1. Information We Collect

Account information: Email address and password (stored as a secure hash) when you register.

Profile information: Your native language, target language, proficiency level, profession, and learning preferences.

Learning data: Islands you create, words, phrases, sentences, practice history, mastery levels, and spaced repetition schedules.

User-generated content: Custom sentences, personal notes on vocabulary items.

Voice data: Speech recognition is handled differently depending on your plan. Free-tier users have audio processed entirely in the browser using the Whisper model — no audio is ever sent to our servers. Pro-tier users have audio sent to our backend servers for processing via a third-party AI service (Google Gemini) to provide higher-quality transcription. Audio is not stored after transcription.

2. How We Use Your Information

To provide and personalize the language learning experience
To track your learning progress and manage spaced repetition
To generate AI-tailored content based on your proficiency and interests
To send transactional emails (account verification, password resets)
To improve the Service based on aggregate usage patterns

3. AI and Third-Party Services

We use third-party AI services to generate learning content (sentences, translations, explanations). Your profile context (language, proficiency, profession) may be sent to these services to personalize content. We do not send your personal information (email, name) to AI providers.

Text-to-speech audio is generated using third-party services and cached on our servers for playback.

4. Data Storage and Security

Your data is stored in a PostgreSQL database. Passwords are hashed using bcrypt. Authentication uses secure httpOnly cookies with short-lived access tokens and rotating refresh tokens.

We implement industry-standard security measures including rate limiting, CORS protections, and secure cookie handling.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems, including your profile, islands, learning progress, and any user-generated content.

6. Your Rights

You have the right to:

Access your personal data through your account
Correct your information through the profile settings
Delete your account and all associated data at any time
Object to processing by contacting us

7. Cookies

We use essential cookies for authentication (access and refresh tokens). These are httpOnly secure cookies required for the Service to function. We do not use tracking or advertising cookies.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions, contact us at [email protected].

Privacy Policy