Privacy Policy

Last updated: July 23, 2026

1. What we collect

At signup: first name, last name (optional), email, password (stored hashed -- we never see or store it in plain text), Telegram username (optional). While using the app: the words and cards you add to your deck, your review history (used by the spaced-repetition scheduler), and your interface language.

2. How we use it

To run the service: showing your deck, scheduling reviews, signing you in. Your email is used only to verify your account and for password resets -- those are the only automated emails we send; there's no marketing mail. Your Telegram handle, if you provide it, may be used by your tutor to reach you about lessons.

3. Who processes your data

Account data is stored on our own server. We use a couple of third-party services for specific technical tasks:

• Resend -- delivers the verification and password-reset emails.
• Cloudflare Turnstile -- protects the signup form from bots and automated abuse. Doesn't use ad tracking.

We don't sell or share your data with third parties for marketing.

4. Storage and security

Passwords are hashed (PBKDF2) -- the original password can't be recovered from what's stored, not even by us. Account data is backed up regularly and kept in private cloud storage.

5. Cookies

We use one functional cookie to keep you signed in. It isn't used for ad tracking and isn't shared with third parties.

6. Your rights

You can request deletion of your account and all associated data at any time by contacting the tutor who gave you access to the service.

7. Changes to this policy

We may update this policy as the service evolves. Material changes will be posted on this page.

8. Contact

For questions about how your data is handled, reach out to the tutor who gave you access to the service.