Privacy Policy

Account and authentication data: Email address, username, account identifier, sign-in provider, account dates, authentication events, and multi-factor authentication status. Our authentication provider handles passwords and authentication secrets; we do not receive your plain-text password.

Learning and preference data: Vocabulary and lesson progress, review answers, spaced-repetition state, goals, notes, synonyms, settings, audio choices, and content interactions associated with your account.

Support and feedback data: Feedback, corrections, privacy requests, support requests, and other communications you choose to send to us.

Community status: Community and forum posting are not currently available. If we introduce those features, we will update this policy as needed and explain what posts, replies, reactions, reports, or blocks are collected before public participation begins.

Subscription data: When payments are offered, we may receive your entitlement status, product, purchase provider, renewal or expiration dates, and a pseudonymous customer identifier. For web checkout, we also retain the selected package, Terms version, consent wording, and server timestamp when you request immediate access. Payment providers process full card or app-store billing details.

Device, usage, and security data: IP address, browser or app information, operating system, request metadata, diagnostic events, security-rule matches, and approximate usage information. We also maintain audit records for sensitive administrative and security actions.

We use this information to provide accounts and learning features, sync progress, personalize review schedules, deliver audio and content, respond to requests and feedback, manage subscriptions, prevent fraud and abuse, troubleshoot errors, measure service reliability, and comply with legal obligations.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing the service, compliance with law, and consent where required. You may withdraw consent for future processing when consent is the basis.

We do not sell personal information. We do not use it for third-party advertising or cross-context behavioral advertising.

Supabase: Authentication, database, storage, and server functions.

Cloudflare: Website delivery, security, request filtering, and privacy-focused web analytics.

RevenueCat: Subscription-entitlement management when paid access is enabled.

Apple, Google, and Stripe: Payment processing when you purchase through their platforms.

Providers process information under their own terms and our arrangements with them. We may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business transaction such as a merger or acquisition. We do not disclose personal information to data brokers or advertisers.

The web app uses browser storage for sessions, settings, and application state needed to make the service work. Public and account pages may use Cloudflare Web Analytics to understand aggregate traffic and performance. We do not use third-party advertising cookies.

Protected images or audio may include an invisible marker linked to an opaque account token. If content is redistributed without authorization, authorized administrators can use that marker to identify the source account. Each lookup requires a reason and is recorded in an audit log.

The marker is used for content security, not advertising or tracking across unrelated services. We rely on our legitimate interest in protecting licensed content, subject to rights available under applicable law.

We generally keep account and learning information while your account exists. We may retain limited security, audit, transaction, billing-consent, dispute, support, or legal records longer when reasonably necessary or required by law. Backup copies may remain for a limited period before routine deletion.

You can permanently delete your account from the Account screen. The deletion process removes the authentication account and associated learning, profile, entitlement, and personalized stored-content records. It cannot be undone. Some legally required or de-identified records may remain. Deleting your account does not itself cancel a subscription managed by Apple, Google, Stripe, or another payment provider.

We use measures designed to protect information, including encrypted connections, access controls, row-level database security, multi-factor authentication support, rate limiting, and administrative audit logs. No online service can guarantee absolute security.

We and our providers may process information in countries other than yours. Where required, we use recognized transfer safeguards and require providers to protect information consistently with applicable law.

Creangă is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account or submitted personal information, contact us so we can investigate and delete it.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, receive a portable copy, withdraw consent, or appeal a denied request. You may also have the right to complain to your local data-protection authority.

You can update available account settings in the app and delete the account from the Account screen. For an export, correction, objection, or another privacy request, contact contact@dacialearning.com. We may need to verify your identity before responding. We will respond within the period required by applicable law.

We will not discriminate against you for exercising a privacy right.

We may update this policy as Creangă changes. We will revise the effective date and provide additional notice when required for a material change.

For privacy questions or requests, contact Dacia Learning LLC at contact@dacialearning.com.