{"id":2247,"date":"2026-08-28T17:05:09","date_gmt":"2026-08-28T16:05:09","guid":{"rendered":"https:\/\/klara-cl.com\/?page_id=2247"},"modified":"2026-09-21T13:34:27","modified_gmt":"2026-09-21T12:34:27","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/klara-cl.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"2247\" class=\"elementor elementor-2247\">\n\t\t\t\t<div class=\"elementor-element elementor-element-54900d8 e-flex e-con-boxed e-con e-parent\" data-id=\"54900d8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-08813c0 e-flex e-con-boxed e-con e-parent\" data-id=\"08813c0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e5cf9a8 elementor-widget elementor-widget-text-editor\" data-id=\"e5cf9a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<header style=\"border-bottom: 0.8px solid #e5e7eb; padding-bottom: 22px; margin-bottom: 28px; color: #1f2937; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Arial, sans-serif; background-color: #ffffff;\">\n<h1 style=\"font-size: clamp(1.8rem, 4vw, 2.5rem); line-height: 1.18; margin: 0px 0px 10px;\">Privacy Policy \u2013 Klara<\/h1>\n<div class=\"meta\" style=\"color: #6b7280; font-size: 0.95rem;\">Last updated: 21 September 2026<\/div>\n<\/header>\n<nav style=\"margin: 0px 0px 2rem; padding: 16px 18px; border-image: none 100% \/ 1 \/ 0 stretch; border-radius: 10px; background: none 0% 0% \/ auto repeat scroll padding-box border-box #fafafa; color: #1f2937; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Arial, sans-serif; border: 0.8px solid #e5e7eb;\" aria-label=\"Table of contents\">\n<h3>Table of Contents<\/h3>\n<ol>\n<li>Introduction<\/li>\n<li>Controller<\/li>\n<li>Categories of Personal Data We Process<\/li>\n<li>Purposes of Processing<\/li>\n<li>Legal Bases for Processing<\/li>\n<li>Special Categories and Sensitive Information<\/li>\n<li>Hosting and Technical Infrastructure<\/li>\n<li>Registration and User Account<\/li>\n<li>Profile Information<\/li>\n<li>Learning Progress and CEFR Information<\/li>\n<li>AI-Based Processing and External AI Services<\/li>\n<li>Microsoft Azure OpenAI<\/li>\n<li>Cross-Session Memory and Personalisation<\/li>\n<li>Storage of Conversation History and Transcripts<\/li>\n<li>Audio Conversations<\/li>\n<li>ElevenLabs<\/li>\n<li>Underlying AI Processing within ElevenLabs<\/li>\n<li>Video and Avatar Lip-Sync Processing \u2013 Simli<\/li>\n<li>Device Permissions and Profile Images<\/li>\n<li>Free Trials and Promotional Access<\/li>\n<li>Subscriptions and In-App Purchases<\/li>\n<li>Corporate and Organisational Access<\/li>\n<li>Firebase Crashlytics<\/li>\n<li>Firebase Analytics<\/li>\n<li>AppsFlyer \u2013 Marketing Attribution<\/li>\n<li>Referral, Campaign and Offer Attribution<\/li>\n<li>Contact and Customer Support<\/li>\n<li>Website and Web Hosting<\/li>\n<li>Cookies and Similar Technologies<\/li>\n<li>Social Media<\/li>\n<li>Disclosure of Personal Data to Service Providers<\/li>\n<li>International Data Transfers<\/li>\n<li>Data Retention<\/li>\n<li>Account Deletion and Withdrawal of Consent<\/li>\n<li>Logout and Analytics User Properties<\/li>\n<li>Security Measures<\/li>\n<li>Rights under the GDPR<\/li>\n<li>Rights under Swiss Data Protection Law<\/li>\n<li>Provision of Personal Data<\/li>\n<li>Changes to this Privacy Policy<\/li>\n<li>Definitions<\/li>\n<\/ol>\n<h3>1. Introduction<\/h3>\n<p>This Privacy Policy explains how we process personal data when you use the Klara language-learning app, our website and related services.<\/p>\n<p>Klara provides personalised language-learning services using text, audio and video\/avatar interactions as well as artificial intelligence. Depending on the feature used, different categories of personal data may be processed.<\/p>\n<p>We process personal data in accordance with the General Data Protection Regulation (\u201cGDPR\u201d), the German Federal Data Protection Act (\u201cBDSG\u201d) and, where applicable, other relevant data protection laws.<\/p>\n<h3>2. Controller<\/h3>\n<p>The controller responsible for the processing of personal data is:<\/p>\n<p><strong>Klara Cognitive Learning GmbH<\/strong><br>Im Geyer 4<br>35781 Weilburg<br>Germany<\/p>\n<p>Email: jf@klaracl.com<br>Legal notice:&nbsp;<a href=\"https:\/\/klara-cl.com\/en\/impressum\/\">https:\/\/klara-cl.com\/impressum\/<\/a><\/p>\n<h3>3. Categories of Personal Data We Process<\/h3>\n<p>Depending on how you use Klara, we may process the following categories of personal data.<\/p>\n<h3>Account and Profile Data<\/h3>\n<ul>\n<li>username;<\/li>\n<li>email address;<\/li>\n<li>login and authentication data;<\/li>\n<li>hashed password data;<\/li>\n<li>internal backend user ID;<\/li>\n<li>profile image;<\/li>\n<li>age-range information;<\/li>\n<li>gender information;<\/li>\n<li>app language;<\/li>\n<li>target language;<\/li>\n<li>language-learning and learning preferences.<\/li>\n<\/ul>\n<h3>Learning Data<\/h3>\n<ul>\n<li>current learning level;<\/li>\n<li>CEFR-related progress and assessments;<\/li>\n<li>learning progress and learning activity;<\/li>\n<li>learning history;<\/li>\n<li>information derived from previous learning interactions;<\/li>\n<li>information used to personalise future learning sessions;<\/li>\n<li>cross-session learning notes and memory summaries;<\/li>\n<li>interests and learning preferences.<\/li>\n<\/ul>\n<h3>Conversation Data<\/h3>\n<ul>\n<li>text messages entered in chat;<\/li>\n<li>AI-generated responses;<\/li>\n<li>conversation history;<\/li>\n<li>written transcripts generated from spoken conversations;<\/li>\n<li>summarised information from previous conversations;<\/li>\n<li>audio streams during spoken conversations;<\/li>\n<li>information technically required for avatar and video interactions.