Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you:

• Sign in with Google (email address, first name, last name from your Google account)
• Set your learning preferences (current level, preferred language)
• Use our learning features (progress data, vocabulary reviews, reading history)
• Subscribe to our service (payment information is processed securely by Stripe, our payment processor)

2. How We Use Your Information

We use the information we collect to:

• Provide and personalize your learning experience
• Track your progress through Estonian language levels
• Maintain your authentication session
• Process subscription payments and manage billing
• Send you account-related and subscription communications
• Improve our service and develop new features

3. Data Storage and Security

• Profile Data: Stored in our secure PostgreSQL database
• Authentication: We use Google OAuth for secure authentication (no passwords stored)
• Session Management: Authentication tokens stored in your browser's local storage
• Payment Processing: All payment information is processed securely by Stripe. We do not store credit card numbers or sensitive payment details on our servers. Stripe is PCI-DSS compliant and meets the highest security standards.
• Subscription Data: We store subscription status, plan type, and billing history to manage your account
• Data Location: All data is stored on secure servers within the European Union
• No Third-Party Analytics: We do not use any third-party tracking or analytics services

4. Your Rights Under GDPR

As a user, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct any inaccurate personal data
• Erasure: Request deletion of your account and associated data
• Portability: Export your learning data in a machine-readable format
• Objection: Opt-out of any communications

To exercise any of these rights, please contact us using the information below.

5. Data Sharing and Third-Party Services

We do not sell or trade your personal information. We share data only with trusted service providers necessary to operate our service:

• Stripe: Payment processing for subscriptions. Stripe processes payment information according to their privacy policy and PCI-DSS standards. We receive only confirmation of payment status, not your full payment details.
• Google OAuth: Authentication services. Google provides your email address, first name, and last name when you sign in with Google.

These service providers are contractually obligated to protect your data and use it only for the services they provide to us.

6. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we may have collected information about a child, please contact us.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

8. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at: