Back to home Impressum
Terms

Terms & Privacy

Using the FY website and enrolling in the course means accepting the terms below. This is a convenience translation; the German version is the binding one. Last updated: 16 October 2026.

This English text is provided for convenience. In case of any difference, the German version prevails.

1. What this website collects

  • The pages of this website are static and there are no user accounts. Nothing is sent to us while you browse the pages; the exceptions are listed one by one in section 3.
  • Contact, package, course and consultation forms: when you submit, what you wrote is stored on FY’s own relay server at Cloudflare and used only to get back to you; it is kept for at most six months and deleted on request. If the relay server cannot be reached, the form works the old way and opens your own e-mail app. The application form always opens your e-mail app; you attach your CV yourself. For the free consultation call, the day and time you pick are part of this entry too; you get a calendar file (.ics) for your own calendar.
  • Course enrolment happens through the form on the website or by e-mail. We use your name and e-mail address to issue the licence.
  • The student portal page is not yet connected to a working portal and does not ask for a password. The e-mail address you enter in its «notify me» form is stored as a notification list on the same relay server; it stays for at most six months, is deleted automatically if the portal has not opened by then, and on request at any time.

2. Cookies and browser storage

  • The website sets no cookies. There is no advertising and no third-party tracker.
  • The FYOS chat keeps its daily question counter in two places: in your browser's storage (only the current day's counter is kept, older ones are removed; it disappears when you clear your browser data) and, to prevent abuse, on the relay server, tied to your IP address, in Cloudflare KV. The server-side entry is deleted automatically at the end of the day (UTC). The Language Academy’s conversation robot has no daily message limit: messages you send it are not taken from FYOS’s daily question quota and are not counted in either place, and FY stores no IP address in Cloudflare KV for them; instead, to prevent abuse, Cloudflare’s rate limiter counts requests per IP address within a one-minute window (details in section 7 under “FYOS chat and spoken answers”). If this limiter is unavailable, the robot shares FYOS’s daily question quota; every message you send it is then counted in both places like a question to FYOS. The number of questions asked today, shown on the “Analytics” card on the FYOS stage, is the total of these server counters; messages to the robot are included only in that fallback case. No further data is kept for it, and it does not show who asked.
  • The question you ask FYOS in the website chat is sent to FY's own relay server at Cloudflare in order to generate the answer; up to ten previous messages from the same conversation are sent with it as context, along with the mode you picked (e.g. “Boardroom”) and the page language — neither of which is personal data. The relay server may add matching lessons from the course text it carries within itself; no request goes to any other address for this. It passes the text to the AI provider (Anthropic, PBC or Cloudflare Workers AI) and returns the answer to you piece by piece as it is written. Your questions are not tied to an account, are not stored by us and are not used for advertising; unless you switch on Memory, the conversation history exists only in the open page and is gone when you reload or close it. If the relay server cannot be reached, FYOS falls back to the offline demo with prepared answers and no request leaves your browser. Messages to the Language Academy’s conversation robot take the same route; details in the “Language Academy conversation robot” paragraph below. For the Telegram bot, the “FYOS on Telegram” paragraph below applies.
  • FYOS Memory is optional and off by default. If you switch on “Remember on this device” in FYOS, your conversation is kept only in your browser storage: at most the last 20 messages (just the text, who wrote it, the mode and when it was written — for the 7-day rule), plus the fact that Memory is on. That way you can pick up where you left off when you open the page again; when you ask a new question, at most ten of these messages go along as context as described above, but they are not stored on the server. The entry is used for at most 7 days; if it is older, the page deletes it unread the next time it opens. The “Forget” button or clearing your browser data removes the entry and the setting at once. While Memory is off, no conversation content is stored.
  • Live voice mode is off by default; the first time, it turns on only if you press the microphone button and agree. While on, the microphone waits for the word «Melis». If your browser can recognise speech inside your device, your voice never leaves it; if it cannot, everything you say (even while the microphone is waiting for «Melis») goes to your browser maker’s speech service purely to be turned into text — the consent box states which of the two applies. No recording reaches us and we store none; your question, once turned into text, goes to FY’s relay server just like a typed question. The fact that voice mode is on is kept only in your browser storage: if you leave the page with voice mode on, it starts again by itself on your next visit, provided the microphone permission is still granted; switching the microphone off removes this entry; your consent is kept there too, so that you are not asked again next time, and disappears when you clear your browser data.
  • The Language Academy needs no account. The lessons make no network requests: your progress (finished lessons and their stars, your points, how many days in a row you have studied and your last study day, the language and level you chose, and your «Read replies aloud» setting for the robot) is stored only in your browser’s storage and never reaches us. The academy pages are copied into the browser cache (service worker) so they open without internet; this copy contains only the website’s own files, and your conversation with the robot never goes into it. Read-aloud in the lessons uses your browser’s own speech feature; some browsers (e.g. Chrome’s «Google» voices) may send the lesson text to their maker’s server — this is only the lesson text and contains nothing about you. The «Reset progress» button in the academy, or clearing your browser data, removes the record at once.
  • The Language Academy conversation robot («Talk to the robot») sends requests only when you send it a message and — if you have switched on read-aloud — to read its replies and its opening greeting aloud. When you send a message, the following go to FY’s own relay server at Cloudflare in order to generate the reply: your message (in «Live conversation», your words turned into text), up to ten previous messages from the same practice conversation, the page language, the practice language and level you chose, and how many of your immediately preceding messages in a row needed a correction (a number from 0 to 2 that the robot uses to adjust its reaction; not personal data). The relay server passes the text to the AI provider (Anthropic, PBC or Cloudflare Workers AI) the same way as for the FYOS chat. Your messages have no daily limit and are not taken from FYOS’s daily question quota — except when the per-minute limit is unavailable (see the counter item above). Your lesson progress and points are not included. Your messages are not tied to an account, are not stored by us and are not used for advertising; the practice conversation exists only in the open page and is gone when you reload or close it. If you switch on «Read replies aloud» or «Live conversation», the robot’s reply is read aloud the same way as FYOS’s answers: only the robot’s reply text — never the correction note and never your own message — goes through FY’s relay server to the speech provider (OpenAI, L.L.C. or ElevenLabs Inc., both USA). The request to FY’s relay server also carries the practice mode (e.g. «tutor:de») and — for replies — a check code the relay server issued with that reply; neither is personal data, both only show that the text to be read is the robot’s own, and neither is passed on to the speech provider. The robot’s voice does not count against the daily speech quota either; here too the per-minute limit applies instead, and if it is unavailable, the same daily speech quota as for FYOS applies (details in section 7 under “FYOS chat and spoken answers”). If that voice is not available or a limit is reached, your browser’s own speech feature reads the reply; the note above applies here too: some browser voices may send the text to be read to their maker’s server. The robot’s animated face («Melis») processes no data: it only follows the position of your mouse pointer or finger within the page; that position is neither sent anywhere nor stored, and no camera is used. The microphone button is optional and asks for your consent the first time you press it after the page is opened: your browser may send your voice to its own speech service (e.g. Google, Microsoft) to turn it into text; the recording never reaches us, and the recognised text first appears in the input box and only goes to FY when you send it yourself. The hands-free «Live conversation» uses the same microphone; consent is likewise asked once each time the page is opened. In this mode the microphone listens again after every reply until you stop it, and the recognised text is sent automatically. The robot needs an internet connection; without one nothing is sent, and the lessons keep working offline.

