GDPR Compliance - OrdPlus / Privacy Policy

Last Updated: December 24, 2025

Welcome to Ord Plus ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

The data controller responsible for your personal data is:

• Company Name: RIE Oy (3240521-3)
• Email: smile@rie.life

2. Information We Collect

We only collect information that is necessary to provide and improve the Ord Plus experience. This includes:

A. Data You Provide to Us

• Account Information: When you register, we collect your email address, display name, and authentication tokens (via Google or Apple Sign-In).
• User-Generated Content: Custom vocabulary lists, target language preferences, and text/images you upload for the AI explainer tool.

B. Data Collected Automatically

• App Usage & Telemetry: Data about your quiz results, mistake counts, and spaced-repetition analytics to power your personalized learning algorithm.
• Device Information: Device type, operating system, IP address, and crash reports (collected via Google Firebase).

3. How We Use Your Data

We rely on legitimate interest, contract fulfillment, and your consent to process data for the following purposes:

• To create and manage your account.
• To power the spaced-repetition algorithm and track your learning progress.
• To process text and images via AI for grammar explanations and translations.
• To send local push notifications reminding you to study.
• To process payments and subscriptions (handled securely by Apple App Store and Google Play).

4. Third-Party Services & Data Sharing

We do not sell your data. We use trusted third-party service providers to operate our app. These providers only process data on our behalf and are strictly bound by data processing agreements:

• Google Firebase: Used for user authentication, app analytics, database hosting, and crash reporting.
• MongoDB: Used for securely storing user profiles, vocabulary collections, and learning statistics.
• OpenAI: Used to process text and images for grammar explanations. Note: Data sent to OpenAI via our API is NOT used to train their public AI models.
• ElevenLabs: Used to generate high-fidelity text-to-speech audio for listening quizzes.
• Apple & Google: For securely handling in-app purchases and subscriptions. We do not process or store your credit card information.

5. Data Retention

We retain your personal data only for as long as your account is active or as needed to provide you the Service. If you delete your account, your personal data and vocabulary collections will be permanently removed from our active databases within 30 days.

6. Your GDPR Rights

If you are a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the data we hold about you.
• Right to Rectification: You can correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your account and associated data. You can do this directly within the App via the "Profile" > "Settings" menu.
• Right to Restrict Processing: You can ask us to pause the processing of your data.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to data processing based on legitimate interests.

To exercise any of these rights, please contact us at smile@rie.life. We will respond within 30 days.

7. International Data Transfers

Some of our service providers (like Google and OpenAI) are located outside the EEA, including in the United States. When transferring data outside the EEA, we rely on Standard Contractual Clauses (SCCs) and other legally valid transfer mechanisms to ensure your data remains protected to European standards.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: smile@rie.life