رازداری کی پالیسی

1. Controller and contact

Muhammad Usman Huder Straße 20 28197 Bremen Deutschland Email: usman@integraitapp.com

integrAIt is run by the person named above as an individual, not by a separate company.

2. Website and enquiries

Cloudflare delivers this website and processes technical connection information such as IP address, requested URL, browser and request time for delivery and security.

Contact, employer and beta-interest forms send your name, country, phone number, interest and optional message to our Supabase database. We also store the form source, interface language, page path and submission time. The current integrAIt database is in London, United Kingdom.

We use enquiry information to respond to your request. Submitting interest does not create an account, booking, paid contract or newsletter subscription. Required fields are necessary to handle the enquiry. Spam checks use a hidden field and submission timing; these checks are not stored with your enquiry.

Enquiry processing is intended to respond to your request or take requested pre-contractual steps under Article 6(1)(b) GDPR; delivery and abuse prevention rely on legitimate interests under Article 6(1)(f). Enquiries are retained until handled, with a maximum of 12 months after the last contact unless a legal obligation requires otherwise. Earlier deletion may be requested using the contact above.

3. Speaking practice: iPhone beta and website

Profile preferences such as your display name, profession, city and German level are stored on your device. The app has no user accounts or cross-device history. The selected language level and scenario are sent to the coach to adapt practice.

On physical iPhones, speech recognition is required to run on-device. The app sends the resulting transcript, not microphone recordings, to the FastAPI coach on Google Cloud Run. Google Gemini processes conversation text to produce prompts and feedback; an alternative model provider may only be enabled after this notice is updated. Google Cloud Text-to-Speech processes the interviewer's text for voice playback; on-device speech is used if cloud voice is unavailable.

Anonymous transcripts and feedback are stored in Supabase for up to seven days. Expired sessions are inaccessible and removed by a scheduled cleanup running every minute. You can delete sessions associated with this installation using Profile → Delete practice data. Internet is required. Reset local profile clears profile preferences separately. Uninstalling or reinstalling may prevent manual deletion of earlier sessions; automatic expiry still applies.

Session access credentials are kept in the iOS Keychain; only their hashes are stored server-side. Firebase Analytics and Crashlytics are disabled for this beta. Operational server logs record requests, latency and failure categories without transcript contents or session credentials. Practice text may itself contain personal information: avoid including information you do not want processed by the coach.

The interview simulator, the job interview practice and the exam practice on this website use the same coach: the text you send is processed by Google Gemini in the same way. Without an account it is stored for up to seven days. If you are signed in, the session is stored with your account until you ask us to delete the account, and we may use it for the assessment described in section 6.

4. DeutschKompass and course preview

The learning page loads the DeutschKompass placement test only when you select Load the placement test. You can alternatively open it in a separate tab at dk.integraitapp.com. DeutschKompass is operated by us on the same infrastructure as integrAIt: your test answers and contact details are stored in the same Supabase database (London, United Kingdom), and your speaking sample is stored in our own Cloudflare R2 object storage in a private bucket that only the course leader can read.

DeutschKompass shows its own privacy notice before submission. It collects assessment details and a speaking sample for teacher review, and both are deleted after six months. The automated written result does not include a score for the recording and is not an official language certificate. Loading the embedded service may set its own security cookies.

The course preview link opens an external Claude artifact. The external service's privacy terms apply when you visit it. No preview is loaded automatically.

5. Student accounts

You can create an account on integraitapp.com to use the German course and, later, to watch recorded German lectures. If you sign in with Google, Google shares your email address, name and Google account ID with us and processes the sign-in under its own privacy policy. If you register with an email address and password, we store your email address and a one-way hash of your password, never the password itself. The sign-in form may run a Cloudflare Turnstile security check against automated sign-ups; Cloudflare processes technical data such as your IP address for it.

Supabase stores the account: your email address, sign-in method, the time it was created and last used, and your role (every new account is a student). Once lectures are available, we also store which lectures you watched and how far, to show your progress.

