Privacy Policy
Effective 11 November 2026
In short
- You can try Hopfluent without an account. An account needs only an email address and a password.
- We keep your learning progress, your account details if you create one, and short-lived technical logs.
- No advertising, no third-party trackers, and we do not sell personal data.
- You can download or delete your data at any time from the settings page.
This summary is here to help. The full text below is what applies.
On this page
1.Scope
This policy explains how Hopfluent handles personal data when you use our website, application, lessons and tools (the "Service"). It should be read together with our Terms of Service and Cookie Notice.
2.Who is responsible
Hopfluent is an independently operated online learning service. In this policy, "Hopfluent", "we", "us" and "our" refer to the operator of the Service, which decides how and why your personal data is used and is the controller of that data.
For any privacy question or request, contact privacy@hopfluent.com. The operator's full legal details are available on request at privacy@hopfluent.com.
3.What we collect, why, and for how long
We collect only what the Service needs in order to work. We never ask for your name. You can use part of the Service without an account; an account, which opens the rest, needs an email address and a password.
| Data | Why we use it | Legal basis | Kept for |
|---|---|---|---|
| Anonymous identifier | A random value stored in a cookie when you first complete a lesson or practice question. It lets us save your progress. We store only a one-way hash of it. | Providing the Service you ask for | Until you delete your data, or 24 months after you last used the Service |
| Account details (only if you create an account) | Your email address, used to sign you in and to reply to you about your account. Your password, which we store only as a salted one-way hash and cannot read. The date you accepted the terms. A hashed token for each browser you are signed in on. If you sign in with Google, the email address Google confirms and its identifier for your Google account; we ask Google for nothing else. We email you only about your account (to confirm your address, to reset a password, to tell you a password changed). We do not send marketing email. | Providing the Service you ask for; our legitimate interest in keeping accounts secure and in keeping a record of acceptance | Until you delete your account, or 24 months after you last used the Service |
| Plan and purchase reference (only if you buy a paid plan) | Which plan you have, when it renews or ends, and the reference numbers our payment reseller gives us for you and your purchase, so that we can open the lessons you paid for. We never receive or store your card number or other payment details: you enter those on the reseller's own page. | Performing the contract with you; legal obligations to keep records of transactions | While your account exists, and afterwards for as long as the law requires transaction records to be kept |
| Learning record | Lessons completed, answers submitted, scores, time taken, practice results and your daily streak. Used to save and show your progress, to check scores and to improve lessons. | Providing the Service; our legitimate interest in improving it and keeping scoring fair | The same period as the identifier |
| Time zone | Sent with a completed lesson or practice answer so that your daily streak follows your local day. It is used at that moment and not stored. | Providing the Service | Not retained |
| Technical logs | IP address, date and time, the page or resource requested, and browser type. Used to run, secure and troubleshoot the Service. | Our legitimate interest in operating a secure service | Up to 30 days |
| Abuse-prevention records | A salted one-way hash derived from your IP address or identifier, used to limit excessive requests. It cannot be turned back into the original value. | Our legitimate interest in preventing abuse | Up to two days |
| Messages you send us | Your email address and the content of any message, used to reply and to keep a record of the request. | Our legitimate interest in responding; legal obligations where a request is a legal one | Up to 24 months after the conversation ends |
Some information is kept only in your own browser: your theme preference and a cached copy of your progress, so the application works without waiting for the network. See the Cookie Notice.
Backups of our database are kept for up to 30 days and are then deleted. Data removed from the live Service disappears from backups as they expire.
When a period ends we delete the data or make it anonymous. Statistics that cannot be linked to you may be kept.
We do not collect special categories of personal data, and we ask you not to send us any.
4.What we do not do
- We do not sell personal data, and we do not share it for cross-context behavioral advertising.
- We do not show advertising.
- We do not use third-party analytics, tracking pixels or social-media trackers.
- We do not build marketing profiles, and we do not make decisions about you by automated means that have legal or similarly significant effects.
5.Who receives your data
We share personal data only as follows.
- Service providers. Providers of hosting and infrastructure, data backup, email delivery and, if you contact us, mailbox services. They process data on our instructions, under contracts that require them to keep it confidential and secure and to use it only to provide their service to us. We name the providers that process your data if you ask at privacy@hopfluent.com.
- Google, if you choose to sign in with it. Google learns that you are signing in to Hopfluent and tells us your email address and an identifier for your Google account. Its own privacy policy applies to what it does with that.