<\/li>\n<\/ul>\n<h3>Subscription and Access Data<\/h3>\n<ul>\n<li>subscription and access status;<\/li>\n<li>product or subscription information;<\/li>\n<li>transaction identifiers provided by Apple or Google;<\/li>\n<li>renewal or expiry dates;<\/li>\n<li>access or activation codes provided by organisations;<\/li>\n<li>validity and activation status.<\/li>\n<\/ul>\n<p>We do not directly store full credit-card numbers, bank-account details or comparable payment information used for purchases in the Apple App Store or Google Play.<\/p>\n<h3>Marketing, Analytics and Attribution Data<\/h3>\n<ul>\n<li>backend user ID;<\/li>\n<li>age range and gender, where consent has been provided for this purpose;<\/li>\n<li>app and target language;<\/li>\n<li>registration, login, trial-start and subscription events;<\/li>\n<li>referral, promotional, influencer or campaign identifiers;<\/li>\n<li>installation and attribution information;<\/li>\n<li>technical identifiers used for campaign measurement.<\/li>\n<\/ul>\n<h3>Technical Data<\/h3>\n<ul>\n<li>IP address;<\/li>\n<li>device type;<\/li>\n<li>operating system;<\/li>\n<li>app version;<\/li>\n<li>timestamps;<\/li>\n<li>installation or session identifiers;<\/li>\n<li>backend user ID;<\/li>\n<li>crash stack traces;<\/li>\n<li>error, diagnostic and log data;<\/li>\n<li>technical state of the application.<\/li>\n<\/ul>\n<h3>4. Purposes of Processing<\/h3>\n<p>We process personal data in particular to create and manage user accounts, authenticate users, provide the Klara language-learning service, conduct text, audio and avatar\/video conversations, generate AI-based responses and written transcripts, assess learning progress, adapt content to the user\u2019s language level, maintain continuity across sessions, personalise the learning experience, manage trials and subscriptions, provide customer support, maintain security, analyse errors, perform usage and marketing analysis, carry out attribution and comply with legal and contractual obligations.<\/p>\n<h3>5. Legal Bases for Processing<\/h3>\n<h3>Performance of a Contract \u2013 Article 6(1)(b) GDPR<\/h3>\n<p>We process personal data where this is necessary to provide the Klara services requested by you. This includes, in particular, registration, authentication, language-learning functionality, text, audio and video conversations, AI processing, transcription, learning progress, CEFR information, personalisation, cross-session continuity and access administration.<\/p>\n<h3>Consent \u2013 Article 6(1)(a) GDPR<\/h3>\n<p>Where legally required, we obtain your consent, in particular for certain analytics functions, marketing analytics, attribution technologies, device identifiers and optional device permissions.<\/p>\n<p>Before personal conversation or learning data is transmitted for the first time to external AI, speech or avatar services, Klara informs users which providers are involved, which categories of data are transmitted and for what purpose.<\/p>\n<p>Such transmission takes place only after the user has explicitly consented to the data sharing.<\/p>\n<p>Consent may be withdrawn at any time with effect for the future through the privacy settings in the app. Functions that technically require the relevant external services may no longer be available after withdrawal unless consent is granted again.<\/p>\n<h3>Legitimate Interests \u2013 Article 6(1)(f) GDPR<\/h3>\n<p>Where permitted, processing may be based on our legitimate interests in security, abuse prevention, technical troubleshooting, stability, business administration and the establishment or enforcement of legal claims.<\/p>\n<h3>6. Special Categories and Sensitive Information<\/h3>\n<p>Klara generally does not require special categories of personal data within the meaning of Article 9 GDPR. However, users may voluntarily disclose such information in open conversations.<\/p>\n<p>Such information may be processed as part of the current conversation, stored conversation history or transcript, and as part of information derived for learning continuity and personalisation.<\/p>\n<p>Users should avoid providing sensitive personal data that is not necessary for the language-learning interaction.<\/p>\n<p>Klara does not use such information for advertising, the creation of commercial user profiles or purposes unrelated to providing and personalising the language-learning service.<\/p>\n<h3>7. Hosting and Technical Infrastructure<\/h3>\n<h3>Amazon Web Services<\/h3>\n<p>Klara\u2019s backend and application infrastructure are operated using Amazon Web Services (AWS). The primary region is&nbsp;<strong>AWS eu-central-1 \u2013 Frankfurt, Germany<\/strong>.<\/p>\n<p>Amazon Web Services EMEA SARL<br>38 Avenue John F. Kennedy<br>L-1855 Luxembourg<\/p>\n<h3>MongoDB Atlas<\/h3>\n<p>Klara uses MongoDB Atlas for data storage in AWS Frankfurt (eu-central-1). The production configuration is designed to store personal Klara data within the EU\/EEA. Cross-region storage outside the EU\/EEA is not intended for this data.<\/p>\n<p>The database may contain account, profile, authentication, learning, CEFR, chat, transcript, cross-session memory, subscription, access and campaign information.<\/p>\n<h3>AWS S3<\/h3>\n<p>AWS S3 is used, among other purposes, for uploaded profile images. These are deleted when the account is deleted, subject to limited technical backup periods and statutory retention requirements.