Privacy Policy
Last updated: 2026-09-20
Examilo is operated privately. For privacy enquiries write to support@examilo.com. Full provider details are in the Impressum.
Account data: the name and email address recorded when the account was created. There is no self-registration; accounts are created by an administrator.
Learning data: training sessions you start, the answers you give, your results and your vocabulary progress.
Technical data: a session cookie, and server logs containing a timestamp and IP address, which are needed to run the service and to resist abuse.
Processing is necessary to provide the service you use (Art. 6(1)(b) GDPR) and rests on our legitimate interest in operating it securely (Art. 6(1)(f) GDPR).
Sign-in runs through a self-hosted Keycloak instance on the same server. Your password is held there and is never passed to Examilo; Examilo receives only your identifier, name and email address.
Hetzner Online GmbH (Germany) provides the server on which the application and the database run.
Cloudflare, Inc. provides DNS and the tunnel through which the site is reachable, and processes connection data in doing so. Database backups are additionally stored in Cloudflare R2.
There is no payment processing and no email is sent. Earlier versions of this page named Supabase and Resend; neither is used.
Where an AI provider is configured, what you type is sent to that provider in order to produce a reply. Please do not enter sensitive personal data in a conversation with Ilo.
No AI provider is configured in this installation at present. While that remains true, nothing you type leaves the server for this purpose.
Account and learning data are kept while the account exists. Backups are kept as fourteen copies per database and are deleted after 30 days at the latest. After an account is deleted its data may therefore still appear in backups for up to 30 days.
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to complain to a supervisory authority. Write to support@examilo.com.
Access is over HTTPS only. The server accepts no inbound connections from the internet; traffic arrives through an outbound tunnel. Inside the server, traffic between components is denied by default and permitted only where it is needed.
If the stack changes, this page is updated to match. The date above states when.