Privacy Policy
Last updated: March 17, 2026
Data Controller
The data controller for personal data is Amine Serra (micro-entreprise), 7 jardin Jean de Ockeghem, 37000 Tours, France. For any questions, contact us at [email protected].
Data Collected
We collect the following data:
- Registration data: username, email address, password (hashed)
- Learning data: lesson progress, exercise scores, revision statistics
- Navigation data: pages visited, session duration (via Plausible Analytics, without cookies, without personal data)
Processing Purposes
- Providing and personalizing the learning service
- Spaced repetition algorithm (SRS) adapted to your progress
- Managing your user account
- Improving the service through anonymous statistics (Plausible)
- Account-related communications (if you consent)
Legal Basis
- Contract performance: registration and learning data are necessary to provide the service
- Legitimate interest: anonymous statistics help improve the service
- Consent: for marketing communications (opt-in)
Data Retention
- Account data: retained as long as the account is active, then deleted within 30 days of deletion request
- Learning data: retained as long as the account is active
- Plausible statistics: anonymous and aggregated, retained indefinitely
Your Rights
Under the GDPR, you have the following rights:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate data
- Deletion: request erasure of your data
- Portability: receive your data in a structured format
- Opposition: object to the processing of your data
- Limitation: request restriction of processing
To exercise these rights, write to [email protected]. You may also file a complaint with the CNIL (cnil.fr).
Cookies & Analytics
Takalamu uses Plausible Analytics, a privacy-friendly solution that does not use cookies, does not collect personal data, and does not track users across sites. Plausible is GDPR compliant without requiring a consent banner. No other third-party cookies are used on the site.
Only strictly necessary technical cookies for the service to function (authentication session) are used. These cookies are exempt from consent under the ePrivacy Directive.
Data Transfer
Your data is hosted in France (European Union), in the data centers of our host OVHcloud. Payment data is processed by our provider DodoPayments (Merchant of Record); where this processing involves a transfer outside the European Union, it is governed by appropriate safeguards, including the European Commission's standard contractual clauses.