<\/p>\n<h3>8. Registration and User Account<\/h3>\n<p>For the creation and administration of a Klara user account, we process username, email address, authentication information, hashed password information, internal backend user ID, account status and subscription or access status.<\/p>\n<p>Passwords are not stored in plain text. User accounts are not publicly visible. The legal basis is generally Article 6(1)(b) GDPR.<\/p>\n<h3>9. Profile Information<\/h3>\n<p>Klara uses profile information to provide and personalise the language-learning service. This may include username, profile image, age range, gender, learning level, app language, target language and language-learning information.<\/p>\n<p>Not all data stored in the Klara profile is transmitted to external AI services. In particular, first name or username, email address, age range and gender are not intentionally transmitted to the external AI services used by Klara.<\/p>\n<h3>10. Learning Progress and CEFR Information<\/h3>\n<p>Klara stores information about your learning progress in order to adapt the learning experience to your abilities and previous activities.<\/p>\n<p>This includes, in particular, CEFR progress values, learning progress, information used to assess the current level, learning history and information derived from previous learning interactions.<\/p>\n<p>This data is generally stored for as long as the user account exists. It is deleted when the user account is deleted or otherwise terminated, unless further retention is required by law.<\/p>\n<h3>11. AI-Based Processing and External AI Services<\/h3>\n<p>Artificial intelligence is an essential component of Klara. AI systems are used to understand user input, generate conversational responses, conduct language-learning conversations, adapt conversations to the individual learning level, maintain continuity between sessions, process spoken interactions and provide avatar\/video functionality.<\/p>\n<p>Depending on the feature used, the following data may in particular be transmitted to and processed by external service providers:<\/p>\n<ul>\n<li>current conversation content;<\/li>\n<li>relevant conversation context;<\/li>\n<li>interests and learning preferences;<\/li>\n<li>CEFR information and learning progress;<\/li>\n<li>learning history;<\/li>\n<li>cross-session memory summaries;<\/li>\n<li>transcripts of spoken conversations;<\/li>\n<li>the audio stream required for audio conversations.<\/li>\n<\/ul>\n<p>The conversation context transmitted to external AI systems does not include the entire conversation history stored over the full period of use. The technically transmitted current conversation context is limited to a maximum of the most recent&nbsp;<strong>100 conversation turns<\/strong>.<\/p>\n<p>Before personal conversation or learning data is transmitted for the first time to external AI, speech or avatar services, the user is informed within the app about the data sharing and is asked to give explicit consent.<\/p>\n<p>Under the configuration and agreements applicable to Klara, the external AI, speech and avatar services used by Klara do not use data processed as part of Klara for general model training, advertising or profiling for their own purposes.<\/p>\n<p>Klara does not use artificial intelligence to make automated decisions that produce legal or similarly significant effects for users.<\/p>\n<h3>12. Microsoft Azure OpenAI<\/h3>\n<p>Klara uses Microsoft Azure OpenAI for AI-powered conversations and related functionality.<\/p>\n<p>Depending on the interaction, the following information may in particular be processed:<\/p>\n<ul>\n<li>current conversation content;<\/li>\n<li>relevant previous conversation context;<\/li>\n<li>interests and learning preferences;<\/li>\n<li>CEFR progress;<\/li>\n<li>learning progress and learning history;<\/li>\n<li>relevant cross-session memory summaries.<\/li>\n<\/ul>\n<p>First name or username, email address, age range and gender are not intentionally transmitted to Microsoft Azure OpenAI.<\/p>\n<p>The Azure OpenAI processing used by Klara is configured for Microsoft\u2019s European Azure infrastructure.<\/p>\n<p>Microsoft does not use conversation data transmitted by Klara to train the underlying AI models or for its own advertising purposes.<\/p>\n<p>For security and abuse-monitoring purposes, certain processed content may be retained for a maximum of&nbsp;<strong>30 days<\/strong>. Where data is retained, the retention relevant to Klara takes place within the&nbsp;<strong>EU\/EEA<\/strong>.<\/p>\n<h3>13. Cross-Session Memory and Personalisation<\/h3>\n<p>Klara stores information for cross-session memory in its own backend in order to provide continuity between learning sessions and a personalised learning experience.<\/p>\n<p>This may include, in particular:<\/p>\n<ul>\n<li>interests and learning preferences;<\/li>\n<li>CEFR progress;<\/li>\n<li>learning history;<\/li>\n<li>learning-related notes;<\/li>\n<li>summaries of previous interactions;<\/li>\n<li>information from stored conversation transcripts.<\/li>\n<\/ul>\n<p>The memory is used to take previous learning progress into account, adapt future conversations, avoid unnecessary repetition and continue previous learning topics in a meaningful way.<\/p>\n<p>Relevant parts of this information may be supplied as context to the AI service required for the respective function.