Privacy policy

Who we are

Insperium is operated by Dynamic Source Holdings Limited, a company registered in Hong Kong, with its address at Flat/Rm 185 G/F, Hang Wai Industrial Centre, No. 6 Tai Street, Tuen Mun, New Territories, Hong Kong. We are responsible for (the "controller" of) the personal data described here.

For any question about your data, or to use any of the rights below, email info@getinsperium.com.

What we collect

Account data: your email address and your password. Passwords are handled by our authentication provider and stored only in hashed form; we cannot read them.

Learning data: the characters, words, stories and dialogs you study, your answers, your review schedule, your progress and your settings, such as your course language and daily target. This is what makes the course work for you.

Payment data: payments are processed by Stripe. We receive a customer reference, the plan you are on, the status of your subscription and whether a payment succeeded. We never see or store your full card number.

Usage data: which pages you visit and what you click, your device and browser type, and an approximate location derived from your IP address. Once you are logged in, this is linked to your account so we can see how the course is used and fix what does not work.

Messages: if you email us, we keep the conversation so we can help you.

Why we use it

To provide the service you signed up for: your account, the course, your progress and your membership (performance of a contract).

To bill your membership and keep the records the law requires (contract and legal obligation).

To send you service emails, such as the reminder before your first $29 charge, receipts and important changes to the service (contract).

To understand how the site and the course are used, keep them secure and improve them (our legitimate interest in running and improving the service). Where the law requires your consent for this, we ask for it.

We do not sell your personal data, and we do not use it for advertising by third parties.

Who we share it with

We use a small number of service providers who process data on our behalf and only as we instruct: Supabase (database and authentication), Vercel (hosting of the website and app), Stripe (payments), PostHog (usage analytics) and Resend (sending email).

These providers may process data outside your country, including in the United States. Where data leaves the European Economic Area, the United Kingdom or Hong Kong, it is protected by the safeguards these providers offer, such as the European Commission’s standard contractual clauses.

We may also disclose data where the law requires it, or to protect our rights and the safety of our users.

Cookies and similar technologies

We use cookies and browser storage that the site needs to work: to keep you logged in and to remember your language. We also use analytics cookies (PostHog) to measure how the site is used. You can block or delete cookies in your browser settings; the site still works without analytics cookies, but you will be logged out if you delete the login cookie.

How long we keep it

We keep your account and learning data for as long as your account exists, so you can pick up where you left off even after a break in your membership. When you ask us to delete your account, we delete or anonymise your personal data within 30 days.

Payment and invoice records are kept for as long as tax and accounting law requires, which is usually up to seven years. Usage analytics are kept for a limited period and then deleted or aggregated.

Your rights

You can ask us for a copy of your personal data, ask us to correct it, to delete it, or to hand it over in a portable format. You can object to our use of it based on legitimate interest, and where we rely on your consent, you can withdraw it at any time.

To use any of these rights, email info@getinsperium.com from the address on your account. We answer within one month.

If you think we handle your data wrongly, you can complain to a data protection authority, such as the authority in the EU country where you live or the Office of the Privacy Commissioner for Personal Data in Hong Kong. We would appreciate the chance to put it right first.

Security

All traffic to the site is encrypted (HTTPS). Access to your data in our database is restricted per account, passwords are never stored in readable form, and only the people who run Insperium have administrative access.

Children

Insperium is not intended for children under 16. If you are younger, please use it only with the permission of a parent or guardian.

Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell you by email before it takes effect.