Legal
Privacy Policy
Last updated 30 September 2026
This policy explains what Romanian Unlocked does with your information. It covers the mobile app and this website, because they share one account and one subscription.
The short version: we collect what the service needs to work — your account, your progress, and the messages you send the AI features. We do not sell your data, we do not run advertising, and we do not use tracking cookies. You can ask us to delete everything.
1. Who is responsible
The data controller is Unlocked Languages (Romanian Unlocked), based in Romania.
For any privacy question, or to exercise a right, write to hello@mroxy.eu. We aim to reply within 14 days.
2. What we collect, and why
| What | Why |
|---|---|
| Account details — your email address, your display name, your profile picture if your sign-in provider supplies one, and a provider identifier | To create and secure your account, and to link your subscription to you |
| Learning data — which lessons you have opened and finished, your review schedule for flashcards, your notes and favourites, your streak and your XP | To make the course work, to resume where you left off, and to show your progress |
| AI feature content — the messages you write to the AI conversation partner and the AI grammar teacher, and the replies | To run those features and to keep your chat history so you can return to a conversation |
| Subscription data — whether your subscription is active, which plan you chose, when it renews or expires, and the billing email | To unlock the content you have paid for and to answer billing questions |
| Technical data — your IP address and standard request logs, kept by our hosting providers | To serve the service, keep it secure, and diagnose faults |
We never see your card details. Payments are handled by Stripe, and purchases made in the App Store or Google Play are handled by those stores. We receive the outcome — paid, renewing, refunded — never the card.
3. What we do not do
- We do not sell or rent your personal data to anyone.
- We do not run advertising or profiling, and we do not share data with ad networks.
- We do not use tracking or analytics cookies. The marketing pages of this website set none.
- We do not use your AI conversations for advertising.
4. Who processes your data
We use a small number of service providers. Each one only sees what its job requires:
| Provider | What it does |
|---|---|
| Auth0 (Okta) | Sign-in. Handles your credentials and, if you use Apple or Google to sign in, receives your basic profile from them. |
| Directus (our database) | Stores your learning progress, notes, favourites and AI chat history. |
| RevenueCat | Manages subscription state across the App Store, Google Play and web purchases. |
| Stripe | Processes web payments and stores the billing details needed to charge you. |
| Apple & Google | Distribute the app and process in-app purchases under their own privacy policies. |
| AI model provider | Generates the replies for the AI conversation partner and the AI grammar teacher. |
| Cloudflare | Hosts this website and serves it through its network. |
5. Where your data goes
Some of these providers are based in the United States, so your data may be transferred outside the European Economic Area. Where that happens we rely on the safeguards those providers put in place for international transfers, such as the European Commission's standard contractual clauses.
6. How long we keep it
- Account and learning data — while your account exists. Delete your account and we delete it.
- AI conversations — until you delete them or delete your account. The app keeps the last twenty sessions per feature.
- Billing records — kept as long as tax law requires, even after you delete your account, because we are obliged to keep them.
- Server logs — a short period, for security and troubleshooting.
When you delete your account we remove your personal data from the live systems within 30 days. Backups roll over on their own schedule.
7. Your rights
Under the GDPR you can ask us to:
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete your data (see also the section below).
- Restrict or object to certain processing.
- Move your data somewhere else, in a common format.
- Withdraw consent at any time, where consent was the basis.
We process your data because we need it to provide the service you asked for (the contract), to keep the service secure (a legitimate interest), and to meet tax and accounting obligations (a legal obligation).
You can also complain to your national data protection authority. In Romania that is the ANSPDCP (dataprotection.ro).
8. Deleting your account
You can delete your account yourself, inside the app: open Profile and use theDanger Zone. Deleting your account removes your profile, your progress, your notes and your chat history. The full steps, and what deletion does and does not remove, are on the Delete your account page.
Deleting your account does not cancel your subscription. Subscriptions are managed by the store or by the payment provider, so cancel that separately — in your App Store or Google Play subscription settings, or in the customer portal if you subscribed on the web. If you would rather we did it for you, write to hello@mroxy.eu.
9. Cookies
The marketing pages of this website set no cookies at all. The members area sets a single essential cookie that keeps you signed in while you browse it. It is not used for tracking or advertising, and there is no cookie banner because there is nothing to consent to.
10. Children
Romanian Unlocked is not directed at children. It is not intended for anyone under 16, and we do not knowingly collect data from children under 16. If you believe a child has created an account, write to hello@mroxy.eu and we will remove it.
11. Security
Your session is protected with an encrypted, HTTP-only cookie and everything travels over HTTPS. Access to the systems that hold your data is limited to what is needed to run the service. No system is perfect, and if a breach ever affects you we will tell you as the law requires.
12. Changes to this policy
If this policy changes in a way that matters, we will update the date at the top and tell you in the app. Continuing to use Romanian Unlocked after a change means you accept it.
13. Contact
Romanian Unlocked is operated by Unlocked Languages (Romanian Unlocked), Romania. Write tohello@mroxy.eu about anything on this page.