<\/p>\n<p>This information is generally stored in the Klara backend for as long as the user account exists and is deleted when the user account is deleted or otherwise terminated, unless statutory retention obligations apply.<\/p>\n<h3>14. Storage of Conversation History and Transcripts<\/h3>\n<p>Klara stores conversation history in the Klara database. This includes, in particular, text-chat conversations, AI-generated responses and written transcripts generated from spoken input.<\/p>\n<p>The stored information is used to maintain conversational continuity, provide personalised learning, create and maintain cross-session memory, assess learning progress and provide relevant context for future sessions.<\/p>\n<p>Conversation history and transcripts are generally stored for as long as the user account exists. They are deleted when the user account is deleted or otherwise terminated, subject to statutory retention requirements and limited technical backup periods.<\/p>\n<p>Cancellation of a paid subscription does not automatically delete the Klara user account.<\/p>\n<h3>15. Audio Conversations<\/h3>\n<p>Klara allows users to conduct spoken language-learning conversations and requires access to the device microphone for this purpose.<\/p>\n<p>The technical flow may in particular include the following processing:<\/p>\n<p><strong>User \u2192 ElevenLabs \u2192 AI conversation processing \u2192 ElevenLabs \u2192 User<\/strong><\/p>\n<p>The user\u2019s microphone audio is transmitted to ElevenLabs in real time during the conversation and is processed there, in particular for speech recognition, speech processing and conducting the conversation.<\/p>\n<p>Klara does not permanently store raw microphone audio from normal conversations. Klara does, however, store a written transcript of the spoken interaction as part of the conversation history.<\/p>\n<p>This transcript is generally retained for as long as the Klara user account exists and is deleted when the account is deleted or otherwise terminated.<\/p>\n<h3>16. ElevenLabs<\/h3>\n<p>Klara uses ElevenLabs for speech recognition, voice output and agent-related processing of spoken conversations.<\/p>\n<p><strong>Zero Retention Mode<\/strong>&nbsp;is enabled for the production Klara agent.<\/p>\n<p>Under this configuration, conversation content including user audio, transcripts, prompts and AI output is processed only as technically necessary to provide the respective interaction and is&nbsp;<strong>not retained by ElevenLabs after processing has been completed<\/strong>.<\/p>\n<p>This does not affect the separate written transcript stored by Klara in its own database.<\/p>\n<p>Under the configuration enabled for Klara, ElevenLabs does not use conversation data processed as part of the Klara service to train general-purpose models, for advertising or for profiling.<\/p>\n<p>Because Zero Retention Mode is enabled for the production Klara agent, no permanent storage of conversation content takes place at ElevenLabs. Personal Klara data is not permanently stored by ElevenLabs outside the EU\/EEA.<\/p>\n<h3>17. Underlying AI Processing within ElevenLabs<\/h3>\n<p>For certain spoken conversations, ElevenLabs may use external language models as subprocessors within its service. This may currently include Google Gemini.<\/p>\n<p>Klara does not operate a separate direct integration with Google Gemini and does not transmit data directly to Google Gemini.<\/p>\n<p>Where such processing takes place within the ElevenLabs service, it may include the conversation content, transcripts, system instructions and contextual information technically required for the respective interaction.<\/p>\n<p>The Zero Retention configuration enabled for the production Klara agent applies to this processing. Conversation content is not used for general model training, advertising or the creation of unrelated user profiles.<\/p>\n<h3>18. Video and Avatar Lip-Sync Processing \u2013 Simli<\/h3>\n<p>Klara uses&nbsp;<strong>Simli AS, Oslo, Norway<\/strong>, to provide real-time avatar animation and lip-sync functionality.<\/p>\n<p>Klara does&nbsp;<strong>not<\/strong>&nbsp;transmit the user\u2019s raw microphone audio to Simli.<\/p>\n<p>For an active avatar session, Simli receives only the information technically required to render the avatar, in particular:<\/p>\n<ul>\n<li>the TTS audio stream generated by the Klara agent; and<\/li>\n<li>temporary technical session information.<\/li>\n<\/ul>\n<p>Conversation transcripts, profile data and persistent Klara user identifiers are not transmitted to Simli.<\/p>\n<p>Simli has confirmed to us that the TTS audio stream and the resulting avatar video are processed solely in real time and are&nbsp;<strong>not stored<\/strong>.<\/p>\n<p>Simli retains only technical session logs for a maximum of&nbsp;<strong>30 days<\/strong>. They are then deleted.<\/p>\n<p>These session logs are stored exclusively within the&nbsp;<strong>EU\/EEA<\/strong>. Personal Klara data is not stored by Simli outside the EU\/EEA.<\/p>\n<p>The TTS audio and avatar video processed on behalf of Klara are not stored or used for model training, advertising or profiling.<\/p>\n<h3>19. Device Permissions and Profile Images<\/h3>\n<p>Depending on the feature used, Klara may request device permissions, in particular microphone access for spoken conversations and access to photos or files for selecting or uploading a profile image.<\/p>\n<p>Granting such permissions is voluntary. You can change or revoke permissions at any time in your device settings. Certain features may not be available without the permissions required for them.