This policy explains what information Mitsling uses and why. Mitsling is run by Grenbase LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA, which is responsible for your data. We keep it short because we collect as little as we can, and we never sell your personal information.
Your account
When you sign up, we store your name, your email address and your password. Sign-in is run by Supabase, our database and login provider; your password is stored as a secure hash, never as plain text. If you continue with Google, Google shares your name, email address and profile picture with us, and no password is stored. We use your email to run your account and your lessons: emails to confirm your address or reset your password, and emails about your lessons, such as booking confirmations and reminders. After a trial lesson, we also send you one email about the monthly lesson plans. It is the only offer we send, and you can reply “unsubscribe” to it if you never want one.
Plans and live lessons
If you subscribe, we store which plan you have, whether it is active and when it renews or ends. If you book live lessons, we store the times you booked, any cancellations and your time zone, so we can hold the lessons, show times correctly and keep your monthly balance right.
Payments
Payments are handled by Stripe. Your card details go straight to Stripe; we never see or store your full card number. Stripe’s use of your data is described in the Stripe privacy policy.
Your learning progress
Your course progress (finished lessons, scores, XP, streak and the topics you find hard) is saved in your own browser using local storage. When you are signed in, it is also saved in your account, so it follows you to your other devices, and Kerem can see it to prepare your live lessons. You can clear the copy in your browser at any time by clearing your browser data. If you ask us to delete your account, the copy in your account is deleted with it.
Speaking exercises
Speaking exercises use your browser’s built-in speech recognition. In some browsers, such as Chrome, your voice is sent to the browser maker’s service (for example Google) to turn it into text. We never receive or store recordings; the text is only compared with the sentence on your screen. Your browser asks before it uses your microphone, and you can skip speaking exercises with “Can’t speak now”.
Cookies and analytics
We use essential cookies only to keep you signed in. We do not use advertising cookies or tracking analytics.
Why we may use your data
- To provide the service you signed up for (a contract with you): your account, courses, plans, live lessons, payments and the emails that go with them.
- Our legitimate interests: keeping Mitsling secure, preventing abuse and fixing problems, and the one email about lesson plans after a trial lesson, in ways you would reasonably expect.
- Your consent, where we ask for it, for example when you choose to continue with Google. You can withdraw it at any time.
- Legal obligations: keeping payment and invoice records for tax and accounting.
Who processes data for us
These companies handle data on our behalf, and each one gets only what it needs for its job:
- Supabase: our database and sign-in.
- Netlify: hosting the website.
- Stripe: payments, subscriptions and invoices.
- Resend: sending our emails, such as address confirmations, password resets and lesson reminders.
- Google: “Continue with Google”, when you use it, and the speech recognition built into Chrome, when you do speaking exercises there.
- Cloudflare Turnstile: if we turn on a bot check (a CAPTCHA), it confirms that a real person is signing up, logging in or resetting a password.
International transfers
Your data is stored in the United States. If you live elsewhere, for example in the EU or the UK, your data is transferred there. Our providers protect these transfers with the Standard Contractual Clauses approved by the European Commission or by taking part in the EU-US Data Privacy Framework.
Other services
Live lessons take place on Google Meet, which handles the video call under the Google privacy policy. Photos are loaded from Unsplash. Links to Instagram, TikTok and YouTube open those services, which have their own privacy policies.
How long we keep it
If you ask us to delete your account, we delete it together with your saved progress, bookings and plan history, except records we must keep for tax and accounting.
- Account data: while your account is open, and for up to 30 days after it is deleted, while it clears from our systems and backups.
- Payment and invoice records: as long as tax law requires.
Children
Mitsling is for people aged 16 and over. Younger learners may use it only with a parent’s or guardian’s permission. If you think a child has given us personal information without that permission, write to us and we will delete it.
Your rights
Depending on where you live, you can ask us to:
- tell you what information we hold about you and give you a copy;
- correct it if it is wrong;
- delete it;
- send it to you in a format you can take to another service;
- stop or limit how we use it, or withdraw a consent you gave.
Write to hello@mitsling.com and we will reply within one month. If you are not happy with how we handle your data, you can also complain to your local data protection authority.
Changes to this policy
We may update this policy as Mitsling grows. The date at the top shows the latest version, and we will tell you by email before any important change.
Contact
Grenbase LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. Email: hello@mitsling.com.