Privacy Policy

FluentDeck is a language-learning web app. This policy explains what personal data we collect when you use it, why we collect it, who we share it with, and the rights you have over it. It applies to the FluentDeck website and app.

Who we are

FluentDeck is the controller of the personal data described in this policy. You can reach us at infofluentdeck at gmail dot com with any question about your data or this policy.

Data we collect

We collect the following:

• Account data. Your email address and name, handled through our authentication provider when you sign up with an email and password or with Google sign-in.
• Profile data. Your display name, your reason for learning, your fluency goal, your proficiency level, your notification context, a personal note, and your per-language settings.
• Learning content. The vocabulary words and translations you add or import, personal notes you write on cards, images you upload to cards, sentences you write during practice, and your study history and review timings.
• Waitlist data. If you join the waitlist without an account, we collect the name and email address you give us.

How we use your data

We use account and profile data to create and run your account and to adapt the app to the language and level you are studying. We use your learning content to generate your cards and practice material, to schedule reviews, and to show you your progress. We use waitlist data only to contact you about access to the service. We also use technical data, such as error reports, to keep the service working and secure.

Legal bases

Where the UK GDPR or EU GDPR applies, we process your data to perform our contract with you (running your account and providing the learning features), on the basis of our legitimate interests (keeping the service secure, monitoring errors, preventing abuse), and on the basis of your consent where you have given it (for example, joining the waitlist). You can withdraw consent at any time.

Service providers

We share data with the following processors, only to the extent each of them needs it to do its job:

• Anthropic (Claude). Generates cards, definitions, example sentences and practice passages. It receives the words and text being worked on.
• Google Cloud Text-to-Speech. Generates word audio. It receives the word being spoken.
• Google Gemini. Makes the audio for longer reading passages. It gets the passage text.
• Supabase. Authentication, database and file storage.
• Sentry. Error monitoring, including session replay. Our replay configuration masks all text and inputs and blocks media.
• Vercel. Hosting.
• Upstash. Rate limiting, keyed by IP address.

We do not sell your personal data and we do not share it with advertisers.

International transfers

Your data is processed in the United States. Where data is transferred out of the UK or the European Economic Area, that transfer relies on appropriate safeguards, such as the standard contractual clauses offered by the provider concerned.

Cookies

We use three cookies and they are all functional. One keeps you signed in, one remembers your interface language, and one records your timezone so reviews land at the right time. No analytics cookies and no advertising cookies. When something breaks, Sentry records what went wrong, including a replay of the session with all text and images masked.

Retention

We keep your data for as long as your account is active. When you delete your account, the data associated with it is deleted.

Your rights

Subject to the conditions in the applicable law, you have the right to access your data, to have inaccurate data corrected, to have your data erased, to receive your data in a portable format, and to object to certain processing. You also have the right to complain to your data protection supervisory authority.

You can export your account data and delete your account yourself from the profile settings page in the app. If you would rather we do it, or you want to exercise any other right, email infofluentdeck at gmail dot com.

Children

FluentDeck is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Security

Your account data is locked to your login and encrypted in transit. Card images work differently. Each one gets a long random web address instead of a login check, so anyone who has the link can open it. Keep anything private off your cards.

Changes to this policy

If we change this policy we will update the date at the top of this page. Significant changes will be communicated in the app or by email.

Contact

Questions about privacy: infofluentdeck at gmail dot com.

This document is a general template. It has not been reviewed by a lawyer and is not legal advice.