Loading...
Last updated: 2026-07-05
See also our Terms of Service and Cookie Policy.
This privacy policy explains how Devcraft, MB ("we", "us", "our") collects, uses, and protects your personal information when you use OwnSlides ("the Service"), an interactive education platform for learners and educators. We are committed to protecting your privacy and handling your data in accordance with applicable laws including GDPR, CCPA, Korea's PIPA, and Japan's APPI.
The data controller responsible for your personal data is:
Devcraft, MB
Lithuanian Small Partnership (Mažoji Bendrija)
Registration code: 306293253
Registered address: Manufaktūrų g. 20-136, LT-11342 Vilnius
Lithuania
Registry: View company record in the Lithuanian business registry
support@ownslides.comOwnSlides is operated by Devcraft, MB, a small partnership whose core activities do not consist of large-scale processing of special-category data, large-scale monitoring of individuals, or any of the other activities that would require the appointment of a Data Protection Officer under Article 37 of the GDPR. We have therefore not designated a Data Protection Officer. For any privacy question or request, please contact us at the privacy address in the Data Controller section; the founder personally handles all privacy correspondence.
We collect the following types of information:
We do not intentionally collect special-category data under Article 9 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data uniquely identifying a natural person, data concerning health, or data concerning sex life or sexual orientation). Please do not include such data in chat messages, lesson content, uploaded documents, or any other input to the Service. If you do, you instruct us to process it solely to deliver the feature you used, and you can ask us to delete it at any time by contacting us at the privacy address in the Data Controller section.
Providing an email address and password — or signing in with Google — is required to create an account; without it we cannot provide the Service. Other fields, such as your display name, biography, profile picture, native and target languages, and any content you create, are optional. Payment information is required only if you choose a paid plan, and is processed directly by Stripe; we never store your full payment-card number.
Under GDPR, we process your data based on:
In practice, we rely on the following bases for specific processing activities:
Some features of OwnSlides adapt automatically based on your activity. We want to be clear about what this involves and what it does not.
Examples include: the AI tutor adjusting exercise difficulty to your estimated CEFR level, the spaced-repetition scheduler choosing which vocabulary to review, leaderboard ranking from your weekly activity points, level calibration based on your last sessions, and search and gallery recommendations based on what you have viewed and saved.
None of these processes produce legal or similarly significant effects about you within the meaning of Article 22 of the GDPR. They do not affect employment, credit, access to essential services, eligibility for any government benefit, or any binding decision about you. They affect only what you see inside the Service.
You can object to profiling for recommendations, leaderboard visibility, and adaptive difficulty at any time through your privacy settings or by emailing us at the address in the Data Controller section. Doing so may reduce the personalization of the Service but will not block your access to it.
We do not profile users for advertising. We do not run ads on OwnSlides and we do not share profile data with advertising networks.
We share your data with the following third-party services to provide and improve the Service:
We do not use your prompts, uploads, chat messages, or generated outputs to train our own models, and we do not operate any internal fine-tuning pipeline on user content.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
When you use AI features in OwnSlides — including the chat tutor, AI voice practice, AI quizzes, and translator — your prompts, messages, and audio are processed by third-party AI providers under contracts that restrict how they may use your data.
OwnSlides itself does not use your prompts, chat messages, AI quiz answers, or voice recordings to train our own machine-learning models.
If you do not want any of your prompts to be sent to a third-party AI provider, do not use AI features. The rest of the Service remains available to you without using these features.
Some of our sub-processors are based in the United States or operate global infrastructure, including OpenAI, Anthropic, Stripe, ElevenLabs, LiveKit, Cloudflare, Sentry, MongoDB Atlas, and Amazon Web Services. Where personal data is transferred outside the European Economic Area (EEA), we rely on the European Commission's Standard Contractual Clauses (SCCs, 2021/914) and, where applicable, the EU–U.S. Data Privacy Framework. We also rely on adequacy decisions where the European Commission has issued one for the destination country (for example, the United Kingdom). Copies of the safeguards we use are available on request by contacting us at the privacy address in the Data Controller section.
We retain your personal data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes.
Learning activity data (quiz responses, scores, and progress) is retained to provide personalized recommendations and track your learning journey. This data is deleted when you delete your account.
Anonymous learning session data from guest users is automatically deleted after 30 days and is never linked to any identifiable information.
Translation history is retained while your account is active to allow you to review past translations. This data is deleted when you delete your account.
