Privacy policy
Last updated: October 2026
1. Who We Are
EasyGeorgian is operated by EasyGeorgian Development LLC, a company registered in Georgia and run from Tbilisi ("we", "us", "our"). We provide Georgian language courses, flashcards, the EasyGeorgian Pro tutor, the Language Exchange and free learning tools on our website, in the web app and in our iOS and Android apps. This Privacy policy describes how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).
2. Data We Collect
Account Data
When you create an account: email address, display name (optional), and sign-in details. If you sign up with a password, it is stored only as a secure hash by our sign-in provider (Google Firebase). We never see or store your password. If you sign in with Google or Apple, we receive your name and email address from them.
Purchase Data
When you buy a course or subscribe: your email address, order number, what you bought, and the amount paid. Payments are handled by FastSpring on our website and by Apple in our iOS app. We never see or store your card details.
Learning Data
As you use our services: course progress, flashcard review history, spaced repetition metrics (ease factor, interval, repetition count), study session timestamps, and streak data. If you use the Pro AI tutor, we also save the text of your tutor sessions in your account.
Email Subscription Data
When you subscribe to one of our free email series (such as the daily Georgian word): email address, the page you subscribed from, and your browser's time zone (used only to send the email at the right local time). Every email includes a one-click unsubscribe link.
Automatic Data
When you visit our site: IP address, browser type, device type, operating system, referring URL, pages visited, and visit duration. Collected via server logs and analytics.
Language Exchange Data
If you create a Language Exchange profile, we collect the profile information you provide and, when you are matched, share part of it (including your name, photo, email address, and any Telegram username or Facebook profile link you added) with your match so you can contact each other. This is described in full in the Language Exchange Terms of Use.
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide course access and the EasyGeorgian app | Contract performance |
| Process payments | Contract performance |
| Send purchase confirmations and account info | Contract performance |
| Track learning progress | Contract performance |
| Send learning tips and offers by email | Legitimate interest (unsubscribe any time) |
| Send our free email series, if you sign up | Consent |
| Improve our products and services | Legitimate interest |
| Measure how our ads perform | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
4. Data Storage
Your data is stored on:
- Google Firebase (Google Cloud): our main database is in Belgium (EU). Some Google services we use, such as sign-in, also process data in the United States.
- Cloudflare: hosting for our website, app and audio files (global network).
5. How We Protect Your Data
- All traffic to our website and app is encrypted (HTTPS).
- Passwords are stored only as a secure hash by Google Firebase, never in readable form.
- Card payments are handled by FastSpring and Apple, so your card details never reach our servers.
6. Data Sharing
We never sell your personal data. We share data only with service providers that help us run EasyGeorgian:
- Payments: FastSpring (purchases on our website) and Apple (purchases in our iOS app)
- Hosting and infrastructure: Google Firebase and Cloudflare
- Email: Resend, which sends our emails, and Zoho, which hosts our inbox
- AI tutor: Google Gemini, which powers the Pro tutor. We don't keep recordings of your voice.
- Analytics and error monitoring: PostHog and Sentry, to understand how the site and app are used and to fix bugs
- Advertising: Google, Meta and Reddit, to measure how our ads perform
7. International Transfers
We are based in Georgia, and some of our providers process data in the United States. Where data leaves the EU, they rely on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
8. Your Rights (GDPR)
You have the right to:
- Access: request a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data ("right to be forgotten")
- Portability: receive your data in a structured, machine-readable format
- Object: object to processing based on legitimate interest
- Withdraw consent: at any time, for example by unsubscribing from our emails
- Complaint: file a complaint with your local data protection authority
To exercise any of these rights, email [email protected].
9. Data Retention
- Account and learning data: kept while your account is active. When you delete your account, it is deleted right away, and our backup copies are removed within 40 days.
- Purchase records: kept for 7 years (tax/legal requirements).
- Server logs: deleted within 90 days.
10. Cookies
We use essential cookies for sign-in and site functionality, and analytics and advertising cookies to understand how our site is used and to measure our ads. Visitors in the EU, EEA, UK and Switzerland are asked for consent first. You can block cookies in your browser settings at any time.
11. Marketing
When you create an account or buy a course, we send occasional emails with learning tips and offers. Our free email series, such as the daily Georgian word, only go to people who sign up for them. Every marketing email includes an unsubscribe link. We never send spam.
12. Children's Privacy
Our services are intended for users aged 16 and older. We do not knowingly collect data from children under 16.
13. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website.
14. Contact
For privacy-related questions or requests: [email protected]