Politika zasebnosti
Datum zadnje spremembe: 2026-08-20
🇬🇧 An English version of this Privacy Policy is available below.
Dobrodošli v aplikaciji Angležko. Zelo resno jemljemo zasebnost. Tukaj pojasnimo, katere osebne podatke zbiramo, zakaj jih zbiramo, kako jih uporabljamo, s kom jih delimo, kako dolgo jih hranimo in kako lahko zahtevaš njihov izbris.
1. Upravljavec podatkov
Upravljavec osebnih podatkov je Angležko Development Team. Če želiš uveljavljati pravice ali imaš vprašanja, nam piši na: info@anglezko.eu.
2. Katere podatke zbiramo
- Registracijski podatki: uporabniško ime, e-pošta, geslo (hashirano z bcrypt).
- Progres in aktivnosti: napredek v lekcijah, rezultati vaj, zaporedni dnevi (streak), XP točke, dosežki, izzivi.
- Naročnine in plačila: status naročnine, vrsta plana (individualni, družinski, šolski), datum poteka. Podatki o plačilni kartici niso nikoli shranjeni pri nas — te obdeluje izključno Paddle ali RevenueCat.
- Družinski plan: če si administrator družinskega plana, shranjujemo seznam članov (user ID), skupinsko kodo za povabilo in datum poteka plana. Člani ne vidijo osebnih podatkov drug drugega.
- Šolski/razredni sistem: če si učitelj ali šolar, shranjujemo informacije o razredu (ime razreda, koda za pridružitev, povezani učenci in učitelji).
- Push obvestila: če dovoliš obvestila, shranimo tvoj push token (expo/FCM) za pošiljanje izobraževalnih opomnikov.
- Oglaševalski identifikator (Advertising ID): Android aplikacija dostopa do Google Advertising ID za namen oglaševanja in merjenja učinkovitosti oglaševanja, v skladu z Google Play politiko.
- Govorni posnetki (mikrofon): pri govornih vajah zajamemo zvok izključno za prepoznavanje govora. Posnetkov ne shranjujemo — glej razdelek 7.
- Tehnični podatki: IP naslov, tip naprave, operacijski sistem, jezik, časovne oznake.
- Piškotki in lokalna shramba: za delovanje seje, nastavitve in analitiko (le ob soglasju).
3. Kako uporabljamo podatke
- Omogočanje delovanja aplikacije (prijava, shranjevanje napredka).
- Prilagajanje izkušnje učenja (priporočila lekcij, shramba nastavitev).
- Upravljanje naročnin in dostopa do premium vsebin.
- Pošiljanje push obvestil in e-poštnih sporočil (le ob soglasju ali za ključne informacije o storitvi).
- Analitika in izboljšave (prepoznavanje napak, izboljšanje vsebin).
- Varnost in preprečevanje zlorab (avtentikacija, zaznavanje zlorab).
4. Pravna podlaga
- Izvedba pogodbe — shranjevanje napredka, upravljanje računa, obdelava naročnin.
- Soglasje — push obvestila, marketinški e-maili, analitični piškotki, dostop do mikrofona pri govornih vajah.
- Zakoniti interes — varnost, preprečevanje zlorab, izboljšave storitve.
- Zakonska obveznost — hramba računovodskih in davčnih evidenc.
5. S kom delimo podatke
Podatke delimo izključno s podizvajalci, ki so nujni za delovanje storitve:
- Strežnik in baza podatkov (MySQL / Node.js) — shranjevanje podatkov in avtentikacija.
- Paddle — obdelava spletnih plačil. Paddle nastopa kot Merchant of Record in ima svojo politiko zasebnosti.
- RevenueCat — upravljanje naročnin v aplikaciji (iOS in Android).
- Google reCAPTCHA — zaščita pred zlorabami pri registraciji in prijavi.
- Expo / Firebase Cloud Messaging — dostava push obvestil.
- Google AdMob — oglaševalska platforma (Android). Uporablja Advertising ID za ciljano oglaševanje. Več informacij: Google Privacy Policy.
Podizvajalcem posredujemo le tiste podatke, ki so potrebni za izvajanje storitve. Osebnih podatkov ne prodajamo.
6. Piškotki in lokalna shramba
Piškotke in lokalno shrambo uporabljamo za:
- Delovanje seje in prijave.
- Shranitev uporabniških nastavitev.