Where the period varies by data category, we apply the following defaults:
Depending on your location, you have various rights regarding your personal data:
If you are located in the EU/EEA, you have the following rights:
If you are a California resident, you have the following rights:
If you are located in South Korea, you have the following rights under PIPA:
If you are located in Japan, you have the following rights under the Act on the Protection of Personal Information (APPI):
You can delete your account at any time from Settings → Privacy → Delete account, by typing the confirmation word and confirming. Deletion is processed within 30 days, except where we are legally required to retain certain records (for example, invoices for accounting and tax purposes, kept for up to 10 years under Lithuanian law).
You can request an export of your personal data by emailing us at the privacy address in the Data Controller section. We typically respond within 30 days and may extend this by up to 60 additional days for complex or numerous requests, as permitted by GDPR Article 12. The export is provided in a structured, commonly used, machine-readable format.
When you delete your account, your profile, lessons, chat history, AI conversation history, and learning activity are removed from active systems within 30 days. Encrypted backups expire on a separate schedule (see "Specific retention periods" above), after which deleted data is no longer recoverable from any backup.
We implement appropriate technical and organizational measures to protect your data:
When our administrators access your account view for support or debugging purposes, we log: administrator identity, timestamp, duration, reason for access, and IP address. These logs are retained for 2 years for security and audit purposes. You may request a copy of these logs by contacting us.
Some information you provide is visible without logging in, so that lessons and profiles can be shared:
OwnSlides is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. This commitment is informed by the U.S. Children's Online Privacy Protection Act (COPPA), the GDPR (Article 8) and its national implementations in the EU/EEA, and comparable laws in other jurisdictions. The minimum age for using the Service in your country may be higher than 13 depending on local law. If you believe a child has created an account or provided us with personal information, please contact us and we will delete the account and associated data.
OwnSlides is not directed to children under 13 (or under the local digital-consent age, which can be up to 16 in some EU member states). We ask all users to confirm their date of birth at signup. If we learn that an account has been created by a user under the applicable age threshold, we will terminate the account and delete the personal data we hold about that user.
Where a user is between 13 and the local digital-consent age, applicable law (including GDPR Article 8) may require parental consent. We do not currently operate a verifiable parental-consent flow; the Service is therefore not directed to users in that age bracket without parental supervision, and parents or guardians who believe their child has created an account can request immediate deletion using the report process below.
To report a suspected underage account, or to request deletion of a minor's account, email us at the privacy address with the username or profile URL. We will investigate and, where confirmed, delete the account and associated personal data within a reasonable time and confirm completion by email.
We do not target advertising to children, we do not run ads, and we do not profile minors for any commercial purpose. The same adaptive-difficulty and recommendation features described above apply equally to all users; they affect only what content is shown in the Service.
Your data may be transferred to and processed in countries outside your residence, including Lithuania (where our company is based) and locations where our service providers operate. We ensure appropriate safeguards are in place for such transfers.
Some features ask your browser for permission to access your microphone. We only access the microphone when you actively start one of these features, and we never listen in the background. The features are:
You can revoke microphone permission at any time through your browser's site-settings panel. Doing so will disable the features above but does not affect the rest of the Service.
Some features of OwnSlides process voice audio to provide a service to you. We process voice in three ways: AI voice practice (audio is streamed to ElevenLabs in real time for the conversation and not retained), audio rooms (your audio is routed through LiveKit media servers to other participants and not recorded), and pronunciation analysis (short clips are sent to our backend for scoring, the scores are stored with your learning activity, and the underlying audio is not retained after analysis).
We do not generate, store, or use voiceprints, faceprints, or other biometric identifiers (within the meaning of the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, the Washington My Health My Data Act, or similar US state laws) to identify, recognise, or distinguish individual users. Pronunciation scoring is a one-way evaluation of audio against a reference, not a biometric template that can be used to identify you across sessions.
Where we ask for microphone access, your browser prompts you to consent. If you do not consent, the voice features will not work but the rest of the Service will. You can revoke microphone permission at any time through your browser settings.
If you opt in to push notifications, your browser creates a push subscription that we use to deliver notifications about activity on your account. We store the subscription endpoint URL and the public cryptographic keys provided by your browser, and we use them to send messages through the push gateway operated by your browser vendor (for example, Mozilla, Google, or Apple). The push gateway sees the delivery metadata but cannot read the encrypted notification payload. You can revoke notification permission at any time through your browser's site-settings panel; revoking will stop new notifications and you can ask us to delete the stored subscription by contacting us.
We may update this privacy policy from time to time. We will update the "Last updated" date at the top of this page on every revision. For material changes — for example, a new sub-processor handling a new category of personal data, a meaningful change in retention, or a change in legal basis — we will notify registered users by email and display an in-app banner before the change takes effect. Minor editorial revisions (typo fixes, clearer wording without substantive change) will not trigger a notification, but the updated date will always reflect the latest revision.
If you have questions about this privacy policy or want to exercise your rights, please contact us at:
support@ownslides.com