<\/p>\n<p>Profile images are stored using AWS S3 within the European infrastructure used by Klara and are associated with the respective user account. They are generally stored until replaced or deleted, or until the user account is deleted, subject to limited technical backup periods and statutory retention requirements.<\/p>\n<h3>20. Free Trials and Promotional Access<\/h3>\n<p>Klara may offer users free trial periods or time-limited promotional access.<\/p>\n<p>Where a free trial is provided directly by Klara, the app informs users about the scope and duration of the trial before it begins. Such a trial does not automatically convert into a paid subscription unless this is explicitly stated before the trial begins and confirmed through the relevant app-store subscription process.<\/p>\n<p>Free or discounted access to otherwise paid digital functionality may be provided on iOS through Apple\u2019s In-App Purchase, offer or Offer Code mechanisms. The applicable terms, duration and any renewal conditions are displayed as part of the relevant App Store process.<\/p>\n<p>In connection with trials or promotional access, Klara processes, in particular, information about the start, validity and end of the access period and, where applicable, offer or transaction information provided by the relevant app store.<\/p>\n<p>A trial start may be recorded as an analytics event where the appropriate consent has been provided.<\/p>\n<h3>21. Subscriptions and In-App Purchases<\/h3>\n<p>Individual paid Klara subscriptions may be purchased through the Apple App Store or Google Play. Payment processing is carried out directly by Apple or Google.<\/p>\n<p>Klara does not receive or store full credit-card numbers, bank-account numbers, security codes or comparable payment information provided by users to Apple or Google.<\/p>\n<p>We receive only the information necessary to provide and manage the purchased access. This may include, in particular:<\/p>\n<ul>\n<li>subscription status;<\/li>\n<li>product type;<\/li>\n<li>transaction or purchase identifier;<\/li>\n<li>purchase status;<\/li>\n<li>renewal status;<\/li>\n<li>expiry date;<\/li>\n<li>information about app-store offers or free offer periods.<\/li>\n<\/ul>\n<p>The respective terms of the Apple App Store or Google Play also apply to purchases and subscriptions.<\/p>\n<h3>22. Corporate and Organisational Access<\/h3>\n<p>Companies and other organisations may purchase or provide Klara access for eligible employees or other authorised persons.<\/p>\n<p>To provide and manage such access, we may in particular process:<\/p>\n<ul>\n<li>organisation or licence assignment;<\/li>\n<li>access or activation identifier;<\/li>\n<li>activation status;<\/li>\n<li>validity period;<\/li>\n<li>backend user ID;<\/li>\n<li>where applicable, information about the number of available or used licences.<\/li>\n<\/ul>\n<p>Personal learning content, conversation history, transcripts or cross-session memory information are not disclosed to an organisation merely because that organisation finances or provides access, unless there is a separate legal basis and transparent information to the user.<\/p>\n<h3>23. Firebase Crashlytics<\/h3>\n<p>Klara uses Firebase Crashlytics, a service provided by Google, to detect and resolve crashes, technical errors and stability problems.<\/p>\n<p>The following data may in particular be processed:<\/p>\n<ul>\n<li>crash stack traces;<\/li>\n<li>app version;<\/li>\n<li>operating-system information;<\/li>\n<li>device model;<\/li>\n<li>application state;<\/li>\n<li>installation or session identifiers;<\/li>\n<li>timestamps;<\/li>\n<li>backend user ID, where configured for troubleshooting purposes.<\/li>\n<\/ul>\n<p>Username and email address are not intentionally transmitted as Crashlytics report fields.<\/p>\n<p>Crash data is retained for a limited period in accordance with the configuration used and is then deleted or otherwise processed in accordance with the service settings.<\/p>\n<h3>24. Firebase Analytics<\/h3>\n<p>Klara may use Firebase Analytics to understand how the application is used, make technical and functional improvements and measure the effectiveness of certain features.<\/p>\n<p>Analytics for purposes that are not technically necessary is used only where the appropriate consent has been provided.<\/p>\n<p>With the appropriate consent, the following may in particular be processed:<\/p>\n<ul>\n<li>registration and login events;<\/li>\n<li>trial starts;<\/li>\n<li>subscription and conversion events;<\/li>\n<li>certain app interactions;<\/li>\n<li>technical device or installation information;<\/li>\n<li>app and target language;<\/li>\n<li>age range and gender, where explicit consent has been provided for this purpose.<\/li>\n<\/ul>\n<p>Analytics consent is not required to use Klara\u2019s core service and may be withdrawn at any time with effect for the future.<\/p>\n<h3>25. AppsFlyer \u2013 Marketing Attribution<\/h3>\n<p>Klara may use AppsFlyer to measure the effectiveness of marketing activities and understand which campaign or source led users to Klara.<\/p>\n<p>Depending on consent, device settings and the requirements of the relevant operating system, the following data may in particular be processed:<\/p>\n<ul>\n<li>installation information;<\/li>\n<li>campaign, referral or source identifiers;<\/li>\n<li>device or installation identifiers;<\/li>\n<li>interaction and conversion events;<\/li>\n<li>subscription-related conversion information;<\/li>\n<li>technical device data.