Privacy Policy

1. Information we process

• Account information: your email, account identifier, sign-in provider, and profile information such as name and avatar supplied by Google when you choose Google sign-in. Email/password credentials and sessions are handled through Supabase Authentication. We do not receive your Google password.
• Learning activity: exercise and lesson identifiers, whether answers were correct, attempt times, review schedules, known words, lesson completion, daily plans, streaks, and progress. We also store choices such as Spanish level, daily goal, sound, and haptic preferences.
• Device and connection information: our hosting and authentication services process IP addresses, request times, browser or app information, and operational logs to deliver and protect the service.
• Website analytics, when allowed: pages visited, referral information, browser/device characteristics, approximate location derived from network information, and events such as starting or completing practice. Google Analytics may associate events with a pseudonymous account ID when you sign in; this is not anonymous data. Vercel Speed Insights measures website loading and interaction performance.
• Support correspondence: the contact details and information you choose to send when requesting support, reporting a problem, or exercising privacy rights.
• Administrator publishing tools: authorized administrators who connect social publishing accounts may provide channel identifiers, access/refresh tokens, publishing configuration, and publishing status. These tools are separate from learner practice and access connected channel information or analytics and support the administrator’s publishing workflow.

2. Guest mode and local storage

Guest learning progress and preferences are stored on your device. Signed-in practice may also be saved locally until it can upload to your account. Authentication tokens are stored using browser storage or the device's secure storage. Some catalogs and session information are cached to make practice faster and recover interrupted sessions.

Clearing browser site data or the app's storage removes local data and may erase unsent answers. Uninstalling the app does not delete an online account. If you choose to import guest progress after signing in, that progress becomes associated with your account.

3. How and why we use information

We use account and learning information to authenticate you, save and synchronize progress, personalize lessons, schedule reviews, calculate daily progress, and provide support. We use limited operational information to diagnose failures, prevent abuse, and keep the service secure. Optional website analytics help us understand which pages and activities work well.

Where applicable data-protection law requires a legal basis, providing your requested account and learning services is based on performance of our agreement with you; security and service administration rely on legitimate interests; optional analytics and notifications rely on your choices or consent; and some processing may be required by law. Learning recommendations are not decisions with legal or similarly significant effects.

4. Service providers and disclosure

• Supabase provides authentication and stores account and learning data.
• Vercel hosts our website and API and provides website performance measurement.
• Google processes Google sign-in if you choose it, and website analytics if you allow it.
• Your email provider and our support email service process correspondence you send us.

We use providers to operate Fluentivos, not to sell your learning records. We do not sell personal information or use learning records for targeted advertising. We may disclose information when legally required, to protect users and the service, or as part of a business transfer subject to appropriate notice and safeguards. Public social-media links lead to services governed by their own policies.

Providers may process information in countries other than yours. Applicable safeguards may include provider data-processing agreements and standard contractual clauses where required. Contact us for information about the safeguards applicable to your data.

5. Cookies and analytics choices

Essential cookies and local storage support sign-in, security, your settings, and saved practice. Optional Google Analytics and website performance measurement load only after you allow analytics. You can decline without losing learning features and change your choice using Privacy choices at the bottom of the website. Your choice applies to that browser; clearing site data resets it.

The native mobile app does not embed the website's Google Analytics or Vercel Speed Insights scripts. Opening the website from the app is subject to the website's choices. Essential server security and delivery logs are separate from optional analytics.

6. Reminders, permissions, and audio

Mobile practice reminders are optional local notifications scheduled on your device. Reminder timing and settings are stored locally; this feature does not register a remote push token with our backend. You can turn reminders off in Settings or withdraw notification permission in your phone settings.

Pronunciation uses your device or browser's text-to-speech service, which may use a network-based voice depending on your settings. Fluentivos does not record your voice or request microphone, camera, contacts, or precise-location access for these learning features. Marketing email reminders are not currently enabled.

7. Retention and security

We retain account and learning records while your account is active so you can resume learning. Guest records remain until you clear local storage. Support and operational records are retained as needed to resolve requests, maintain security, and meet legal obligations, rather than as permanent learning history.

After a verified deletion request, we remove the account and associated learning data from active systems. A restricted deletion-request record containing the former account identifier is retained while we complete any necessary service-provider erasure. Limited records may also need to be retained for legal obligations, fraud prevention, or resolving disputes; we explain any applicable exception in our response. Deleted records may remain in restricted backups until those backups expire through the provider's normal retention cycle, and are not used for ordinary product activity.

We use HTTPS for service traffic, authenticated access controls, and database permissions to protect account data. No storage or transmission method can guarantee absolute security. Do not send passwords or authentication codes to support.

8. Your rights and account deletion

Depending on where you live, you may have rights to access, correct, export, delete, or restrict the processing of personal data, object to certain uses, and withdraw consent without affecting prior lawful processing. You may also complain to your local data-protection authority. Contact us using the email above; we may need to verify account ownership and respond within applicable legal time limits.

Request account and associated-data deletion. Deletion includes saved learning attempts, progress, known words, preferences, and daily plans. You can also request deletion of specific data without closing your account. Signing out or uninstalling alone does not delete server records.

9. Age and children

Fluentivos is intended for learners aged 16 and older and is not directed to children under 16. If you believe a child under 16 has provided personal information, please contact us so we can investigate and delete it where appropriate. Additional consent requirements may apply under local law.

10. Changes to this policy

We update this page when our practices change and revise the date above. We provide additional notice and request consent where required before introducing materially different uses of personal information.