In short: we collect only what we need to teach you well. We never sell your data. Your voice and your work stay private and are used only to help you learn. Everything is encrypted in transit and at rest, and our main database sits in Switzerland, under some of the strictest privacy rules in the world. You can ask to see, fix or delete your data at any time, and a real person will answer.
This Privacy Policy explains how Fluenti ("we", "us") handles personal data when you visit our website, create an account, use the student platform, or take lessons with us.
By creating an account or using the platform you confirm that you have read this policy. If you do not agree with it, please do not create an account or use the platform.
Contents
- 1. Who we are and how to reach us
- 2. Laws that apply
- 3. What we collect
- 4. Why we use your data and our legal bases
- 5. Who we share data with
- 6. International transfers
- 7. Cookies, local storage and similar technologies
- 8. How long we keep data
- 9. Security
- 10. Children and minors
- 11. Family and sponsor links and progress reports
- 12. Your rights
- 13. Other websites and services
- 14. Changes to this policy
- 15. Contact and concerns
1. Who we are and how to reach us
Fluenti looks after your data. Lessons are taught from Marrakech and online. Questions, requests or worries about your data: write to hello@fluentimarrakech.com and a real person will answer.
2. Laws that apply
We process personal data in line with the Swiss Federal Act on Data Protection (nFADP), one of the strictest data protection laws in the world, and, for visitors and students in the European Economic Area, the General Data Protection Regulation (GDPR). We also respect the mandatory data protection rules that apply where you live. Where laws differ we apply the rule that protects you more, to the extent that rule applies to you.
Why Switzerland. Swiss data protection law is among the strictest in the world: it requires transparency, data minimisation, security by design and prompt breach notification, and it is overseen by an independent federal commissioner. The European Commission recognises Switzerland as providing an adequate level of data protection, which is why personal data can move freely between the EU and Switzerland. Our main database and stored files are hosted in Zurich, so your records sit under those protections.
3. What we collect
We collect only what we need to run lessons and the platform. Depending on how you use Fluenti, this includes:
- Account data: name, email address, password (stored only as a salted hash by our authentication provider), optional phone number, profile photo, language preference.
- Learning data: level and goals, onboarding quiz answers, lesson and session history, session notes, homework and submissions, test and exam attempts and scores, progress, streaks, badges, phrasebook entries, certificates, engagement events and optional leaderboard participation.
- Voice and audio data: voice notes and spoken answers you record in the platform, voice-journal entries, speaking-test recordings, and voice notes recorded by your tutor for you. Voice can identify a person, so we treat it with extra care and use it only for teaching, feedback and your own progress.
- Live sessions: sessions take place by video call (we use Google Meet, only with the student's consent, or the parent's or guardian's consent for a minor), by phone or in person. If you prefer another way, tell us and we will arrange one. We do not record a session unless we tell you first and you agree. Where a session is recorded, the recording is used to prepare your recap, notes and homework, and for quality and dispute handling.
- Contracts and signatures: the text of the agreement you signed, your typed full name, the date and time, and the IP address and browser user agent captured at the moment of electronic signature, kept as evidence that the agreement was accepted.
- Enrolment and billing records: the lessons, packs and tests you sign up for, the related records and receipts, and any document you send us in connection with your enrolment.
- Messages: messages you send through the platform chat, files you attach, and messages you send through our website contact form or messaging apps.
- Family or sponsor links: if you (or the person responsible for you) choose to share a progress summary with a parent, sponsor or employer, we record that link and the details shared.
- Referral data: referral codes you use or share, stored in a cookie for up to 30 days.
- Notifications: your push-notification subscription (a technical endpoint provided by your browser) and your email reminder settings.
- Technical data: IP address, device and browser type, pages requested, and error and security logs.
We do not intentionally collect data revealing racial or ethnic origin, political opinions, religious beliefs, health or sexual orientation. Please do not put such data in messages, notes or recordings. If you do, you give us your explicit consent to process it for the purpose for which you provided it.
4. Why we use your data and our legal bases
- To create and manage your account, deliver lessons, schedule sessions, assess your level and track progress. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
- To manage your enrolment and billing, keep our records and meet our legal duties. Legal basis: contract and legal obligation.
- To send service messages (booking confirmations, reminders, receipts, contract and account notices). Legal basis: contract and legitimate interests.
- To send optional learning nudges and marketing. Legal basis: your consent or, where the law allows, our legitimate interest in keeping students engaged. You can opt out at any time.
- To keep the platform secure, prevent fraud, tampering and abuse (including attempts to manipulate tests, scores, bookings, payments or contracts), enforce our Terms, and establish or defend legal claims. Legal basis: legitimate interests and legal obligation.
- To improve the platform and our teaching, using aggregated or de-identified data where practicable. Legal basis: legitimate interests.
- To prepare lesson recaps, notes and homework after your sessions. Legal basis: contract and legitimate interests.
- To process voice recordings you provide. Legal basis: your consent, given by choosing to record or upload them. You can withdraw consent by deleting the recording or writing to us; withdrawal does not affect earlier processing.
- To hold live sessions by video call. Legal basis: your consent (a parent's or guardian's for a minor), which you may withdraw at any time by asking us to use another way.
Where we rely on consent under the GDPR, the nFADP or another applicable law you may withdraw it at any time. Where we rely on legitimate interests you may object, and we will stop unless we have compelling legitimate grounds or need the data for legal claims.
