Privacy Notice

1. Who we are

CasaLectora is operated by Dylan Langley Welch ("we", "us"). We act as the data controller for personal data processed through CasaLectora.

2. Personal data we collect

• Account data — name, email, and login credentials (including Google sign-in identifiers).
• Profile & learning data — display name, chosen CEFR level, reading font preference, glossary entries, saved articles, reading progress and time spent.
• Usage & device data — pages visited, article opens, browser type, device identifiers, IP address, and basic telemetry needed to run the service.
• Support communications — messages you send us and our replies.

Payment card and billing details are collected by our Merchant of Record, Paddle, not by us.

3. Why we use it

• Create and secure your account (contract performance).
• Provide reading, glossary, and progress features (contract performance).
• Prevent fraud, abuse, and security incidents (legitimate interests).
• Improve and debug CasaLectora (legitimate interests).
• Respond to support requests (contract performance / legitimate interests).
• Comply with legal obligations (legal obligation).

4. Who we share it with

• Paddle — our Merchant of Record for the sale of subscriptions, subscription management, payments, tax compliance, and invoicing.
• Service providers and subprocessors — hosting, database, authentication, email, AI translation, and analytics providers acting on our behalf.
• Professional advisers — such as accountants and lawyers, where necessary.
• Authorities — where required by law.

5. International transfers

Some of our providers may be located outside your country of residence, including outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed to provide the service, comply with legal obligations, and resolve disputes. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain it.

7. Your rights

Depending on your country, you may have rights to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent. UK/EEA users can also lodge a complaint with their local supervisory authority. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security in our database — to protect your data. No system is fully secure, so we cannot guarantee absolute security.

9. Cookies

We use cookies and similar technologies that are strictly necessary to sign you in, keep you signed in, and remember essential preferences. We do not use advertising cookies.

10. Contact

For privacy questions or to exercise your rights, contact Dylan Langley Welch through the support options in your CasaLectora account.