Your data, clearly explained.

Last updated: July 17, 2026. This notice explains how Nativo processes personal data. Contract terms are available in our Terms and Conditions.

Controller and contact

The controller and service provider is Puteáni-Holl Ákos e.v., registered in Hungary at 9400 Sopron, Hőflányi utca 39. Registration number: 58329698. Tax number: 45746794-1-28. Phone: +36706381088. For privacy, billing, export, deletion, or support requests, contact hello@usenativo.com.

What we collect

We collect your account data (such as email and user identifiers), your audio recordings, transcripts, generated language-learning content, plan and usage metadata, and limited technical metadata needed for security, reliability, and abuse prevention. Please do not record other people without permission or upload audio that includes highly sensitive information you do not want processed.

If you join the beta waitlist, we collect the details you submit, such as email, name, native language, target language, current level, learning goal, feedback-call preference, and consent choices.

Generated learning content includes transcripts, translations, chunked phrases, and vocabulary items produced from your recordings.

Where your data is stored

Audio recordings are stored in a Cloudflare R2 bucket. User accounts and generated learning data (transcripts, translations, chunks, and words) are stored in Supabase.

Audio and transcript text may be sent to OpenAI to create transcripts and lessons. We use these providers to operate Nativo; we do not sell your recordings or transcripts.

Payments are processed by Stripe. Invoices and billing documents are issued through Szamlazz.hu, and transactional emails may be sent through Resend. Nativo does not store full card numbers.

Why we process your data

We process account, recording, transcript, lesson, usage, and billing data where it is necessary to perform our contract with you. Security, fraud prevention, service reliability, and limited operational logging rely on our legitimate interests. Invoice and accounting records are processed to comply with legal obligations.

Because voice recordings and transcripts can reveal personal details, you remain in control of what you record and can remove sessions from your history.

Google Analytics is used only with your freely given consent. You can withdraw or change that consent at any time through the Analytics settings link in the footer. Withdrawal does not affect processing that took place before withdrawal.

Beta waitlist data is processed to manage beta access and respond to your request. Product updates and learning tips are sent only if you separately consent to them. You can withdraw that consent at any time by contacting us or using the unsubscribe option when available.

Processors and transfers

We use trusted providers including Supabase, Cloudflare, OpenAI, Stripe, Szamlazz.hu, Resend, and, if you consent to analytics, Google Analytics. Some providers may process data outside the EEA. Where required, those transfers rely on an adequacy decision, the EU Standard Contractual Clauses, or another lawful transfer safeguard. Providers are used only to provide, secure, bill, measure, and improve Nativo.

Retention and deletion

Account data (Supabase)

Stored while your account is active. Account deletion removes active account and learning data promptly. A one-way deletion marker prevents accidental account recreation, without retaining your email or profile.

Beta waitlist data

Stored while beta access is being managed and for a reasonable period afterward so we can invite testers, avoid duplicate requests, and honor consent choices. You can ask us to remove your waitlist entry anytime.

Recordings (Cloudflare R2)

Stored while your account is active so you can access your learning history. Deletion starts an immediate, retried removal workflow. Encrypted infrastructure backups expire according to provider backup schedules.

Learning outputs (Supabase transcripts, translations, chunks, words)

Stored while your account is active to provide lessons and progress history. Deleted with your account, subject to the same operational backup window.

Legal and compliance records

Where required by law (for example tax, accounting, fraud prevention, or legal claims), some records may be retained for the legally required period even after account deletion.

Analytics data (Google Analytics)

Used only after explicit analytics consent to understand page traffic, improve onboarding, and measure marketing performance. Analytics identifiers are not used to train language lessons.

We aim to keep data only as long as needed for product, security, and legal obligations. If you request deletion, we start removal workflows promptly.

Your rights

You can request access, correction, export, restriction, objection, or deletion of your personal data. You can export or delete your account directly from Profile. You may also write to hello@usenativo.com. We may need to verify your account before completing a request. You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or your local supervisory authority.