Sign up

Privacy Policy

Last updated: 2026-02-27

1. Overview

Conjuga.me is a small tool for learning Spanish verb conjugation. We collect only the data we need to:

- create and secure your account;
- run practice sessions and track your progress;
- manage paid subscriptions (if you choose to upgrade); and
- keep the service reliable and secure.

We do not sell your personal data or rent it to third parties.

2. Data We Collect

Depending on how you use Conjuga.me, we may collect the following categories of information:

  • Account data: your email address, a password hash (we never store your raw password), your plan (free or pro), whether you are an admin, and timestamps such as when the account was created. For paying users we also store Stripe customer and subscription identifiers.
  • Learning progress data: records of your practice attempts (which verb, tense and person, the prompt, your answer, the correct answer, and whether you were correct) and aggregated model mastery data (attempt counts, accuracy and last-practiced timestamps per conjugation model).
  • Usage and device data: standard web server logs including your IP address, browser type, operating system, requested URLs (which may contain search queries), referrer and timestamps, as well as an internal request identifier for debugging.
  • Billing data: limited payment-related data such as Stripe customer ID, subscription ID and Stripe webhook events that describe subscription changes. We do not store full card numbers or CVC codes; those are handled directly by Stripe.
  • Support communications: if you contact us by email, we will receive your email address and any information you include in your message.

3. How We Use Data

We use the data described above for the following purposes:

  • Providing the service: to create accounts, authenticate you, run practice drills, compute model mastery, and show you relevant content based on your entitlements.
  • Payments and subscriptions: to create and manage Stripe customers and subscriptions, to determine whether you have access to pro features, and to handle billing-related support.
  • Product improvement: to understand which models and tenses are being practised and to prioritise new content and features. We currently rely on our own database and logs for this, not third‑party analytics trackers.
  • Security and abuse prevention: to keep logs that help us detect errors, misuse and suspicious Stripe webhook events, and to protect user accounts.
  • Legal and accounting: to maintain records needed for tax, audit or legal compliance (for example, Stripe event logs and subscription records).

5. Cookies and Similar Technologies

Conjuga.me uses cookies that are necessary to run the service:

- Session cookie: we use Rails’ encrypted session cookie to keep you logged in and to store lightweight drill state (for example, which question you are on in a practice session). This cookie is essential for authentication and practice and is not used for advertising.

We do not currently use third‑party analytics cookies or marketing pixels. If this changes, we will update this policy and, where required, ask for your consent.

6. Sharing and Processors (Third Parties)

We share your data only with third‑party processors that help us run the service. They may change over time, but currently include:

  • Infrastructure provider(s) that host our web application, database and background queues. They process IP addresses and other technical data as part of providing hosting and storage.
  • Stripe (payments): if you choose to subscribe, payment pages and billing portals are served by Stripe. Stripe receives your payment card details and basic account information (such as your email address) to create a customer and subscription. Conjuga.me receives only Stripe identifiers and high‑level subscription status, not your full card number or CVC.
  • Email infrastructure: if we send transactional emails (for example, password resets or support replies), our email provider processes your email address and the content of those messages.

7. Data Retention

We keep your account and learning progress data for as long as you have an account with Conjuga.me.

If you request that we delete your account, we will delete or anonymise your identifiable account data and associated learning records, except where we need to keep certain information for legal, accounting or security reasons (for example, minimal billing records and Stripe event logs).

We keep server and billing logs for as long as reasonably necessary to operate and secure the service. Exact retention periods may vary depending on infrastructure and legal requirements.

8. Security

No online service can guarantee perfect security, but we take reasonable technical and organisational measures to protect your data, including:

- using modern versions of Rails and its security features (such as encrypted sessions and CSRF protection);
- restricting access to production data to a small admin team; and
- using Stripe to handle payment card details instead of processing them directly.

If we become aware of a security incident that affects your personal data, we will investigate promptly and, where required by law, notify you and any relevant authorities.

9. Your Rights

Depending on where you live, you may have some or all of the following rights over your personal data:

  • Access: to request a copy of the personal data we hold about you.
  • Correction: to ask us to correct inaccurate or incomplete information.
  • Deletion: to ask us to delete your account and associated personal data, subject to legal retention requirements.
  • Restriction and objection: to ask us to limit or stop certain types of processing, particularly where we rely on legitimate interests.
  • Portability: to receive your data in a structured, commonly used format where technically feasible.
  • Complaint: to lodge a complaint with your local data protection authority if you believe we have processed your data unlawfully.

To exercise these rights, please contact us using the email address below. We may need to verify your identity before responding.

10. Children’s Privacy

Conjuga.me is not directed to children under 16, and we do not knowingly collect personal data from children under 16.

If you are a parent or guardian and believe that your child has provided personal data to us, please contact us and we will review and, where appropriate, delete that data.

11. International Transfers

Our infrastructure providers and some of our processors may operate in countries outside your own, which means your data may be transferred internationally (for example, between the EU, the UK and the United States).

Where required, we rely on appropriate safeguards such as standard contractual clauses in our agreements with processors. By using Conjuga.me, you understand that your data may be processed in these locations.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, you can contact us at:

Email: [email protected].