Privacy Policy

How Dialingo handles your personal data under the EU General Data Protection Regulation (GDPR).

Last updated: 22.06.2026

1. What data we process

• Account data: your email address, the time your email was verified, your token balance, and an optional display name and profile picture you choose.
• Conversation data: the messages you write, the AI partner's replies, and the corrections generated for your messages. These are stored so your chats persist across sessions.
• Payment data: when you buy tokens, the payment itself is handled by Stripe. We store a record of the purchase (package, amount, status, timestamp); we do not store your card number.
• Technical & log data: limited diagnostic logs (e.g. an error message, the time, and your account identifier) created when something goes wrong, used to keep the service working and secure.
• Local storage: to run the app your browser stores your account identifier and a local cache of your chats (see “Cookies & local storage” below).

2. Purposes and legal bases

• Providing the service — operating the chat, generating AI replies and corrections, keeping your account and chat history. Legal basis: performance of a contract, Art. 6 (1)(b) GDPR.
• Sign-in by email link — sending you a one-time login link instead of a password. Legal basis: Art. 6 (1)(b) GDPR.
• Payments for tokens — processing your purchases. Legal basis: Art. 6 (1)(b) GDPR, and our and Stripe's legitimate interest in fraud prevention, Art. 6 (1)(f) GDPR.
• Security and stability — error logging and prevention of abuse. Legal basis: legitimate interests, Art. 6 (1)(f) GDPR.
• Legal obligations — e.g. retaining accounting records. Legal basis: Art. 6 (1)(c) GDPR.

3. Recipients and processors

We share data only as needed to run the service, with processors bound by data-processing agreements:

• Anthropic (Anthropic PBC, USA) — the messages you send and your conversation context are transmitted to Anthropic's AI API to generate replies and corrections. Anthropic acts as our processor under a data processing agreement and, per its terms, does not use this data to train its models.
• Stripe (Stripe Payments Europe, Ltd., Ireland / Stripe, Inc., USA) — payment processing when you buy tokens.
• Hosting — all-inkl.com — operates the servers on which the service runs.

4. International data transfers

Some recipients (notably Anthropic, and parts of Stripe) are located in the United States. Where data is transferred outside the EU/EEA, it is safeguarded by the EU Standard Contractual Clauses and/or the recipient's certification under the EU–US Data Privacy Framework, where applicable.

5. Retention

We keep account and conversation data for as long as your account exists. If you delete your account (or ask us to), the associated chats and messages are deleted. Diagnostic logs are kept for 90 days. Records required for tax and accounting purposes are retained for the statutory periods (generally up to 10 years under § 147 AO / § 257 HGB).

6. Cookies & local storage

We use only what is necessary to operate the service — no advertising or third-party tracking cookies:

• dlg_real — a cookie (valid ~1 year) remembering that you have accessed the application.
• Browser local storage — your account identifier and a cache of your chats, so the app works and your conversations load quickly.

These are strictly necessary for the service you request (§ 25 (2) No. 2 TDDDG), so no consent banner is required.

7. Your rights

Under the GDPR you have the right to:

• access your data (Art. 15), and rectify (Art. 16) or erase it (Art. 17);
• restrict processing (Art. 18) and data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw any consent at any time with future effect (Art. 7 (3));
• lodge a complaint with a supervisory authority (Art. 77).

To exercise these rights, contact us at contact@dialingo.org.

8. Is providing data mandatory?

Providing your email address is necessary to create an account and use the paid features; the messages you send are necessary to provide replies and corrections. Without these we cannot provide the service. You are free not to use the service.

9. Automated decision-making

The AI generates conversational replies and language corrections. This does not produce legal or similarly significant effects on you within the meaning of Art. 22 GDPR. AI output may be inaccurate — see our Terms of Service.

10. Changes to this policy

We may update this policy as the service evolves. The current version is always available on this page.