Privacy Policy

1. Introduction

Welcome to Learn Farsi. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our language learning application.

2. Information We Collect

We collect the following types of information:

• Account Information: When you sign up, we collect your email address and optionally your name. We use passwordless authentication (magic links sent to your email), so we never store any passwords.
• Learning Progress (stored in our database): We store your vocabulary review history (including spaced repetition data such as review counts, accuracy, and next review dates), lesson and grammar completion status, quiz scores, daily practice streaks, XP totals, and your current learning level.
• Temporary Session Data (stored in your browser): While you are actively completing a lesson or practice session, we temporarily store your session score and progress in your browser's local storage. This data is cleared when the session ends. We also store your theme preference (light/dark mode) and alphabet practice progress locally in your browser.

We do not use any analytics or tracking services. We do not collect browsing behavior, IP addresses for tracking purposes, or any data beyond what is listed above.

3. How We Use Your Information

We use your information to:

• Authenticate you via magic link emails sent to your email address
• Track your learning progress, streaks, and XP across sessions
• Power the spaced repetition system (determining which words to review and when)
• Display your progress on your personal dashboard
• Send you transactional emails (magic links for sign-in only, no marketing emails)

4. Data Storage and Security

All persistent user data (your account information and learning progress) is stored in a PostgreSQL database hosted by Supabase on Amazon Web Services (AWS) in the US-East-1 region. Data is encrypted in transit using TLS/SSL.

Temporary session data (such as your current lesson score while practicing) is stored only in your browser's local storage and is not transmitted to our servers until you complete a session.

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing or advertising purposes.

5. Third-Party Services

We use the following third-party services to operate Learn Farsi:

• Supabase (supabase.com): Hosts our PostgreSQL database on AWS. Stores all user account data and learning progress. Supabase acts as a data processor on our behalf.
• Resend (resend.com): Handles email delivery for magic link authentication and contact form submissions. Resend processes your email address solely to deliver these transactional emails.
• Auth.js (NextAuth): Open-source authentication framework that manages your login sessions. Session data is stored in our own database, not on a third-party server.

We do not use any analytics, advertising, or tracking services. These third-party services have their own privacy policies governing the use of your information.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of any inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing

7. Cookies and Local Storage

Cookies: We use a single session cookie managed by Auth.js to keep you signed in. This cookie is essential for the service to function and cannot be disabled while using the app. We do not use any advertising or tracking cookies.

Browser Local Storage: We store the following data locally in your browser:

• Temporary lesson and practice session scores (cleared when a session completes)
• Alphabet practice progress
• Your theme preference (light or dark mode)

Your persistent learning data (word reviews, lesson completion, streaks, XP) is stored in our database, not in local storage. You can clear local storage through your browser settings at any time without losing your account or long-term progress.

8. Data Retention

Your account data and learning progress are retained for as long as your account remains active. We do not currently have an automated process for deleting inactive accounts.

If you wish to have your account and all associated data deleted, you can contact us at the email address listed below. Upon request, we will permanently remove your account, learning progress, and any other personal data from our database.

9. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: thomasvanwelsenes@gmail.com