3. External services and hosting

  • Every file of the website, including the font, is loaded from this website. Beyond that, your browser only sends requests to FY's relay server (Cloudflare Workers): when you ask FYOS a question, when FYOS reads an answer aloud, when you send the Language Academy’s conversation robot a message or it reads a reply aloud, when you submit a form, look at free appointment times or download your booking’s calendar file (.ics); and on the home page, once a minute while it is open and visible, to fetch the number of upcoming appointments for the “Boardroom” card and the number of questions asked today for the “Analytics” card (the answer is just these two numbers). No request goes to any other external address; for the voice that may go to your browser maker’s speech service in live voice mode or through the academy robot’s microphone, see section 2.
  • The website is hosted on Cloudflare Pages. Cloudflare processes connection data such as your IP address in order to deliver the pages to you and to protect the website against attacks; this data is not passed on to us. Cloudflare’s visitor statistics (Web Analytics) are switched off for this website; Cloudflare adds no scripts or cookies to the pages. Details under “Hosting and relay server” in section 7.
  • Your connection to the website is encrypted (HTTPS).

4. What we do with your details

  • Details you send us through a form or by e-mail are used only to provide the service you asked for.
  • Your details are never sold or passed on to any third party.
  • You can ask for the deletion of the details you sent us at any time by e-mail.