- Analitiko (le ob tvojem soglasju).
Piškotke lahko kadar koli upravljaš v nastavitvah brskalnika ali prek brskalniške različice aplikacije.
7. Prepoznavanje govora in mikrofon
Aplikacija vsebuje govorne vaje, pri katerih preverimo tvojo izgovorjavo. Ker gre za posebej občutljivo vrsto podatkov, tukaj natančno pojasnimo, kaj se zgodi z zvokom.
- Kdaj se mikrofon vklopi: izključno takrat, ko pri govorni vaji sam pritisneš gumb za snemanje. Mikrofon nikoli ne posluša v ozadju in se izklopi takoj, ko vaja konča.
- Kam gre zvok: posnetek se za prepoznavanje govora posreduje storitvi za prepoznavanje govora na tvoji napravi oz. platformi — Google (Android), Apple (iOS) oziroma ponudniku tvojega brskalnika (spletna različica). Za to obdelavo veljajo njihove politike zasebnosti: Google, Apple.
- Zvok se NE shranjuje: zvočnih posnetkov ne shranjujemo — ne na tvoji napravi ne na naših strežnikih. Posnetka ne prejmemo in do njega nimamo dostopa.
- Prepoznano besedilo: besedilo, ki ga vrne storitev za prepoznavanje govora, se primerja s pričakovano frazo v celoti na tvoji napravi. Tega besedila ne pošiljamo na naše strežnike in se zavrže takoj, ko je vaja ocenjena.
- Kaj shranimo: samo rezultat vaje (pravilno / nepravilno) kot del tvojega napredka pri učenju — enako kot pri vseh drugih tipih vaj.
- Pravna podlaga: soglasje. Dovoljenje za mikrofon lahko kadar koli prekličeš v nastavitvah naprave; aplikacija ostane povsem uporabna, le govorne vaje ne bodo na voljo.
8. Hramba podatkov (koliko časa hranimo podatke)
Osebne podatke hranimo le toliko časa, kolikor je potrebno za namene, opisane v tej politiki, ali kolikor to zahteva veljavna zakonodaja. Podatke, vezane na tvoj račun, hranimo, dokler račun obstaja — ključ do hrambe je torej v tvojih rokah: ko izbrišeš račun, se ti podatki izbrišejo. Spodnja tabela pojasnjuje, kako to velja za posamezne vrste podatkov:
| Vrsta podatkov | Obdobje hrambe |
|---|---|
| Podatki o računu (uporabniško ime, e-pošta, hashirano geslo) | Dokler obstaja račun. Ob izbrisu računa se trajno izbrišejo takoj. |
| Napredek pri učenju (lekcije, XP, streak, dosežki, izzivi) | Dokler obstaja račun. Ob izbrisu računa se trajno izbriše takoj. |
| Podatki o družinskem in šolskem/razrednem planu | Dokler plan oz. razred obstaja. Ob izbrisu računa se članstvo odstrani takoj. |
| Push tokeni (expo/FCM) | Shranjeni so pri tvojem računu, dokler imaš obvestila vklopljena. Ob izbrisu računa se izbrišejo takoj. |
| Oglaševalski identifikator (Advertising ID) | Ne hranimo ga na svojih strežnikih; obdeluje ga Google AdMob v skladu s svojo politiko hrambe. |
| Govorni posnetki (mikrofon) | Se ne hranijo. Zvok obdela storitev za prepoznavanje govora v realnem času; mi ga ne prejmemo in ne shranimo. Prepoznano besedilo se zavrže takoj po oceni vaje. |
| Tehnični podatki, vezani na račun (IP naslov ob registraciji, tip naprave, časovne oznake) | Dokler obstaja račun; ob izbrisu računa se izbrišejo takoj. Operativni dnevniki strežnika, ki nastajajo pri delovanju storitve, se hranijo le toliko časa, kolikor je potrebno za varnost, odkrivanje zlorab in odpravljanje napak. |
| Analitični podatki | Hranijo se v skladu z nastavitvami hrambe naših analitičnih ponudnikov. Podatki v združeni (anonimizirani) obliki, ki te ne identificira, se lahko hranijo tudi trajno. |
| Korespondenca s podporo (prijave težav, sporočila) | Hranimo jo, dokler je potrebna za obravnavo zadeve in morebitna nadaljnja vprašanja. Ni vezana na tvoj račun in se ob izbrisu računa ne izbriše samodejno — izbris lahko zahtevaš posebej na info@anglezko.eu. |
| Računi in davčne evidence o naročninah | 10 let, kot to zahteva slovenska davčna in računovodska zakonodaja. Ta obveznost velja tudi po izbrisu računa. |
| Varnostne kopije baze (backup) | Izbrisani podatki lahko ostanejo v obstoječih varnostnih kopijah, dokler te niso prepisane v običajnem ciklu varnostnega kopiranja. Varnostne kopije so zaščitene, dostop do njih je omejen in se uporabljajo izključno za obnovitev po izpadu. |
Neaktivnih računov ne brišemo samodejno: če aplikacije ne uporabljaš več, tvoj račun in napredek ostaneta shranjena, dokler računa ne izbrišeš sam. Izbris lahko kadar koli opraviš po postopku iz razdelka 9.