- Our payment reseller. Paid plans are sold by Dodo Payments, which acts as the reseller and merchant of record. When you buy, we pass it your email address and an account reference so the purchase can be matched to your account. It collects your payment and billing details directly from you and is responsible for them under its own privacy policy, which is shown at checkout.
- Legal reasons. Where the law requires it, or where needed to establish, exercise or defend legal claims or to protect the safety or security of people or of the Service.
- A change of operator. If the Service passes to a successor, your data passes with it and remains subject to this policy.
We do not sell personal data and do not share it for advertising.
6.International transfers
The Service is offered worldwide, and we and our service providers may process your data in countries other than the one you live in. Those countries may have data-protection laws that differ from yours. Where the law requires it, we rely on appropriate safeguards for such transfers, such as standard contractual clauses approved by the relevant authorities. You can ask us for more information about the safeguards that apply.
7.Security
We use technical and organizational measures appropriate to the risk to protect personal data. These include encryption of data in transit, storing identifiers and session tokens only as one-way hashes, storing passwords only as salted hashes made with a memory-hard function, limiting sign-in attempts, limiting access to those who need it and keeping backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If a security incident affects your personal data, we will notify the competent authorities and affected people where the law requires it. Where we hold an email address for you we will use it. For people who use the Service without an account we hold no contact details, so we may give that notice on the Service itself.
8.Your choices and rights
Download or delete, yourself. Open Settings in the browser you use for Hopfluent to download a copy of everything we hold about you, or to delete it. If you have an account, deleting removes the account as well, and you can change your password there.
Deleting your data in Settings removes your learning record from the live Service at once. Copies in backups expire within 30 days, and security logs are deleted on their own schedule, as set out in section 3.
That page is the reliable way to reach your data. If you have an account and write to us instead, write from the email address on the account so that we can confirm the request is yours. If you use the Service without an account, the identifier in your browser is the only link between you and your record, and we cannot find it from a name or an email address. We will ask for information that lets us locate it, and if that is not possible we will tell you.
Depending on where you live, you may have the right to:
- be told whether we hold personal data about you and receive a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict our use of your data;
- receive your data in a portable format;
- withdraw consent, where we rely on consent, without affecting earlier use;
- complain to the data-protection authority where you live or work.
Your right to object. Where we use your data on the basis of our legitimate interests (improving lessons, fair scoring and security logs), you may object at any time. We will stop unless we have compelling reasons to continue or need the data for legal claims.
To exercise a right, use Settings or write to privacy@hopfluent.com. We answer requests within one month. If a request is complex we may take up to two further months and will tell you why. Requests are free unless they are clearly unfounded or excessive, and we will not treat you differently for making one.
9.Additional information for certain regions
European Economic Area, United Kingdom and Switzerland. The legal bases we rely on are set out in section 3. Where we rely on legitimate interests, we have weighed them against your rights and expectations, and you may object at any time. You have the right to lodge a complaint with your supervisory authority.
California and other United States states. In the past twelve months we have collected the following categories of personal information: identifiers (an anonymous device identifier, IP address and, if you create an account, your email address), account sign-in credentials (a password, stored only as a hash) and internet or network activity (your use of the Service). We collect it directly from you and your device, for the purposes in section 3, and disclose it only to service providers. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use sensitive personal information. You have the right to know, to delete, to correct and to limit, and the right not to be discriminated against for exercising these rights. You may use an authorized agent, who must show that they act for you.
Other countries. Wherever you live, you can use the rights described in section 8, and we apply the same protections to everyone. The person responsible for data protection at Hopfluent, who also handles grievances and complaints, can be reached at privacy@hopfluent.com. If the law of your country gives you additional rights, we will honor them.
Browser privacy signals. Because we do not track you across sites or sell or share personal data, there is nothing for a "Do Not Track" or Global Privacy Control signal to switch off. We honor the intent of those signals in full.
10.Children
Hopfluent is not directed to children and may be used only by people aged 16 or over. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe that a child under 16 has used the Service, contact privacy@hopfluent.com. The quickest way to remove a child's record is to choose the delete option in Settings on the device the child used. Creating an account requires accepting the Terms of Service, which allow use only from the age of 16.
Users aged 16 and 17 receive the same protections as everyone else: no advertising, no tracking across sites and no profiling.
11.Changes to this policy
We may update this policy as the Service changes. The current version is always published on this page with its effective date. If a change materially affects how we use your data, we will give notice on the Service before it takes effect.
12.Contact
Questions or requests about privacy can be sent to privacy@hopfluent.com.