<\/li>\n<\/ul>\n<p>Where tracking consent is required, the processing is based on Article 6(1)(a) GDPR. On Apple devices, we also observe the requirements of App Tracking Transparency.<\/p>\n<h3>26. Referral, Campaign and Offer Attribution<\/h3>\n<p>Klara may process identifiers associated with referral links, marketing campaigns, influencers, events, promotional offers or corporate access.<\/p>\n<p>Such identifiers may be used, in particular, to determine whether a specific source led to a registration, trial or subscription.<\/p>\n<p>The information may be used for:<\/p>\n<ul>\n<li>campaign analysis;<\/li>\n<li>conversion attribution;<\/li>\n<li>management of time-limited offers;<\/li>\n<li>attribution of trade-fair or event campaigns;<\/li>\n<li>calculation of campaign-related compensation or commissions.<\/li>\n<\/ul>\n<p>On iOS, such an identifier does not independently unlock paid digital functionality. Where free or discounted access to paid digital functionality is offered, access on iOS is granted through the mechanisms provided by Apple for this purpose.<\/p>\n<p>Referral, campaign and offer information is not used to determine language proficiency or CEFR classification.<\/p>\n<h3>27. Contact and Customer Support<\/h3>\n<p>If you contact us by email, contact form or another communication channel, we process the information necessary to handle your request.<\/p>\n<p>This may include, in particular:<\/p>\n<ul>\n<li>name;<\/li>\n<li>email address;<\/li>\n<li>account information;<\/li>\n<li>message content;<\/li>\n<li>technical information required to investigate a problem.<\/li>\n<\/ul>\n<p>Account-related communication is generally based on Article 6(1)(b) GDPR. Other enquiries may in particular be based on Article 6(1)(f) GDPR.<\/p>\n<h3>28. Website and Web Hosting<\/h3>\n<p>When you access our website, technically necessary information is processed in order to provide the website, ensure security and detect technical errors.<\/p>\n<p>This may include, in particular:<\/p>\n<ul>\n<li>IP address;<\/li>\n<li>time of access;<\/li>\n<li>requested page or file;<\/li>\n<li>browser type;<\/li>\n<li>operating system;<\/li>\n<li>referrer information;<\/li>\n<li>server and log data.<\/li>\n<\/ul>\n<h3>United Domains<\/h3>\n<p>united-domains AG<br>Gautinger Stra\u00dfe 10<br>82319 Starnberg<br>Germany<\/p>\n<h3>WordPress<\/h3>\n<p>Our website is based on WordPress and may use WordPress-related services, extensions and technical components.<\/p>\n<h3>29. Cookies and Similar Technologies<\/h3>\n<p>Our website and, where applicable, our application may use cookies, local storage technologies or comparable technical methods.<\/p>\n<p>Technically necessary technologies may in particular be used to provide requested functions, ensure security, manage sessions and store user preferences.<\/p>\n<p>Other technologies may be used for analytics, marketing measurement and campaign attribution. Where consent is legally required, such technologies are used only after consent has been provided.<\/p>\n<h3>30. Social Media<\/h3>\n<p>We maintain profiles on social networks, in particular Instagram, Facebook, TikTok and YouTube, in order to provide information about Klara and communicate with interested persons and users.<\/p>\n<p>When using these platforms, personal data may be processed independently of Klara by the relevant platform provider. The privacy policies of the respective platform operators also apply to this processing.<\/p>\n<p>If you contact Klara directly through a social network, we process the information necessary to handle your message.<\/p>\n<h3>31. Disclosure of Personal Data to Service Providers<\/h3>\n<p>We use external service providers where this is necessary for the operation, provision, security and development of Klara.<\/p>\n<p>Depending on the function used, these may include providers in the following categories:<\/p>\n<ul>\n<li>cloud and hosting services;<\/li>\n<li>database services;<\/li>\n<li>AI services;<\/li>\n<li>speech recognition and voice-output services;<\/li>\n<li>avatar and lip-sync services;<\/li>\n<li>analytics and crash-monitoring services;<\/li>\n<li>marketing and attribution services;<\/li>\n<li>app-store and payment services;<\/li>\n<li>web-hosting and support services.<\/li>\n<\/ul>\n<p>Service providers receive only the information necessary for the relevant purpose and technical function.<\/p>\n<p>Where service providers process personal data on our behalf, we enter into the contractual arrangements required by applicable data protection law.<\/p>\n<p>Third parties to whom Klara transmits personal user data are required to protect that data to the same or an equivalent level as described in this Privacy Policy and required under applicable data protection laws.<\/p>\n<p>Under the technical configurations and applicable agreements used for Klara, the AI, speech and avatar services used for Klara\u2019s core functions do not use data processed as part of Klara for advertising, profiling or the training of general-purpose AI models.<\/p>\n<h3>32. International Data Transfers<\/h3>\n<p>Klara\u2019s core backend, primary database and the permanent storage of conversation, learning and profile data required for the language-learning service are located within the&nbsp;<strong>EU\/EEA<\/strong>.<\/p>\n<p>For the AI, speech and avatar features used by Klara:<\/p>\n<ul>\n<li><strong>Microsoft Azure OpenAI:<\/strong>&nbsp;Where content is temporarily retained, the retention configured for Klara takes place within the EU\/EEA and for a maximum of 30 days.