Privacy Policy
Last updated: May 31, 2026
This policy complies with the General Data Protection Regulation (GDPR) for users in the European Economic Area, and applicable privacy laws worldwide.
1. Who We Are
Verbforma is a language learning platform. When this policy refers to 'we', 'us', or 'our', it refers to Verbforma. For data protection enquiries, contact us at support@verbforma.com.
2. Information We Collect
We collect: (a) Account information — your name and email address when you register. (b) Learning data — verbs studied, quiz results, streak information, and progress. (c) Payment information — processed securely by Stripe or PayPal; we do not store card details. (d) Usage data — pages visited, features used, and device/browser information for analytics purposes.
3. Legal Basis for Processing (GDPR)
We process your data under the following legal bases: Contract — processing your account data and learning progress is necessary to provide the service you signed up for. Consent — analytics and marketing cookies are only used with your explicit consent, which you can withdraw at any time via Privacy Settings. Legitimate Interest — we may process usage data to improve our service, detect fraud, and ensure security.
4. How We Use Your Information
We use your information to: provide and maintain the Verbforma service; track and display your learning progress; send streak reminders and important account notifications; process Pro subscription payments; improve our platform based on usage patterns (with consent); and comply with legal obligations.
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years for financial records). Anonymous, aggregated usage data may be retained indefinitely.
6. Your Rights Under GDPR
If you are in the EEA, you have the following rights: Right of Access — request a copy of your personal data. Right to Rectification — correct inaccurate data. Right to Erasure — request deletion of your data ('right to be forgotten'). Right to Restriction — limit how we process your data. Right to Portability — receive your data in a machine-readable format. Right to Object — object to processing based on legitimate interest. Rights related to automated decision-making — we do not use automated decision-making or profiling. To exercise any of these rights, contact us at support@verbforma.com. We will respond within 30 days.
7. Cookies
We use the following cookies: Essential cookies — required for login and core functionality (no consent needed). Analytics cookies — help us understand usage patterns; only set with your consent. Marketing cookies — used to show relevant promotions to free users; only set with your consent. You can manage your cookie preferences at any time via our Privacy Settings page.
8. Data Storage & Security
Your data is stored securely using Supabase, hosted on AWS infrastructure in the EU/US. All data is encrypted in transit (TLS) and at rest (AES-256). We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.
9. Third-Party Services
We share data with the following trusted third parties: Supabase (database hosting), Stripe (payment processing), PayPal (payment processing), Google (OAuth login and analytics). Each provider is bound by data processing agreements and their own privacy policies. We do not sell your personal data to any third party.
10. International Transfers
If you are located in the EEA, your data may be transferred to and processed in the United States. Such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards.
11. Children's Privacy
Verbforma is not directed at children under the age of 13 (or 16 in some EEA countries). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@verbforma.com and we will delete it promptly.
12. Right to Lodge a Complaint
If you are in the EEA and believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your national data protection supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. The date at the top of this page will always reflect the most recent update. Continued use of Verbforma after changes constitutes acceptance of the updated policy.
14. Contact Us
For any privacy-related questions, data requests, or complaints, please contact us at support@verbforma.com. We aim to respond to all requests within 30 days.