Trust & Privacy

Account security

Accounts are protected with password authentication and Google sign-in. Passwords are hashed by our authentication provider; we never see them in plaintext. Sessions are stored as encrypted browser tokens and revoked on sign-out.

Data we store

• Your email address and display name.
• Your CEFR level preference and quiz attempt history.
• Subscription status — Stripe is the source of truth for billing.

We do not sell personal data. Per-user data is protected by row-level access rules so each account can only read its own rows.

Payments

All payments are processed by Stripe. We never receive or store card numbers. Subscription state is updated through signed Stripe webhooks. You can cancel anytime from the customer portal.

Premium content access

Audio files, transcripts, and study packs live in a private storage bucket. Access URLs are minted on-demand by our server, expire after one hour, and are gated by an active subscription where applicable. There is no public link that bypasses this check.

Cookies

We use first-party cookies and local storage to keep you signed in and remember your language and reading preferences. We do not use third-party advertising cookies.

Your rights

You can request a copy of your data or account deletion at any time by contacting support. Account deletion removes your profile, progress, and stored preferences.