9. Izbris podatkov (kako zahtevaš izbris)
Kadar koli lahko zahtevaš izbris svojega računa in vseh povezanih osebnih podatkov. Na voljo sta dva enakovredna načina:
Način 1 — v aplikaciji (takojšen izbris):
- Odpri aplikacijo Angležko in se prijavi.
- Pojdi v Nastavitve → Nastavitve računa.
- Podrsaj do dna in izberi Izbriši račun.
- Potrdi izbris v pogovornem oknu.
Račun in vsi z njim povezani podatki se izbrišejo takoj. Podatki lahko ostanejo le še v obstoječih varnostnih kopijah, dokler te niso prepisane v običajnem ciklu varnostnega kopiranja.
Način 2 — po e-pošti (če do aplikacije nimaš dostopa):
- Pošlji e-pošto na info@anglezko.eu.
- V zadevo napiši "Zahteva za izbris podatkov".
- Navedi uporabniško ime ali e-poštni naslov, s katerim je bil ustvarjen račun (za preverjanje identitete).
Prejem zahteve potrdimo v 7 dneh, izbris pa dokončamo najkasneje v 30 dneh in te o tem obvestimo.
Kateri podatki se izbrišejo: uporabniški račun, e-pošta, hashirano geslo, ves napredek pri učenju (lekcije, XP, streak, dosežki, izzivi), članstva v družinskem in šolskem planu, push tokeni, nastavitve in vsi tehnični dnevniki, povezani s tvojim računom.
Kateri podatki se lahko obdržijo: računi in davčne evidence o opravljenih plačilih, ki jih moramo po zakonu hraniti 10 let, ter podatki, potrebni za reševanje odprtih pravnih zahtevkov ali preprečevanje zlorab. Ti podatki so ločeni, dostop do njih je omejen in se ne uporabljajo za noben drug namen.
Nepovratnost: izbris je trajen. Napredka pri učenju po izbrisu ni mogoče obnoviti.
Če želiš namesto izbrisa le kopijo svojih podatkov, nam piši na info@anglezko.eu in ti jo v 30 dneh posredujemo v strojno berljivi obliki.
10. Varnost
Gesla so hashirana z bcrypt. Komunikacija poteka prek HTTPS. Dostop do produkcijskega strežnika je omejen. Kljub temu popolne varnosti ni mogoče zagotoviti — priporočamo, da uporabljaš unikatno geslo.
11. Tvoje pravice (GDPR)
V skladu z GDPR imaš pravico do:
- dostopa do svojih podatkov;
- popravka netočnih podatkov;
- izbrisa računa in vseh povezanih podatkov ("pravica do pozabe") — glej razdelek 9;
- omejitve obdelave;
- prenosljivosti podatkov;
- ugovarjanja obdelavi za namen neposrednega trženja;
- preklica soglasja kadar koli, brez vpliva na zakonitost obdelave pred preklicem.
Pritožbo lahko vložiš pri slovenskem nadzornem organu: Informacijski pooblaščenec.
12. Starostna omejitev
Aplikacija je namenjena uporabnikom, starim 13 let ali več. Uporabniki, mlajši od 13 let, potrebujejo soglasje starša ali zakonitega zastopnika. Če ugotovimo, da smo zbrali podatke otroka brez ustreznega soglasja, bomo podatke nemudoma izbrisali. Za prijavo takšnega primera nam piši na info@anglezko.eu.
