Privacy policy

Last updated: 4 October 2026

This policy explains what data Aprelo processes, why it is needed and which external services are involved.

Christian Engel
Traminer Straße 38
63322 Rödermark
Email: hello@robostreamer.com

When you visit Aprelo, technical information such as your IP address, user agent, requested path, HTTP method and response status is processed to deliver the website. Server logs use shortened IP addresses rather than storing the full address.

These anonymised logs are used to diagnose errors, understand website usage and detect attacks. They are automatically deleted after no more than 14 days. Processing necessary to operate and secure the website is based on our legitimate interests under Article 6(1)(f) GDPR.

If you register, Aprelo stores your email address, username and account information. Passwords are stored as cryptographic hashes, not in plain text. Depending on the sign-in method and security settings you choose, additional login and two-factor authentication information is processed.

This data is used to provide and secure your account under Article 6(1)(b) GDPR. Your account email address is not published. Your username and profile information intended for public display may be visible to other users.

Aprelo stores the texts, dialogues and vocabulary collections you create, your saved vocabulary, training sessions and learning progress. This includes information about vocabulary reviews used to schedule spaced repetition.

This processing provides the learning functions you use under Article 6(1)(b) GDPR. When you publish material, other users can see it together with your public author information. Only share material and personal information that you want to make public.

Aprelo uses a technically necessary session cookie, normally named aprelo_session, to recognise your signed-in session. It is not used for advertising or tracking. It is HttpOnly and is sent over HTTPS in production. Its default lifetime is seven days; signing out removes it.

This cookie is required to provide the signed-in service you request. Its use is based on section 25(2)(2) TDDDG; the associated personal-data processing is based on Article 6(1)(b) GDPR.

Aprelo also uses local browser storage for functions such as selected words, sentence lookup results, ongoing vocabulary training and playback speed. This data stays in your browser unless a feature explicitly sends it to the server. You can remove local data through your browser settings.

Aprelo is hosted by Hetzner Online GmbH in Germany. Technical connection data is processed by the hosting infrastructure to operate the service. Hosting is based on our legitimate interest in providing a reliable and secure website under Article 6(1)(f) GDPR. The external AI and email services described below may process data outside Germany.

Aprelo sends account-related emails, for example to confirm registration, reset a password or complete email-based two-factor authentication. SendGrid, a service of Twilio, may be used for delivery. In that case, the recipient address and email contents required for delivery are transferred to SendGrid.

Account-related delivery is part of providing and securing the service under Article 6(1)(b) GDPR. Processing by this provider may take place outside the EU, including in the United States. Information about the provider’s handling of personal data is available in Twilio’s privacy policy.

Aprelo uses Plausible Analytics for anonymous usage statistics. It helps us understand which pages are used and improve Aprelo. Plausible does not use tracking cookies or create persistent personal advertising profiles. Technical request information is used to produce aggregate statistics.

The purpose is to improve the service based on aggregate usage, not to track individual learners. Processing necessary for this purpose is based on our legitimate interests under Article 6(1)(f) GDPR. Further details are provided in Plausible’s data policy.

Aprelo does not send account data such as your email address, username or internal user identifier to OpenRouter or OpenAI. When you chat with Aprelo, your chat messages, the conversation history included with the request and the relevant learning context are sent to OpenRouter and forwarded to OpenAI to generate a response. The context can include a selected word, sentence, exercise, your answer or information needed to explain a grammatical construction.

The same services are used for other AI functions, such as word and sentence explanations, translations, feedback on exercises and speech generation. The text and context needed for each function are sent to the providers. Publicly available material may use previously generated and cached results without making a new AI request.

This processing is used to provide the AI learning functions you request under Article 6(1)(b) GDPR. The transmitted content may contain personal data if you enter it yourself. Please do not include personal or confidential information in chat messages or learning material, particularly information about other people.

OpenRouter and OpenAI are external providers. Processing may take place outside the EU or EEA, including in the United States, where data protection rules and access by public authorities may differ from those in the EU. International transfers must meet the requirements of Articles 44 et seq. GDPR. Information about provider-side processing and retention is available in their privacy policies.

Account data and learning data are stored for as long as needed to provide your account and learning functions. You can contact us to request deletion. Data that must be retained to meet legal obligations or establish, exercise or defend legal claims may be kept for the necessary period. Server logs are subject to the 14-day limit described above; local browser data can be removed through your browser settings.

Under the GDPR, you may have the right to access your personal data, correct inaccurate data, request erasure or restriction of processing and receive data in a portable format. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time with effect for the future.

To exercise your rights, contact Christian Engel using the email address above. You also have the right to complain to a data protection supervisory authority, for example the authority responsible for Hesse.