5. Conditions of the «AI Journey» course

The course is currently offered free of charge: no payment is taken for enrolment. The payment and fee clauses below apply from the moment the course becomes paid again, and only to enrolments made after that date.

  • The course licence is personal; it is issued to the buyer's name and e-mail address and embedded as a watermark in the videos.
  • Sharing, reselling, publishing or distributing the course content (video, files, text) is prohibited and will be pursued legally; the infringer's licence is cancelled without refund.
  • The course is paid in one payment; instalments are not available.
  • Course support is included for 45 days after enrolment; after that, an extension costs 10% of the course price.

6. Right of withdrawal

This section applies to consumers (§ 13 BGB — people who buy the «AI Journey» course for purposes outside their trade, business or profession). The contract is concluded by e-mail and is therefore a distance contract (§ 312c BGB); the course is digital content not supplied on a tangible medium. If you buy as a business, there is no statutory right of withdrawal. Web design and automation are offered to businesses; if a consumer orders such a service, the withdrawal notice for service contracts is provided separately with the offer. The free 30-minute call does not create a contract.

Withdrawal notice

Right of withdrawal. You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period is fourteen days from the day the contract is concluded. To exercise the right of withdrawal, you must inform us (Farhad Yaqoobi — FY, Siebengebirgsring 36 a, 53340 Meckenheim, Germany; e-mail: JavaScript required to show the e-mail address) of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post or an e-mail). You may use the model withdrawal form below, but it is not obligatory. To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

Effects of withdrawal. If you withdraw from this contract, we shall reimburse to you all payments received from you, including the costs of delivery (with the exception of the supplementary costs resulting from your choice of a type of delivery other than the least expensive type of standard delivery offered by us), without undue delay and in any event not later than fourteen days from the day on which we are informed about your decision to withdraw from this contract. We will carry out such reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.

When is the contract concluded and when does the period start?

Enrolment is not made through a «buy» button on the website but by e-mail exchange. The contract is concluded on the day we send you, in reply to your enrolment e-mail, the acceptance of your enrolment with the payment steps; the fourteen-day withdrawal period runs from that day. You also receive this notice and the model form with that e-mail before the contract is concluded, so you have a durable copy.

Early expiry of the right of withdrawal (§ 356 BGB — digital content)

For digital content not supplied on a tangible medium, the right of withdrawal expires before the end of the period once all three conditions are met:

  • you have expressly consented to us beginning performance of the contract before the withdrawal period ends,
  • you have acknowledged that you thereby lose your right of withdrawal,
  • and, before sending the access details, we have provided you with a confirmation of the contract on a durable medium — e-mail is sufficient — that includes your consent and this acknowledgement (§ 312f BGB).

Without your consent, course access is opened only after the fourteen-day withdrawal period has ended; your right of withdrawal remains fully intact during that time. The expiry or lapse of the right of withdrawal does not affect the 45 days of support or lifetime access; in case of withdrawal the contract falls away entirely. Your statutory rights regarding defects in digital content (§§ 327 ff. BGB) apply in any case.

Consent text (in the enrolment e-mail)

If you want immediate access, you confirm it in the enrolment e-mail by writing the following two sentences yourself — a pre-ticked box, a default consent or a mere «ok/yes» does not count:

«I want to access the course content immediately. I expressly consent to performance of the contract for the “AI Journey” course beginning before the withdrawal period has ended.»
«I acknowledge that I lose my right of withdrawal by giving this consent.»

Model withdrawal form

(If you want to withdraw from the contract, please fill out this form and send it back.)

  • To Farhad Yaqoobi — FY, Siebengebirgsring 36 a, 53340 Meckenheim, Germany — e-mail
  • I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the provision of the following service: online course «AI Journey»
  • Ordered on (*)/received on (*): ______
  • Name of consumer(s): ______
  • Address of consumer(s): ______
  • Signature of consumer(s) (only if this form is notified on paper): ______ — Date: ______
  • (*) Delete as appropriate.

7. Controller and your rights (Art. 13 GDPR)

Controller

Farhad Yaqoobi · FY — AI Agency
Siebengebirgsring 36 a, 53340 Meckenheim, Germany
E-mail: JavaScript required to show the e-mail address

There is no obligation to appoint a data protection officer. The full provider details are in the Impressum (legal notice).

