Privacy Policy

1. What we collect

· Account: email address, hashed password

· Learning: assessment results, daily mission records, vocabulary review state, speaking and shadowing records

· Payment: order number, payer email and amount as passed to us by PayPal (we never receive card numbers)

· Attribution: utm parameters showing which channel brought you here

2. Why we use it

To design your lessons and track progress, to verify paid access, and for aggregate analysis that improves the service.

3. AI processing and the data boundary

We send requests to external model providers (Anthropic, Google) to generate lessons and corrections. **Requests that contain sentences you spoke or wrote are only sent over paid-tier routes where input is not used to train models.** Free-tier routes are used solely for generation that contains no personal data, such as curriculum scaffolding.

4. Voice data

Pronunciation scoring runs on text recognised in your browser, and recordings stay on your device by default. Where audio is stored on our servers it is deleted automatically 90 days after scoring, and deletion requests are honoured immediately.

5. Retention

Learning data is deleted as soon as you delete your account. Payment records are retained for the period required by applicable law.

6. Processors

PayPal processes payments, Supabase stores data, and Vercel serves the application. We do not sell or share your data with anyone else.

7. Your rights

You may request access to, correction of, deletion of, or restriction of processing of your data. Write to us from the email address you signed up with.