
For all AI-powered features: We do not transmit personal data (name, email, etc.) to AI service providers. Audio recordings are not permanently stored. AI responses and assessments are learning aids and do not replace professional language instruction. Users should not enter sensitive personal information in AI interactions.
19. Social Media Presence
We maintain online presences on social networks to communicate with interested parties and users.
We operate an Instagram account under @mr.areesheh. When you visit our Instagram account or interact with our content (likes, comments, direct messages), your data is processed by Meta Platforms.
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data processed
- Profile information (name, username, profile picture)
- Interaction data (likes, comments, shared content)
- Direct messages
- Usage statistics (anonymized for us as page insights)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in public relations and communication)
Privacy policy: Meta Privacy Policy: https://www.facebook.com/privacy/policy/
TikTok
We operate a TikTok account under @mr.areesheh. When you visit our TikTok account or interact with our content (likes, comments, sharing), your data is processed by TikTok.
Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (for EEA)
Data processed
- Profile information (name, username, profile picture)
- Interaction data (likes, comments, shared content)
- Direct messages
- Usage statistics (anonymized for us)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in public relations and communication)
Privacy policy: TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy-eea
Important Notes on Social Media
We point out that your data may be processed on social media platforms outside the European Union. The platforms use Standard Contractual Clauses as a guarantee of an adequate level of data protection. We have no influence on data processing by the platform operators.
Your Rights
Inquiries regarding your data on our social media presences can be directed directly to the respective platform operators. For inquiries regarding data processed by us (e.g. direct messages we have stored), contact us at support@areesheh.com.
20. Changes to This Policy
We reserve the right to update this privacy policy from time to time. Changes will be published on this page. For material changes, we will notify you by email.