13. Spremembe politike
Politiko zasebnosti lahko občasno posodobimo. O pomembnih spremembah te bomo obvestili prek aplikacije ali e-pošte. Datum zadnje spremembe je viden na vrhu te strani.
14. Kontakt
Za vprašanja ali uveljavljanje pravic piši na: info@anglezko.eu.
Privacy Policy (English)
Last updated: 2026-08-20
Welcome to Angležko. We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we retain it, and how you can request its deletion. This English text is a translation of the Slovenian policy above; both versions have the same meaning.
1. Data controller
The data controller is the Angležko Development Team. To exercise your rights or ask a question, contact us at info@anglezko.eu.
2. Data we collect
- Registration data: username, email address, password (hashed with bcrypt).
- Progress and activity: lesson progress, exercise results, daily streaks, XP points, achievements, challenges.
- Subscriptions and payments: subscription status, plan type (individual, family, school), expiry date. We never store payment card details — these are processed exclusively by Paddle or RevenueCat.
- Family plan: if you administer a family plan, we store the member list (user IDs), the group invitation code and the plan expiry date. Members cannot see each other's personal data.
- School/classroom system: if you are a teacher or a student, we store classroom information (class name, join code, linked students and teachers).
- Push notifications: if you allow notifications, we store your push token (Expo/FCM) in order to send learning reminders.
- Advertising ID: the Android app accesses the Google Advertising ID for advertising and advertising performance measurement, in line with Google Play policy.
- Voice input (microphone): during speaking exercises we capture audio solely for speech recognition. We do not store recordings — see section 7.
- Technical data: IP address, device type, operating system, language, timestamps.
- Cookies and local storage: for session handling, settings and analytics (analytics only with your consent).
3. How we use data
- Operating the app (sign-in, saving your progress).
- Personalising the learning experience (lesson recommendations, storing preferences).
- Managing subscriptions and access to premium content.
- Sending push notifications and emails (only with consent, or for essential service information).
- Analytics and improvements (detecting errors, improving content).
- Security and abuse prevention (authentication, fraud detection).
4. Legal basis
- Performance of a contract — storing progress, managing your account, processing subscriptions.
- Consent — push notifications, marketing emails, analytics cookies, microphone access for speaking exercises.
- Legitimate interest — security, abuse prevention, service improvements.
- Legal obligation — retention of accounting and tax records.
5. Who we share data with
We share data only with processors that are necessary to run the service:
- Server and database (MySQL / Node.js) — data storage and authentication.
- Paddle — web payment processing. Paddle acts as Merchant of Record and has its own privacy policy.
- RevenueCat — in-app subscription management (iOS and Android).
- Google reCAPTCHA — abuse protection during registration and sign-in.
- Expo / Firebase Cloud Messaging — push notification delivery.
- Google AdMob — advertising platform (Android). Uses the Advertising ID for targeted advertising. More information: Google Privacy Policy.
We pass on only the data required to deliver the service. We do not sell personal data.
6. Cookies and local storage
We use cookies and local storage for:
- Session and sign-in handling.
- Storing user preferences.
- Analytics (only with your consent).
You can manage cookies at any time in your browser settings or through the web version of the app.
7. Speech recognition and microphone
The app includes speaking exercises that check your pronunciation. Because this is a particularly sensitive category of data, we explain exactly what happens to the audio.
- When the microphone turns on: only when you yourself tap the record button in a speaking exercise. The microphone never listens in the background, and it switches off as soon as the exercise ends.
- Where the audio goes: the audio is sent for recognition to the speech recognition service of your device or platform — Google (Android), Apple (iOS), or your browser vendor (web version). That processing is governed by their privacy policies: Google, Apple.
- Audio is NOT stored: we do not store audio recordings — neither on your device nor on our servers. We never receive the recording and have no access to it.
- The recognised text: the text returned by the speech recognition service is compared against the expected phrase entirely on your device. We do not send that text to our servers, and it is discarded as soon as the exercise has been graded.
- What we do store: only the exercise result (correct / incorrect) as part of your learning progress — exactly as for every other exercise type.
- Legal basis: consent. You can withdraw microphone permission at any time in your device settings; the app remains fully usable, only the speaking exercises become unavailable.