<\/li>\n<li><strong>ElevenLabs:<\/strong>&nbsp;Zero Retention Mode is enabled for the production Klara agent. Conversation audio, transcripts, prompts and conversational outputs are not permanently retained after processing.<\/li>\n<li><strong>Simli:<\/strong>&nbsp;TTS audio and avatar video are not stored. Only technical session logs are retained for a maximum of 30 days within the EU\/EEA.<\/li>\n<\/ul>\n<p>Where other service providers used by Klara process personal data outside the EU\/EEA, this takes place only in accordance with the applicable data-protection requirements. Appropriate safeguards may include, in particular, adequacy decisions, the EU-US Data Privacy Framework, Standard Contractual Clauses or other legally recognised safeguards.<\/p>\n<h3>33. Data Retention<\/h3>\n<p>We generally retain personal data only for as long as necessary for the relevant purpose, unless longer retention is required or permitted by law.<\/p>\n<h3>Account and Profile Data<\/h3>\n<p>Account and profile data are generally stored for as long as the user account exists. They are deleted when the user account is deleted or otherwise terminated, unless statutory retention obligations apply.<\/p>\n<h3>Learning Progress, CEFR Data and Cross-Session Memory<\/h3>\n<p>This information is generally stored until the user account is deleted or otherwise terminated.<\/p>\n<h3>Conversation History and Transcripts<\/h3>\n<p>Text conversations, AI responses and stored transcripts of spoken conversations are generally stored in the Klara backend for as long as the user account exists.<\/p>\n<h3>Raw Audio<\/h3>\n<p>Klara does not permanently store raw microphone audio from normal conversations.<\/p>\n<h3>ElevenLabs<\/h3>\n<p>Zero Retention Mode is enabled for the production Klara agent. ElevenLabs does not permanently retain conversation audio, transcripts, prompts or conversational outputs after the relevant processing has been completed.<\/p>\n<h3>Microsoft Azure OpenAI<\/h3>\n<p>Certain content processed for security and abuse-monitoring purposes may be retained for a maximum of&nbsp;<strong>30 days<\/strong>. The retention configured for Klara takes place within the EU\/EEA.<\/p>\n<h3>Simli<\/h3>\n<p>The TTS audio stream transmitted by Klara to Simli and the resulting avatar video are not stored. Technical session logs are stored for a maximum of&nbsp;<strong>30 days<\/strong>&nbsp;within the EU\/EEA and are then deleted.<\/p>\n<h3>Crash and Analytics Data<\/h3>\n<p>Crash, analytics and attribution data are processed in accordance with the relevant technical configuration, consent provided and applicable retention rules and are subsequently deleted or anonymised.<\/p>\n<h3>Profile Images<\/h3>\n<p>Profile images are stored until replaced or deleted by the user or until the user account is deleted.<\/p>\n<h3>Legally Required Information<\/h3>\n<p>Information that must be retained under tax, commercial, contractual or other legal requirements may be stored for the applicable statutory retention period.<\/p>\n<h3>34. Account Deletion and Withdrawal of Consent<\/h3>\n<p>Users may delete their Klara account within the app or request deletion of the account.<\/p>\n<p>When the user account is deleted or otherwise terminated, active Klara records are generally deleted. This includes, in particular:<\/p>\n<ul>\n<li>account and profile data;<\/li>\n<li>conversation history;<\/li>\n<li>stored transcripts;<\/li>\n<li>learning progress;<\/li>\n<li>CEFR information;<\/li>\n<li>cross-session memory information;<\/li>\n<li>profile images.<\/li>\n<\/ul>\n<p>Secured backup copies may remain for a limited technical period. Information subject to statutory retention requirements may be retained until the applicable statutory retention period expires.<\/p>\n<p>Deleting the Klara user account does not automatically terminate a subscription purchased through the Apple App Store or Google Play. Such a subscription may need to be cancelled separately through the relevant app store.<\/p>\n<h3>Withdrawal of Consent for External AI Services<\/h3>\n<p>Consent to the transmission of personal data to external AI, speech or avatar services may be withdrawn at any time with effect for the future through the privacy settings in the app.<\/p>\n<p>After withdrawal, no new personal data will be transmitted to the affected external services. Functions that technically require those services will no longer be available unless consent is granted again.<\/p>\n<p>Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.<\/p>\n<h3>35. Logout and Analytics User Properties<\/h3>\n<p>Where age range or gender has been set as an analytics user property on the basis of the relevant consent, these properties are reset on logout where technically provided for.<\/p>\n<p>This is intended to prevent subsequent logged-out app activity from continuing to be linked to these properties of the Klara user profile.<\/p>\n<p>This does not necessarily result in the retroactive deletion of analytics data that has already been lawfully processed. Analytics consent may be withdrawn at any time with effect for the future.<\/p>\n<h3>36. Security Measures<\/h3>\n<p>We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, destruction and misuse.