Privacy statement
Version of 18 October 2026
Who is responsible
Solid Software B.V., Rümkelaan 32, 3571 XW Utrecht, the Netherlands, is responsible for your data in Convola. Questions: support@solid-soft.nl.
What we keep, why, and for how long
| Data | Why | Kept |
|---|---|---|
| Account: your email, and your Google id if you sign in with Google | To give you an account | Until you delete your account |
| Sign-in codes, stored hashed | To sign you in | Until used or replaced; a code works for 10 minutes |
| Practice: your levels, the mistakes the tutor noted, your words and cards, daily practice totals | To run your practice and show your progress | Until you delete your account |
| Conversations as text | To run the conversation and its recap | 90 days after the conversation ends |
| Voice | Sent to Deepgram to turn it into text | Not kept: we keep the text, not the recording |
| Use: the AI cost of each request | To keep your practice allowance | Until you delete your account |
| Payments: your plan, invoices and billing country, through Stripe | To bill you, and tax law | Invoices 7 years, as tax law requires; kept without your email after you delete your account |
| Withdrawals and support mail | To handle your request | 7 years, with the purchase they belong to |
| Mail log: which service mails we sent you | So each mail goes once | Until you delete your account |
We use these on the ground of our contract with you, our legal duties (tax), and our legitimate interest in keeping Convola safe. Page visits are counted without cookies and without storing who you are.
How the AI uses your conversations
The AI reads your conversation to write the characters' lines, to note your mistakes, and to rate the skills you used. These ratings move your level, as the terms describe. No decision with legal or similar effect is made by the AI alone.
Who processes it for us
- Cloudflare: hosting and databases.
- Anthropic: the AI model that writes the characters' lines and the tutor's notes; it receives your conversation text.
- Deepgram: speech to text and text to speech.
- Stripe: payments.
- Resend: sending mail.
- Google: sign-in, only if you choose it.
Some of these are US companies. Transfers rest on the EU-US Data Privacy Framework or the EU's standard contract clauses. None of them may use your data for their own purposes.
Cookies
Convola sets two cookies, both needed for what you ask: cv_session keeps you signed in, and cv_theme remembers light or dark if you choose one. We do not track you and use no advertising cookies.
Your rights
On your account page you can download all your data, in a format other services can read, and delete your account. You may also ask us to correct your data, to restrict its use, or object to its use: mail support@solid-soft.nl. We answer within one month. You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Age
Convola is for people aged 16 and older.