8. Data retention (how long we keep your data)
We retain personal data only for as long as necessary for the purposes described in this policy, or for as long as applicable law requires. Data tied to your account is kept for as long as the account exists — so retention is in your hands: when you delete your account, that data is deleted. The table below explains how this applies to each type of data:
| Data type | Retention period |
|---|---|
| Account data (username, email, hashed password) | For as long as the account exists. Permanently deleted immediately when you delete your account. |
| Learning progress (lessons, XP, streaks, achievements, challenges) | For as long as the account exists. Permanently deleted immediately when you delete your account. |
| Family and school/classroom plan data | For as long as the plan or classroom exists. Membership is removed immediately when you delete your account. |
| Push tokens (Expo/FCM) | Stored with your account for as long as you have notifications enabled. Deleted immediately when you delete your account. |
| Advertising ID | Not stored on our servers; processed by Google AdMob under its own retention policy. |
| Voice recordings (microphone) | Not retained. Audio is processed in real time by the platform speech recognition service; we never receive or store it. The recognised text is discarded as soon as the exercise is graded. |
| Account-linked technical data (registration IP address, device type, timestamps) | For as long as the account exists; deleted immediately when you delete your account. Operational server logs generated while running the service are kept only for as long as needed for security, abuse detection and debugging. |
| Analytics data | Retained according to the retention settings of our analytics providers. Data in aggregated (anonymised) form that does not identify you may be retained indefinitely. |
| Support correspondence (bug reports, messages) | Kept for as long as needed to handle the matter and any follow-up. It is not linked to your account and is not deleted automatically when you delete your account — you can request its deletion separately at info@anglezko.eu. |
| Invoices and tax records for subscriptions | 10 years, as required by Slovenian tax and accounting law. This obligation applies even after account deletion. |
| Database backups | Deleted data may remain in existing backups until those backups are overwritten in the normal backup cycle. Backups are protected, access to them is restricted, and they are used solely for disaster recovery. |
We do not automatically delete inactive accounts: if you stop using the app, your account and progress remain stored until you delete the account yourself. You can do so at any time using the process in section 9.
9. Data deletion (how to request deletion)
You can request deletion of your account and all associated personal data at any time. There are two equally valid ways to do this:
Option 1 — in the app (immediate deletion):
- Open the Angležko app and sign in.
- Go to Settings → Account settings.
- Scroll to the bottom and tap Delete account ("Izbriši račun").
- Confirm the deletion in the dialog.
Your account and all data linked to it are deleted immediately. Data may remain only in existing backups until those are overwritten in the normal backup cycle.
Option 2 — by email (if you cannot access the app):
- Email info@anglezko.eu.
- Use the subject line "Data deletion request".
- Include the username or email address the account was created with, so we can verify your identity.
We acknowledge your request within 7 days and complete the deletion within 30 days at the latest, then confirm it to you.
Data that is deleted: your user account, email address, hashed password, all learning progress (lessons, XP, streaks, achievements, challenges), family and school plan memberships, push tokens, preferences, and all technical logs linked to your account.
Data that may be retained: invoices and tax records for completed payments, which we are legally required to keep for 10 years, and data needed to resolve pending legal claims or to prevent abuse. This data is kept separately, access to it is restricted, and it is not used for any other purpose.
Irreversibility: deletion is permanent. Learning progress cannot be restored after deletion.
If you would like a copy of your data instead of deletion, email info@anglezko.eu and we will provide it in a machine-readable format within 30 days.
10. Security
Passwords are hashed with bcrypt. All communication uses HTTPS. Access to the production server is restricted. No system can be perfectly secure, so we recommend using a unique password.
11. Your rights (GDPR)
Under the GDPR you have the right to:
- access your data;
- rectify inaccurate data;
- erase your account and all associated data (the "right to be forgotten") — see section 9;
- restrict processing;
- data portability;
- object to processing for direct marketing purposes;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
You may lodge a complaint with the Slovenian supervisory authority: Information Commissioner.
12. Age limit
The app is intended for users aged 13 and over. Users under 13 need the consent of a parent or legal guardian. If we discover that we have collected a child's data without appropriate consent, we delete it immediately. To report such a case, email info@anglezko.eu.
13. Changes to this policy
We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. The last-updated date is shown at the top of this page.
14. Contact
For questions or to exercise your rights, email info@anglezko.eu.
© Angležko — vse pravice pridržane. | Pogoji uporabe · Politika vračil · Izbris podatkov / Data deletion