Security
How we protect your account and your practice data.
Where and how data is stored
- Your account and practice history live in the European Union (Frankfurt), encrypted at rest.
- All traffic uses HTTPS (TLS); connections without it are refused.
- Database access is protected by row-level security: your records are readable by your account only.
Your account
- Passwords are stored only as strong one-way hashes — we cannot read them.
- We never ask for your password by email.
- You can delete your account, and with it your data, at any time.
Payments
When paid plans launch, payments will be handled by Paddle as merchant of record. Your card details go to Paddle directly — Übungszeit never sees or stores them.
Found a vulnerability?
Please tell us privately at hallo@ubungszeit.com before any public disclosure. We read every report and fix confirmed issues quickly.