Privacy notice

What personal data teloriva processes, why, and the rights you have. Last updated Sept. 21, 2026.

Who is responsible

The controller under the GDPR is:

Write to this address for any question about your data or to exercise your rights.

Visiting the website

The site runs on a server hosted by [TO FILL] and is delivered through Cloudflare. Each request passes the technically necessary data: IP address, date and time, the page requested, the referrer and the browser's user agent. We use it to deliver the site and to keep it secure, our legitimate interest under Art. 6(1)(f) GDPR, and keep server logs only as long as that requires.

Fonts are served from our own server. No font or script is loaded from Google.

Cookies and analytics

Without asking, we set only the cookies the site needs to work: the sign-in session, protection against forged requests (csrftoken), your language choice, and tl_consent, which remembers your cookie choice (Art. 6(1)(f) GDPR, §25(2) TDDDG).

With your consent only, we use Microsoft Clarity, provided by Microsoft Ireland Operations Ltd., on the marketing pages to see how visitors use them: clicks, scrolling and session replays with form input masked. Clarity sets its own cookies and may transfer data to Microsoft in the USA, which is certified under the EU-US Data Privacy Framework (Art. 6(1)(a) GDPR, §25(1) TDDDG). Clarity never runs inside the signed-in app.

You can withdraw or give consent at any time with the Cookie settings link at the bottom of every page. Cookie settings

Your account

To create and run an account we process your name, email address, role, password (stored only as a hash) and settings (Art. 6(1)(b) GDPR). If you sign in with Google, Microsoft or Apple, that provider tells us your name and email address; we receive no password.

Learning data

While you learn or teach we store what the product needs: courses and lessons, your answers, progress and mastery estimates, review schedules, points, streaks and badges, and the classes you belong to. Teachers, tutors and linked parents see the progress of the learners they are responsible for.

When a school or tutor sets up accounts for its students, that school or tutor decides about the data and we process it on its behalf (Art. 28 GDPR). teloriva is used by children; where the law requires a parent's consent, it has to be given before a child uses the service.

AI features

When you use an AI feature (drafting a lesson, marking an answer, reading text aloud), the text or image needed for that task is sent to an AI provider: Google (Gemini), Mistral AI, OpenRouter or Inworld (speech). Some of these providers process data in the USA, on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses (Art. 6(1)(b) GDPR).

Payments

Paid plans are handled by Mollie B.V. (Netherlands). Mollie receives the data needed for the payment; we never see or store full card or account numbers (Art. 6(1)(b) GDPR).

Email, files and requests

We send account and service emails through our email provider. Files and media you upload are stored with Cloudflare R2. When you book a demo or join the waiting list we use what you enter to answer you (Art. 6(1)(b) GDPR).

How long we keep data

We keep account and learning data while the account exists and delete it when the account is deleted, unless tax or commercial law requires us to keep records longer (up to 10 years for invoices). Demo and waiting-list requests are deleted once they are no longer needed.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interest (Art. 21). You can withdraw a consent at any time with effect for the future. You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR).

Imprint