Purposes and legal bases

  • Hosting and relay server (Cloudflare). The website is hosted on Cloudflare Pages; FY’s relay server (Cloudflare Workers, Cloudflare KV, Cloudflare Workers Rate Limiting and Cloudflare Workers AI) runs at Cloudflare too. Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page or your browser sends a request to the relay server, Cloudflare processes connection data such as your IP address, the time, the requested address and browser information in order to deliver the page or the answer to you and to protect the website against attacks. Cloudflare does this on our behalf under its data processing agreement (Art. 28 GDPR); to the extent Cloudflare uses data for its own purposes (e.g. network security), its own privacy policy applies. This page-request data is not passed on to us. Legal basis: Art. 6(1)(f) GDPR — secure and stable operation of the website and the relay server. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the USA rely on the European Commission’s adequacy decision for that framework (Art. 45 GDPR). If the certification lapses, the standard contractual clauses in Cloudflare’s data processing agreement apply (Art. 46 GDPR). This item applies wherever Cloudflare is mentioned on this page.
  • Contact, package, course and consultation forms, and your e-mails. To answer your request and prepare an offer. Form entries are stored on FY’s relay server (Cloudflare KV) for at most six months; your IP address is not written into the entry, it only sits in a counter until the end of the day to prevent abuse. To notify FY of a new entry, the e-mail service Resend, Inc. (USA) may be used; when it is, only the form fields are transmitted. Legal basis: Art. 6(1)(b) GDPR — pre-contractual steps; also Art. 6(1)(f) GDPR — our legitimate interest in answering enquiries. Transfers to Resend are safeguarded by standard contractual clauses under Art. 46 GDPR. If you book a call, the day and time are added to the entry; bookings are fed into FY’s calendar from the same relay server.
  • Course enrolment, licence and invoice. Name, e-mail and payment details to issue the licence, open access, provide support and issue the invoice. Legal basis: Art. 6(1)(b) GDPR — performance of the contract; for invoice data Art. 6(1)(c) GDPR — statutory retention duty.
  • Job application (CV). To evaluate your application. Legal basis: Art. 6(1)(b) GDPR and § 26 BDSG (German Federal Data Protection Act).
  • Student portal notification list. Only your e-mail address, to notify you when the portal opens; it is stored on the same relay server for at most six months. Legal basis: Art. 6(1)(a) GDPR — your consent; you can withdraw it at any time by e-mail without affecting the lawfulness of processing before withdrawal.
  • Browser storage. The daily counter (which the Language Academy’s conversation robot only writes to while it shares FYOS’s daily question quota; see section 2), the voice-mode entries, FYOS Memory (only if you switch it on), the Language Academy’s «fy.akademi.v1» entry (lesson progress, chosen language and level, days in a row, read-aloud setting) and the offline copy of the academy pages (service worker cache) in browser storage are strictly necessary for a function you expressly requested and need no consent (§ 25(2) no. 2 TDDDG).
  • Live voice mode (speech recognition). Runs only when you explicitly switch the microphone on. If the browser can recognise speech inside the device, your voice does not leave it and no processing arises on our side. If it cannot, your recording goes to the browser maker’s speech service to be turned into text (e.g. Google LLC, USA — Chrome; Microsoft Corporation, USA — Edge); that processing and the transfer to the USA are subject to that maker’s own privacy policy and we have no access to the data. Legal basis: Art. 6(1)(a) GDPR — your explicit consent; you can withdraw it at any time by switching the microphone off, and withdrawal does not affect the lawfulness of processing carried out until then. The same applies to the microphone button of the Language Academy’s conversation robot: your consent is asked the first time you press it after the page is opened; listening stops when you stop speaking or press the button again. The robot’s “Live conversation” asks for its own consent separately (once each time the page is opened; it also tells you that what you say will be sent by itself, without pressing a button); this consent then also covers the microphone button. In “Live conversation” the microphone listens again after every reply until you stop the conversation.

