← Back to home

Privacy Notice

Last updated: May 20, 2026

1. Who we are

English Mgr is operated by Next Gen AI Mgr LLC ("we", "us", "our"). For the personal data described in this notice, Next Gen AI Mgr LLC acts as the data controller. This notice explains what we collect, why, who we share it with, and the choices you have.

2. Personal data we collect

We collect the following categories of personal data:

  • Account information: name, email address, password (stored as a salted hash), and basic profile preferences (e.g., display language).
  • Learning data: lessons completed, quiz answers, progress milestones, writing submissions, speaking recordings, and AI conversation transcripts.
  • Usage & device data: IP address, device and browser type, pages visited, time stamps, and basic telemetry used to operate, secure, and improve the Service.
  • Support communications: messages you send us and our responses.
  • Payment data: handled by our payment provider Paddle — see Section 4. We do not store full card numbers ourselves.

3. How we use your data

We use personal data to:

  • Create and manage your account (legal basis: contract);
  • Provide the course, AI feedback, and progress tracking (contract);
  • Process payments and prevent fraud (contract & legitimate interests);
  • Secure the Service and investigate abuse (legitimate interests);
  • Improve the product and develop new features (legitimate interests);
  • Provide customer support (contract);
  • Send essential service emails such as receipts and security alerts (contract);
  • Comply with legal obligations (legal obligation).

4. Who we share data with

We share data only with service providers that help us run English Mgr, and only as needed:

  • Hosting & database (Supabase): account data, progress data, and content storage.
  • AI providers (OpenAI, Google): we send speech, writing, and conversation prompts to generate feedback, corrections, and replies. Inputs and outputs may be processed on these providers' infrastructure.
  • Payments (Paddle): Paddle acts as the Merchant of Record for all of our orders. Paddle processes payments, handles billing, applies taxes, issues invoices, and manages refunds and chargebacks. Paddle receives the personal data necessary for these purposes (name, email, billing address, payment instrument details).
  • Professional advisers: legal, accounting, and similar advisers when needed.
  • Authorities: when required by law, court order, or to protect our rights and the safety of others.

We do not sell your personal data.

5. Data retention

We keep your personal data while your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations and to defend potential claims. When data is no longer needed, we delete or anonymize it. You can request deletion of your account at any time (see Section 7).

6. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, encrypted storage of credentials, role-based access controls, and row-level security on our database. No system can be 100% secure, but we work continuously to safeguard your data.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data;
  • Restrict or object to certain processing;
  • Receive a portable copy of your data;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with your local data protection authority.

To exercise these rights, contact us through the support channels on our website. We'll respond within the time period required by applicable law (typically within one month).

8. International data transfers

Our service providers (including Supabase, OpenAI, Google, and Paddle) may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect international transfers.

9. Cookies

We use a small number of essential cookies and similar technologies to keep you signed in, remember preferences, and keep the Service secure. We do not use third-party advertising cookies. You can clear cookies in your browser settings, but the Service may not function correctly without essential cookies.

10. Children

English Mgr is intended for adults (18+) in a professional training context. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Questions about this Privacy Notice or your data? Contact Next Gen AI Mgr LLC through the support channels on our website. For questions specific to payment data, you can also contact Paddle at paddle.net.