Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Certo ("we", "us", "our"), operated by Victor Taiwo, collects, uses, and protects your information when you use getcerto.io.
1. Who we are
Certo is a language tool available at getcerto.io. For the purposes of UK data protection law, we are the data controller.
Contact: contact@getcerto.io
2. What information we collect
If you create an account
- Your email address, used to create and manage your account.
- If you sign up with an email and password, your password is stored only in a secure, scrambled (hashed) form. We can never see it.
- If you sign in with Google, Google shares your email address, name and Google account ID with us. We do not receive your Google password or access to anything else in your Google account.
- If you subscribe to Certo Pro, we store your subscription status, subscription dates and a Stripe customer reference.
- To enforce daily limits on some features (for example, the 100-message daily Tutor limit), we record how many times you have used that feature each day, linked to your account. We do not store the content of what you sent.
When you use Translate, Dictionary, Conjugate and Tutor
- Text you submit in Translate, words you look up in the Dictionary, and your Tutor conversations (including the text you're viewing in Certo when you ask a question) are sent to Anthropic's Claude API to generate the response.
- Images you upload for translation are sent through Lovable's AI gateway to Google's Gemini API to extract the text, and are not stored by us.
- For Portuguese verbs we have not already saved, the verb (and nothing else) is sent through Lovable's AI gateway to Google's Gemini API to generate its conjugation table. Spanish and French conjugations are generated on our own servers and are not sent to any third party.
- Translations, Dictionary entries and conjugation tables may be saved in our database so repeat requests load faster. These saved results are not linked to your account or identity.
- If you report a translation, we store the original text, the translation and any note you add so we can improve accuracy. Reports are not linked to your identity.
- Tutor conversations are not stored anywhere by us. They exist only in your browser while the page is open and disappear when you close or reload it.
Data stored on your device
- Your History and Favourites are saved in your browser's local storage, on your device only. They are not sent to or stored on our servers. You can remove them from the History and Favourites pages, or by clearing your browser's site data.
- If you use Certo without an account, your daily usage count is also kept in your browser's local storage and never leaves your device.
Payment information
- If you subscribe to Certo Pro, payments are processed by Stripe. We share your email address and Certo account ID with Stripe so it can manage your subscription. You enter your card details directly with Stripe, and we never see or store them.
Technical data
- Like any website, our hosting provider (Cloudflare) receives basic technical information with every visit, such as your IP address, browser type and the pages you request, so it can deliver the site securely.
- Our fonts are loaded from Google Fonts, which means Google receives your IP address and browser type when the page loads.
- We do not use any of this for tracking or advertising.
3. How we use your information
| Purpose | Legal basis |
|---|---|
| Providing Translate, Dictionary, Conjugate and Tutor | Performance of a contract |
| Managing your account and sending account-related emails | Performance of a contract |
| Processing subscription payments | Performance of a contract |
| Enforcing daily usage limits | Performance of a contract |
| Saving results so repeat requests load faster | Legitimate interests |
| Delivering the site and keeping it secure | Legitimate interests |
We do not use your data for advertising, and we do not sell your data to anyone.
4. Third-party processors
We share data with the following providers so we can run the service:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Anthropic | Powers Translate, Dictionary and Tutor via Claude | anthropic.com/privacy |
| Lovable (Lovable Cloud, built on Supabase) | Hosts our database and sign-in, sends account emails (such as sign-up confirmations and password resets), and runs the AI gateway we use to reach Google Gemini | lovable.dev/privacy |
| Google (Gemini) | Extracts text from uploaded images and generates Portuguese conjugation tables, accessed through Lovable's AI gateway | policies.google.com/privacy |
| Google (Sign-in) | Lets you sign in with your Google account, if you choose to | policies.google.com/privacy |
| Google Fonts | Delivers the fonts used on the site | policies.google.com/privacy |
| Cloudflare | Runs the language tool's servers and delivers the site | cloudflare.com/privacypolicy |
| Stripe | Payment processing | stripe.com/gb/privacy |
Text you submit is sent to Anthropic and/or Google to be processed, so please don't enter sensitive personal information into Translate, Dictionary or Tutor.
5. International transfers
Some of our providers are based outside the UK (for example, in the United States). Where your data is transferred internationally, we rely on appropriate safeguards under UK data protection law, such as the UK-US Data Bridge (where the provider is certified) or the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep data
- Account data: Kept while your account is active and deleted when you delete your account.
- History and Favourites: Kept only on your device. When you delete your account, we also clear them from the browser you're using at the time. On any other device, you can clear them yourself.
- Daily usage counts: Kept only as long as needed to enforce daily limits, and deleted with your account.
- Saved results (translations, Dictionary entries, conjugation tables): Not linked to any account. Dictionary entries and conjugation tables contain no personal information. Saved translations are kept so repeat requests load faster.
- Tutor conversations: Never stored by us.
- Payment records: Kept for as long as UK tax law requires.
- Technical data: Kept only briefly by our hosting provider, for security and troubleshooting.
7. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Restrict or object to our processing
- Data portability, meaning you can receive your data in a machine-readable format
- Withdraw consent at any time, where processing is based on consent (none of our processing currently relies on consent; this will apply if we introduce optional features such as marketing emails)
You can delete your account at any time from your Account page. For any other request, or if you'd prefer us to do it for you, email contact@getcerto.io and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies and local storage
Certo only uses cookies and browser local storage that are needed for the site to work:
- Cookies that keep you signed in.
- Local storage for your History, Favourites and free-tier daily usage count, all of which stay on your device.
We do not use tracking, analytics or advertising cookies.
9. Children's privacy
Certo is not directed at children under the age of 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will email registered users. The "last updated" date at the top of this page always shows the current version.