<\/p>\n<p>Where appropriate for the relevant processing, these measures include, in particular:<\/p>\n<ul>\n<li>encrypted data transmission;<\/li>\n<li>TLS-secured connections;<\/li>\n<li>access controls;<\/li>\n<li>authentication measures;<\/li>\n<li>hashed password storage;<\/li>\n<li>restricted administrative access;<\/li>\n<li>secure cloud infrastructure;<\/li>\n<li>backup and recovery procedures;<\/li>\n<li>monitoring and technical security controls;<\/li>\n<li>data minimisation when sharing data with external service providers.<\/li>\n<\/ul>\n<h3>37. Rights under the GDPR<\/h3>\n<p>Where the GDPR applies, data subjects have, subject to the statutory requirements, in particular the following rights:<\/p>\n<ul>\n<li>right of access under Article 15 GDPR;<\/li>\n<li>right to rectification under Article 16 GDPR;<\/li>\n<li>right to erasure under Article 17 GDPR;<\/li>\n<li>right to restriction of processing under Article 18 GDPR;<\/li>\n<li>right to data portability under Article 20 GDPR;<\/li>\n<li>right to object under Article 21 GDPR;<\/li>\n<li>right to withdraw consent with effect for the future;<\/li>\n<li>right to lodge a complaint with a competent data protection supervisory authority.<\/li>\n<\/ul>\n<p>To exercise your rights, you may contact us using the contact details provided in Section 2.<\/p>\n<h3>38. Rights under Swiss Data Protection Law<\/h3>\n<p>Where Swiss data protection law applies, data subjects are entitled to the rights provided thereunder. These may include, in particular, access, rectification, deletion or destruction, objection to certain processing activities and the release or transfer of personal data in a commonly used electronic format.<\/p>\n<p>International data transfers under Swiss data protection law are carried out in accordance with the applicable statutory requirements.<\/p>\n<h3>39. Provision of Personal Data<\/h3>\n<p>Certain personal data is required in order to use individual Klara features.<\/p>\n<p>In particular, the following are required:<\/p>\n<ul>\n<li>registration information for setting up a user account;<\/li>\n<li>authentication information for access to the account;<\/li>\n<li>conversation content for AI-powered conversations;<\/li>\n<li>microphone access for spoken conversations;<\/li>\n<li>learning information for personalised learning continuity.<\/li>\n<\/ul>\n<p>The use of external AI, speech and avatar services is technically required for certain Klara core functions. Before personal conversation or learning data is transmitted for the first time to such services, the user is informed about the data sharing and asked to provide explicit consent.<\/p>\n<p>If such consent is not provided or is later withdrawn, the functions dependent on those services cannot be used.<\/p>\n<p>Other information and consents are optional. In particular, analytics or marketing consent is not required to use Klara\u2019s core service.<\/p>\n<h3>40. Changes to this Privacy Policy<\/h3>\n<p>We may update this Privacy Policy, in particular where functions, service providers, technical infrastructure, retention configurations or legal requirements change.<\/p>\n<p>The version made available through Klara or on our website at the relevant time applies. Where a change requires renewed consent or individual notification, we will obtain the relevant consent or inform the affected users accordingly.<\/p>\n<h3>41. Definitions<\/h3>\n<h3>Personal Data<\/h3>\n<p>\u201cPersonal data\u201d means any information relating to an identified or identifiable natural person.<\/p>\n<h3>Processing<\/h3>\n<p>\u201cProcessing\u201d means any operation performed on personal data, including in particular collection, storage, use, transmission, analysis, alteration and deletion.<\/p>\n<h3>Content Data<\/h3>\n<p>\u201cContent data\u201d includes information provided or generated while using Klara, in particular text, transcripts, images, audio and other conversation-related information.<\/p>\n<h3>Learning Data<\/h3>\n<p>\u201cLearning data\u201d includes information about language-learning activity, proficiency level, progress, assessments and CEFR-related development.<\/p>\n<h3>Cross-Session Memory<\/h3>\n<p>\u201cCross-session memory\u201d means summarised information from previous Klara interactions that is stored in order to provide continuity and personalisation in future learning sessions.<\/p>\n<h3>External AI Services<\/h3>\n<p>\u201cExternal AI services\u201d means third-party services used by Klara for AI-based conversation processing, speech recognition, voice output or avatar functionality.<\/p>\n<\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Privacy Policy \u2013 Klara Last updated: 21 September 2026 Table of Contents Introduction Controller Categories of Personal Data We Process Purposes of Processing Legal Bases for Processing Special Categories and Sensitive Information Hosting and Technical Infrastructure Registration and User Account Profile Information Learning Progress and CEFR Information AI-Based Processing and External AI Services Microsoft Azure [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"full-width-container","site-content-style":"unboxed","site-sidebar-style":"unboxed","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-2247","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/pages\/2247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/comments?post=2247"}],"version-history":[{"count":14,"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/pages\/2247\/revisions"}],"predecessor-version":[{"id":2384,"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/pages\/2247\/revisions\/2384"}],"wp:attachment":[{"href":"https:\/\/klara-cl.com\/en\/wp-json\/wp\/v2\/media?parent=2247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}