EN
Consent and account management take place in the app under Your Data .

AI & Privacy

Brief overview of AI features, speech processing, and consent in Fornava.

4. Purposes of Processing

We process personal data in particular for the following purposes:

  • Providing your account, login, and session management
  • Storing your learning progress, language pairs, cards, and reviews
  • Providing game content, village scenes, tools, and progress overviews
  • Onboarding, placement, and adaptation of your learning path
  • Chat, dialogue, and AI-supported learning features, if you have consented
  • Speech input and output via our own infrastructure, if you use AI features
  • Chronicle, duels, forge, and other AI-supported tools
  • Processing feedback and support requests
  • Processing data protection requests (Art. 15 to 22 GDPR)
  • IT security, abuse prevention, and stable operation
  • Optional usage analytics to improve Fornava, only if you have consented. We do not currently collect usage data.

9. Recipients and Processors

Recipients may include:

  • Fornava operations and technically authorised administrators on our infrastructure.
  • Hetzner Online GmbH (cloud hosting in Germany): processor for app, database, and backups on our VPS.
  • Kanidm (KANIDM/OIDC) on our own infrastructure at Hetzner (Germany, EU): login, identity credentials, and password management. Fornava does not store passwords in the database; login data remains with the Kanidm identity service.
  • MS Azure Europe: provision of AI features such as conversations with villagers, personalised exercises, translations, text generation, and speech processing (speech-to-text and text-to-speech), if you have consented to the use of AI features.
  • Mistral AI SAS (France): provision of AI features and text generation, if these services are used and you have consented to the use of AI features.
  • Speech services on our own infrastructure (where used): short-term processing of audio. Raw audio is not permanently stored in the database.

With processors, we conclude data processing agreements under Art. 28 GDPR where legally required.

AI features in the learning area

AI features are used in the learning area. These enable translations, conversations with villagers, personalized exercises, individual learning content, as well as speech recording and speech output.

Depending on the feature used, your inputs (e.g. text or voice recordings) may be transmitted to our AI service providers and processed there. Processing is required to provide the AI features.

Consent

AI-powered features require separate consent in the app (Art. 6 para. 1 lit. a GDPR). You can revoke it at any time under "Your Data". Without this consent, core features remain available, but not AI-powered conversations, forge, chronicle, duels, or speech features.

Recipients

Mistral AI SAS (France, EU/EEA) for AI text. MS Azure Europe for certain speech and AI features, if you have consented. Speech input and output via our own infrastructure. Raw audio is not permanently stored in the database.

16. Notice, Contract, and Consents

This privacy notice informs you about our processing (Art. 13/14 GDPR). Before use, you confirm that you have read it. This is not a blanket consent to all processing.

We rely on Art. 6(1)(b) GDPR (contract or pre-contractual measures) for providing your account and core features.

AI-supported features (conversations with villagers, translations, chronicle, forge, duels, speech input and output) require separate consent. Processing takes place via Mistral AI (EU/EEA) and our own speech infrastructure.

You can enable optional usage analytics separately. We currently store only your consent. Collection of analytics data is not yet implemented.

You can change consents at any time under "Your Data". Withdrawal does not affect the lawfulness of processing until withdrawal.

14. Obligation to Provide Data

Login and account data as well as data required for learning operations are necessary to use Fornava (Art. 6(1)(b) GDPR). Without this data, we cannot provide you with an account or core features.

AI features, speech processing, and optional usage analytics are voluntary. They require separate consent. Core operation without AI remains available if you do not grant these consents.

There is no legal obligation to provide data for the voluntary features.