In the German course we store every practice answer you check: the exercise, what you typed, whether it was right and when. You and your teacher see these answers to follow your progress; no one else does. They are deleted together with your account.

Homework and live quizzes work the same way: we store what you hand in (your typed answers and, for writing tasks, up to three photos of your handwritten work in a private Supabase Storage bucket) together with your teacher's mark and feedback. Only you and your teacher can open your photos. They are deleted together with your account.

When your teacher closes a live quiz, the class sees a leaderboard with each participant's first name (or the part of the email address before the @) and score.

If you join a batch (your class) with the code your teacher gives you, we store which batch you are in, so that you see its quizzes and homework. Your teacher sees who is in each batch.

Signing in sets cookies on integraitapp.com that keep you signed in. They are strictly necessary for the account. They are not sent to dk.integraitapp.com, so a DeutschKompass placement test is never linked to your account automatically. We only look at your result together with your other data if you ask us to assess you for placement (section 6).

The legal basis is Article 6(1)(b) GDPR: providing the service you signed up for. We keep the account until you ask us to delete it. To delete it, email usman@integraitapp.com; we delete the account and its progress within one month.

6. Assessment for Ausbildung and job placement

If you ask us to help you into an Ausbildung, a job search with the Chancenkarte or a skilled job in Germany, we assess how ready you are for each of these routes. We use what you give us or let us see: your DeutschKompass result, your interview practice done while signed in, speaking-practice results you share with us, your progress in the German course, the documents you show or send us (for example your CV and certificates) and what you tell us in calls or messages. Our team adds notes and sets a stage for each route.

A person on our team decides the stage. Nothing about you is decided solely by automated means (Article 22 GDPR): the automated DeutschKompass result and AI feedback are only one input.

The legal basis is Article 6(1)(b) GDPR: steps you ask us to take before a placement contract. We show an employer a short profile of you only with your written consent (Article 6(1)(a) GDPR), which you can withdraw at any time for the future. Without it, no employer, school or authority receives your assessment.

We keep the scorecard and notes in a file on an encrypted computer of the operator, not in an online service. Documents you send us stay in the chat or mailbox you sent them to: WhatsApp processes messages under its own terms, and Cloudflare forwards emails to usman@integraitapp.com to a Google Gmail mailbox. If we use your DeutschKompass result, we copy it into the scorecard, and that copy follows the deletion rule below instead of the six months in section 4.

We delete the assessment, notes and documents 12 months after our last contact with you, or earlier if you ask, unless a contract with you requires us to keep certain records longer (for example invoices under tax law). You can ask for a copy of everything we hold about you, including the scorecard, the stages and our notes (Article 15 GDPR).

7. Optional contact and booking services

WhatsApp is opened only when you select its link. Messages are processed by WhatsApp under its own terms. If a real booking calendar is configured, selecting the booking link opens Cal.com, which processes booking information under its own notice. Neither service is needed merely to read this website.

Optional dictation in the web interview simulator uses your browser's built-in speech recognition. integrAIt does not receive or store audio, only the text you choose to send. The browser vendor (for example Google for Chrome) may process the audio under its own privacy policy.

This beta website includes no advertising pixels or optional analytics. External services may use their own cookies and storage after you choose to open or load them.

8. Processors, transfers and your rights

We use these processors: Cloudflare, Inc. (delivering this website and DeutschKompass, storing speaking samples in R2, and the Turnstile security check on sign-in); Supabase, Inc. (database, sign-in and storage of homework photos; data stored in London, United Kingdom, a country with an EU adequacy decision); Google (the coach on Google Cloud Run in Frankfurt, Germany, the Gemini language model and Google Cloud Text-to-Speech). Some of these providers are based in the USA. Transfers there rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the EU standard contractual clauses in the provider’s data processing terms.

Depending on applicable law, you may request access, correction, erasure, restriction or portability, object to processing, or withdraw consent where consent is the basis. You may complain to a supervisory authority; the one responsible for us is Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen. Contact usman@integraitapp.com for requests. AI feedback and placement guidance do not make binding admission, employment or immigration decisions.