6. International transfers
Your student database and stored files are kept in Zurich, Switzerland. Some of our providers (for example email delivery, video-conferencing and website hosting) may process limited data outside Switzerland, including in the United States, and you may use the platform from anywhere. Where data leaves Switzerland or the European Economic Area for a country without an adequacy decision, we rely on appropriate safeguards: the Standard Contractual Clauses (with the Swiss addendum recognised by the Swiss Federal Data Protection and Information Commissioner), the provider's participation in the EU-US and Swiss-US Data Privacy Frameworks, or another safeguard allowed by law, together with supplementary security measures. You can ask us for a copy of the safeguards at hello@fluentimarrakech.com.
8. How long we keep data
We keep personal data only as long as needed for the purposes in this policy and to meet legal duties. Unless a longer period is needed to resolve a dispute or the law requires it, our standard periods are:
- Account and profile data: while your account is active and for up to 24 months after your last activity, then deleted or anonymised.
- Learning records, session notes, homework and progress: while your account is active and for up to 24 months after your last session.
- Voice notes, voice-journal entries and speaking-test recordings: until you delete them, or up to 24 months after your last activity.
- Session recordings and transcripts (where made): up to 12 months, or until the recap is complete if we tell you that earlier.
- Contracts, signature evidence (including IP address and user agent) and enrolment and billing records, including documents you send us: 10 years, to meet legal record-keeping and limitation requirements and to defend claims.
- Contact-form and chat messages: up to 24 months after the conversation ends.
- Push subscriptions: until you unsubscribe or the browser stops accepting them.
- Technical and security logs: generally up to 12 months.
- Backups: kept for a limited rolling period and overwritten in the normal course.
When the periods end we delete or irreversibly anonymise the data. We may keep anonymised or aggregated data without limit.
9. Security
How we keep your data safe and private:
- Everything you send to or receive from the website and platform is encrypted in transit (HTTPS).
- Data in our database and file storage is encrypted at rest by our hosting provider.
- Your password is never stored in readable form. It is hashed and salted by our authentication provider, and nobody at Fluenti can read it.
- Each student can only see their own records. This is enforced inside the database itself (row-level security), not only in the app.
- Voice recordings, receipts, payment proofs and certificates are kept in private storage, not at public web addresses.
- Administrator access is limited, and sensitive actions (booking approval, payments, test scoring) are checked on the server.
- No advertising, no tracking cookies, no selling or renting of your data, and no profiling for ads.
We protect data with measures that are appropriate to the risk, including encrypted connections (HTTPS), access controls and row-level security in our database so students can see only their own records, private storage for audio, receipts and files, restricted administrator access, and rate limiting. No system is completely secure, and we cannot guarantee absolute security. You are responsible for choosing a strong password, keeping it confidential and signing out on shared devices. Tell us immediately at hello@fluentimarrakech.com if you suspect unauthorised access. Where the law requires, we will notify the competent authority and affected individuals of a data breach.
10. Children and minors
You must be 18 or older to create your own account. People under 18 may use Fluenti only through an account opened, or expressly authorised, by a parent or legal guardian, who accepts our Terms and this policy on the minor's behalf, is responsible for the minor's use, and may exercise the minor's privacy rights. We do not knowingly collect data from a child under 15 without that consent. If you believe a minor has registered without authorisation, write to hello@fluentimarrakech.com and we will delete the account.
11. Family and sponsor links and progress reports
You can ask us, or choose within the platform, to let another registered person (for example a parent or sponsor) view a summary of your progress, or to send them a progress report. We will share only the information needed for that purpose, such as attendance, level, scores and teacher comments, and only with the people you or the person responsible for you authorised. You can revoke a link at any time in your settings or by writing to us. We are not responsible for what the recipient does with a report once it has been legitimately delivered to them.
12. Your rights
Subject to the conditions and exceptions in the applicable law, you have the right to:
- be informed about how your data is used (this policy);
- access your data and receive a copy (GDPR Art. 15; nFADP Art. 25);
- have inaccurate data corrected (rectification);
- ask for deletion of your data (erasure), where the law gives you that right;
- restrict or object to certain processing, including processing for marketing, which you can always refuse free of charge (GDPR Art. 21);
- withdraw consent at any time, without affecting earlier processing;
- receive the data you provided in a portable format, where the law provides for portability;
- not be subject to a decision based solely on automated processing that significantly affects you (we do not make such decisions).
Wherever the law of your country gives you a data right that is not listed here, we honour it too. To exercise a right write to hello@fluentimarrakech.com from the address on your account, and tell us what you want. We may ask you to prove your identity before we act. We will answer within the period set by law, normally within 30 days. We may refuse or limit a request that is unfounded, excessive or repetitive, charge a reasonable fee where the law allows, and keep data we are legally required or entitled to keep (for example accounting records, signed contracts, and data needed for legal claims). Deleting your data may end your access to the platform and does not entitle you to a refund.
13. Other websites and services
The platform may link to third-party websites and services (for example video-conferencing and messaging services). We do not control them and are not responsible for their content or privacy practices. Please read their policies.
14. Changes to this policy
We may update this policy from time to time, for example when we add a feature or a provider, or when the law changes. The date and version at the top show the current text. For material changes we will give you notice (for example by email or in the platform) before they take effect where the law requires. If you continue to use the platform after a change takes effect, you accept the updated policy, without prejudice to any rights you have under applicable law to object or to close your account.
15. Contact and concerns
Please contact us at hello@fluentimarrakech.com and we will work to resolve any concern. You may also contact your local data protection authority.
Fluenti. Email: hello@fluentimarrakech.com. Version 2026-11-05.
Read also: Terms of Service