M
MyFrenchExam

Privacy Notice

Last updated: May 2026

1. Who we are

This Privacy Notice describes how myfrenchclasses ("myfrenchclasses", "we", "us") collects and uses your personal data. myfrenchclasses is the data controller for the personal data described below.

2. Personal data we collect

  • Account data: name, email address, password (hashed), avatar, country, target CLB score, locale.
  • Learning data: course enrollments, lesson progress, mock test attempts and scores, XP, badges, and streaks.
  • Submissions: writing essays you submit, audio recordings of speaking practice, and AI-generated feedback on them.
  • Community data: forum threads and replies you post.
  • Support and lead data: messages you send through contact and lead capture forms (name, email, phone if provided, message).
  • Technical data: IP address, device and browser information, timestamps, and basic usage telemetry.

Payment card details are not collected by myfrenchclasses. They are collected directly by our payment processor (Paddle) — see Section 4.

3. How and why we use your data

  • Provide the Service (creating your account, delivering courses, generating AI feedback, tracking progress) — legal basis: performance of contract.
  • Customer support — legal basis: performance of contract / legitimate interests.
  • Security and fraud prevention — legal basis: legitimate interests / legal obligation.
  • Product improvement and analytics — legal basis: legitimate interests.
  • Marketing communications (only where you've opted in) — legal basis: consent. You can withdraw consent at any time.
  • Compliance with law — legal basis: legal obligation.

4. How we share your data

We share personal data only with:

  • Paddle.com Market Limited (Merchant of Record) — for processing all sales of our courses and subscriptions, managing subscriptions, payments, billing, tax compliance, refunds, and invoicing. Paddle is an independent data controller for the payment data it collects. See Paddle's Privacy Policy.
  • Hosting and infrastructure providers — to operate the Service (cloud hosting, storage, content delivery).
  • AI providers — to generate speaking and writing feedback from your submissions. These providers act as our processors and do not use your submissions to train their models.
  • Analytics and support tooling providers — to understand usage and respond to support requests.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities — where required by law, court order, or to protect our rights.

We do not sell your personal data.

5. International transfers

Some of our service providers (including Paddle) are located outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. Submissions and learning data are typically retained for the duration of your account. Lead form submissions are kept for up to 24 months. Billing records held by Paddle are retained per Paddle's policies and applicable tax law (typically 7–10 years). When data is no longer needed, it is deleted or anonymised.

7. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data;
  • Restrict or object to certain processing;
  • Receive your data in a portable format;
  • Withdraw consent (where processing is based on consent);
  • Lodge a complaint with your local data protection authority.

To exercise these rights, contact us via our contact page. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and secure cloud hosting. No system is completely secure, but we work to protect your information against unauthorised access, alteration, disclosure, or destruction.

9. Cookies

We use essential cookies to keep you signed in and to remember your preferences. We may use limited analytics cookies to understand how the Service is used. Where required by law, we ask for your consent before placing non-essential cookies. You can manage cookies through your browser settings.

10. Children

The Service is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated by email or in-app notice.

12. Contact

Questions about your privacy? Reach us via our contact page.