Pado — Privacy Policy

Version 1.2 — 3 September 2026 (added: on-device microphone use for the Skygge speaking practice — nothing is uploaded or stored). Data controller: the operator of Pado, based in Norway. Contact for privacy questions and data-subject requests: [email protected]. Drafted for GDPR (EU/EEA incl. Norway); CCPA notes for US users below.

This policy is published in English. English is the binding version.

The short, honest version

Your learning data never leaves your device. Words, photos, notes, review history — all of it is stored locally in your browser/app storage. We cannot see it. You can erase all of it at any time from your device.

What we DO process, and why

• Account data: username, email address, a salted hash of your password (never the password itself), account creation date, the invite or referral code if you used one, consent record. Legal basis: contract. Kept until you delete your account.
• Referral requests: the email address (and optional name) of a friend you refer, provided by you with their knowledge, used once to send an invite. Legal basis: consent of the referrer.
• Survey and feedback responses you choose to submit: used only to improve Pado. Legal basis: consent. You may skip them.
• AI processing (transient): when you explicitly tap an AI feature, the selected text snippet or cropped image is sent to our processor Anthropic (USA) to generate the suggestion and returned to your device; we do not store it. Transfers rely on standard contractual clauses. No AI request ever happens in the background — only on your explicit action.
• Microphone (Skygge speaking practice): used only on the Skygge screen: the microphone is on only while a recording you started is running, and is switched off the moment the take ends — the system's microphone indicator goes out between takes. The audio is processed on your device to animate the stage and to let you replay yourself; it is never uploaded, never stored, and is discarded when you leave the screen. Legal basis: consent (your explicit tap). You can refuse the permission and use everything else.
• Technical delivery: our host (Cloudflare) processes IP addresses transiently to deliver and protect the site, as any host does. We run no analytics, no advertising trackers, no fingerprinting. The only cookies are the strictly necessary session cookies that keep you logged in.

What we NEVER collect

Your words, sentences, photos, camera roll, study progress, or any content of your learning. Never. This is an architectural promise, not just a policy: the app is built local-first.

Your rights (GDPR)

Access, rectification, erasure ("delete my account"), restriction, portability (the app's export already gives you everything), and objection. Write to [email protected]; we respond within 30 days. You may complain to Datatilsynet (Norway) or your local supervisory authority.

US users (CCPA/CPRA)

We do not sell or share personal information. You may request access or deletion via the same contact.

Children

Creating an account requires you to confirm that you are at least 16 years old, and Pado is not directed to anyone younger. We do not knowingly collect data from under-16s; if you believe a child has created an account, write to [email protected] and we will delete it.

Changes

We will announce material changes in the app before they take effect.