FYOS chat and spoken answers

The chat is switched on, and the following applies: to count your daily question quota and to protect the service from abuse, your IP address is stored on FY's relay server (Cloudflare KV) until the end of the day (UTC) and deleted automatically afterwards; your question and at most ten previous messages from the same conversation are sent to Anthropic, PBC (USA) or Cloudflare Workers AI to generate the answer. Your message to the Language Academy’s conversation robot and at most ten previous messages from the same practice conversation are sent the same way, together with the page language, the practice language, the level and the number of immediately preceding messages in a row that needed a correction (0 to 2). The robot has no daily limit, and FY stores no IP address in Cloudflare KV for its messages: instead, to prevent abuse, Cloudflare’s rate limiter (Cloudflare Workers Rate Limiting) counts requests to the robot per IP address (for IPv6 addresses, only by their first 64 bits) within a one-minute window; FY does not store this count and cannot see it, and Cloudflare processes it only for this limit on FY’s behalf. If this limiter is unavailable, the robot shares FYOS’s daily counter; your messages are then counted in the IP-bound daily counter described above. Today’s question count on the FYOS stage is calculated from the total of these daily counters (messages to the robot only in that fallback case); only the total is shown, not who asked, and no separate record is kept for it. Legal basis: Art. 6(1)(f) GDPR — the legitimate interest in offering visitors a working assistant and, in the Language Academy, a working language-practice partner, and in protecting the service from abuse; transfers to Anthropic are safeguarded by standard contractual clauses under Art. 46 GDPR (for Cloudflare, see “Hosting and relay server” above). In voice mode the answers are read aloud. If a speech key is configured, the answer text FYOS produced and your IP address are sent to the speech provider (OpenAI, L.L.C. or ElevenLabs Inc., both USA) so that it can generate the audio; to count your daily speech quota, your IP address is also kept on the relay server (Cloudflare KV) until the end of the day (UTC). Your own recording never goes there — only FYOS’s own answer. If you have switched on “Read replies aloud” or “Live conversation” for the Language Academy’s conversation robot, its replies are read aloud the same way and under the same conditions; only the robot’s reply text is sent, not the correction note and not your messages. The request to FY’s relay server also carries the practice mode (e.g. “tutor:de”) and — for replies — a check code the relay server issued with that reply; neither is personal data, and neither is passed on to the speech provider. The only difference is the daily speech quota: the robot’s voice does not count against it, and FY stores no IP address in Cloudflare KV for it; the per-minute limit described above applies instead (speech requests are counted separately). If this limiter is unavailable or the check code does not match, the robot’s voice counts against FYOS’s daily speech quota. The same legal basis applies, and this transfer is likewise safeguarded by standard contractual clauses under Art. 46 GDPR. If no key is configured, the daily quota is used up or, for the robot, the per-minute limit is reached, your browser’s own voice reads the answer and FY does not send the text to any speech provider; some browser voices (e.g. the “Google …” voices in Chrome) work online and pass the text to the browser maker.

FYOS on Telegram. You can also write to FYOS through its Telegram bot. Telegram itself, Telegram Messenger Inc. (outside the EU; EU representative under Art. 27 GDPR: European Data Protection Office, Brussels), acts under its own privacy policy. Your message to the bot reaches FY's relay server through Telegram's servers; your IP address does not reach us, and your name, username and profile picture are neither used nor stored. The answer is generated the same way as in the website chat, by Anthropic, PBC (USA) or Cloudflare Workers AI. To pick the language of the answer, the interface language Telegram reports for your app (e.g. “de”) is sent along with the question. To count your daily question quota, your Telegram chat ID is stored on the relay server (Cloudflare KV) until the end of the day (UTC); for conversational context the last six messages are stored for at most one hour and then deleted automatically — send the bot /delete and the context is deleted at once; /privacy sends you a link to this page. If a speech key is configured, the answer is also sent to the speech provider (OpenAI, L.L.C. or ElevenLabs Inc., both USA) so that it can be delivered as a voice message. If you have blocked voice messages in Telegram, this is noted in the counter until the end of the day and no voice message is sent to you. The same legal basis and transfer safeguards as above apply.

Retention

  • Contact and offer records (form and e-mail): until the request is settled; if no contract is concluded, deleted after six months at the latest. Form entries on the relay server are deleted automatically after six months.
  • Course contract, licence and invoice records: ten years under tax law (§ 147 AO, § 257 HGB).
  • Job applications: deleted no later than six months after the process ends; longer storage only with your consent.
  • Notification list: at most six months; deleted at once if you withdraw your consent earlier.
  • Telegram bot: daily counter until the end of the day (UTC); conversational context (last six messages) at most one hour — immediately with /delete.

Your rights

  • Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
  • Objection (Art. 21): you may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 6(1)(f)).
  • Withdrawal of consent (Art. 7(3)): for processing based on consent, with effect for the future.
  • Complaint (Art. 77): the supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit NRW, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de). You may also contact the supervisory authority where you live.

To exercise these rights, an e-mail is enough. Providing personal data is neither a legal nor a contractual obligation; without it, however, we cannot handle your request or sell you the course. No automated decision-making or profiling takes place.

A question about these terms? Send an e-mail.