Data & privacy
How we handle, protect, and minimize personal data
Last updated: April 13, 2026
No personal data required for quality
Our AI roleplay training delivers excellent results without requiring personal information. Users can train effectively with minimal data collection.
We never train on your data
Customer data is never used to train, fine-tune, or improve AI models. Your conversations and training sessions remain yours.
Customer-controlled retention
You decide how long we keep your data. Standard retention includes complete anonymization after 30 or 90 days, configurable to your needs.
Data stays in Europe
All data is stored and processed within the European Union, on Scaleway's ISO 27001-certified infrastructure in France.
Data minimization
We collect only the minimum data necessary to deliver our service. We don't collect data we don't need.
Right to erasure
You can request complete deletion of your data at any time. We honor all GDPR data subject rights promptly.
Privacy-first by design
At Apprendly, we have built our platform with privacy as a core design principle, not a compliance checkbox. We believe that the best approach to data protection is to minimize data collection in the first place.
Minimal data collection
Our AI roleplay training platform is designed to deliver high-quality training experiences without requiring personal data. The platform focuses on the learning interaction, not on collecting user profiles. This means:
- Roleplay sessions can be conducted without personal identifiers
- Training quality is independent of personal data collection
- Organizations can use the platform while maintaining strict data governance
No AI training on customer data
We want to be absolutely clear: we never use customer data to train, fine-tune, or improve AI models. Your roleplay sessions, conversations, and training data are used solely to deliver your training experience and are never fed into model training pipelines.
All our AI models are hosted in Europe. No customer data is incorporated into any model training processes.
Data retention and anonymization
Customers have full control over data retention. Our standard practice is to completely anonymize session data after a configurable period of 30 or 90 days. This means:
- After the retention period, all personally identifiable information is permanently removed
- Anonymized data may be retained for aggregate analytics only
- Customers can request immediate data deletion at any time
- Data retention settings can be configured per organization
Data processing
As a data processor under GDPR, we process personal data only on behalf of and according to the instructions of our customers (the data controllers). We maintain Data Processing Agreements (DPAs) with all customers and sub-processors.
For detailed information about our data processing practices, please see our Privacy Policy.