Privacy Policy

You can use lookups without an account. If you create one, we process your email address and authentication data through our backend provider Supabase, hosted in the EU, acting as our processor under Art. 28 GDPR. Legal basis: Art. 6 (1) (b) GDPR, performance of the contract.

Your session and authentication tokens are stored in your browser's local storage. These are strictly necessary for the service you requested, so no consent is required under § 25 Abs. 2 TDDDG.

Every dictionary and translation lookup you make is saved to your library. While signed out, entries stay on your device. When you sign in, they are synced to your account and stored in our database, so you can reach them from other devices. Legal basis: Art. 6 (1) (b) GDPR.

Retention: entries are kept until you delete them individually, clear your library, or delete your account.

To produce a translation, the text you type, or the text transcribed from your speech in Live mode, is sent to the Lovable AI Gateway, which routes the request to Google Gemini models. Speech recognition in Live mode runs in your browser. The transmitted content is used to generate the translation only. It is never used for advertising or for profiling you. Legal basis: Art. 6 (1) (b) GDPR.

Voice cloning is optional. Live mode always works with the neutral system voice. If you choose to add a voice profile, the microphone recording made on your device is stored in our protected storage bucket (voice-consent) and transferred to ElevenLabs Inc., United States, which creates a voice clone and generates synthetic speech from it.

Voice data can identify a person, so we treat it to the standard of Art. 9 GDPR and process it only on your explicit consent, which you give in the app before recording, Art. 6 (1) (a) and Art. 9 (2) (a) GDPR. You can withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.

Third-country transfer: the transfer to the United States is safeguarded by the EU Standard Contractual Clauses and, where the recipient is certified, by the EU-US Data Privacy Framework, Art. 44 to 49 GDPR.

Retention: when you delete a voice profile or your account, the recording and the voice clone at the provider are deleted.

Labeling: audio generated from a voice profile is synthetic AI-generated speech and is labeled as such in the app, in line with Art. 50 of the EU AI Act.

If the app fails, technical error information (such as the error message, the route, and browser type) is sent to our development platform Lovable so we can fix the problem. We do not build user profiles from it. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a working, secure service.

We use no analytics tools, no advertising, and no tracking cookies. Fonts are served from our own infrastructure, so no font request goes to a third party.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw it at any time. To exercise any right, write to info@die-quadratur.de.

You may lodge a complaint with a supervisory authority, Art. 77 GDPR. The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Hamburg, Germany.