Privacy policy

Last updated: draft. Replace this copy with vetted language before public launch.

What we collect

When you sign up, we store your email address and a generated user identifier in Supabase. That's the minimum needed for login.

Your word bank, conversation turns, and FSRS review history live in your browser (IndexedDB) by default. Nothing is sent to our servers for storage unless you enable Pro sync (not available yet) or explicitly share a sentence to the Feed.

API keys (BYO)

API keys you paste into Settings are stored in your browser only (localStorage). They are attached as a one-shot header on each request to our API routes, which forward them to the upstream provider (OpenRouter, ElevenLabs, etc.). We do not persist them.

Voice cloning

If you clone your voice, the 30-second recording is sent to ElevenLabs via your API key. ElevenLabs stores the resulting voice model under your account, not ours. We store only the resulting voice_id in your local settings.

Shared Sentence Feed

Opting to share a sentence to the Feed uploads that one sentence's text, word breakdown, and audio MP3 to Supabase Storage. Posts are associated with a deterministic anonymous handle derived from your user id (not your email). You can delete any of your posts from /feed/mine.

Contact

Open an issue or email the maintainer. Details forthcoming.