Pado — Privacy Policy
Version 2.0 — 5 September 2026 (public edition). Data controller: the operator of Pado, based in Norway. Contact for privacy questions and data-subject requests: [email protected]. Drafted for GDPR (EU/EEA incl. Norway); CCPA notes for US users below.
Este texto se publica en inglés. La versión en inglés es la vinculante.
The short version
Your public-edition learning collection stays on your device. Words, photos, notes, recordings, review history — all of it is stored locally in your browser or app storage. We cannot see it. You can erase all of it at any time from your device, and delete your account from the settings.
What we process, and why
- Account data: username, e-mail address, a salted hash of your password (never the password itself), account creation date, consent record. Legal basis: contract. Kept until you delete your account.
- Messages you send us: feedback, survey answers, and a review you choose to publish (shown with your username only after your explicit consent). Legal basis: consent. You may skip all of them.
- Camera and photos: text recognition runs on your device; the photo is neither uploaded nor stored. The recognition engine and its Norwegian language file are downloaded from static-file providers when needed; the first use requires an internet connection — that download carries no photo and nothing about you beyond the request itself. Legal basis: consent (your explicit tap).
- Microphone (Skygge speaking practice): on only while a recording you started is running, off the moment the take ends. The audio is processed on your device to let you replay yourself; it is never uploaded, never stored, and is discarded when you leave the screen. Legal basis: consent. You can refuse the permission and use everything else.
- Technical delivery: our hosting provider processes IP addresses transiently to deliver and protect the site, as any host does. We run no analytics, no advertising trackers, no fingerprinting. The only cookies are the strictly necessary session cookies that keep you logged in.
What we never collect
Your words, sentences, photos, camera roll, recordings, study progress, or any content of your learning. This describes the public learning collection. Account requests, voluntary feedback and survey submissions do reach our server. Hosting, account-email delivery, abuse prevention and optional text-recognition downloads also require network requests. Browser voices may depend on your device and installed voices.
Storage and service providers
We use hosting, security and account-email providers to operate the service. Voluntary feedback and survey responses remain linked to your account until account deletion or an earlier erasure request. Public reviews require separate permission and can be withdrawn. Security rate-limit records expire automatically. The app export covers your local learning collection; request server-held account data and submitted responses at the address below.
Your rights (GDPR)
Access, rectification, erasure ("delete my account"), restriction, portability (the app's export already gives you everything), and objection. Write to [email protected]; we respond within 30 days. You may complain to Datatilsynet (Norway) or your local supervisory authority.
US users (CCPA/CPRA)
We do not sell or share personal information. You may request access or deletion via the same contact.
Children
Creating an account requires you to confirm that you are at least 16 years old, and Pado is not directed to anyone younger. We do not knowingly collect data from under-16s; if you believe a child has created an account, write to [email protected] and we will delete it.
Changes
We will announce material changes in the app before they take effect.