Privacy Policy

Last updated: [date you publish this]

This explains what personal information Language Practice (Hangeul Practice, Nihongo Practice and Español Practice) collects, why, and your rights. The data controller is [business name], [postal address], email [contact email]. [ICO registration number, once registered]

What we collect and why

• Account: your email address, the name you give, and your password (stored only as a secure hash by our account provider; we can’t read it). Used to run your account. Legal basis: contract.
• Learning progress: your answers, flashcard history, study time and settings, per language. Used to save your progress and show it on every device. Legal basis: contract.
• Subscription and lessons: your subscription status and dates, lesson bookings, and your Stripe customer number. Card details go straight to Stripe and never reach us. Legal basis: contract, and legal obligation for tax records.
• Teachers: if you apply to teach, your application details and Stripe Connect account number. Legal basis: contract.
• Feedback you choose to send, with the page and device type. Legal basis: legitimate interest in improving the site.
• Visit statistics: we use Umami, which counts page visits without cookies and without identifying you. Legal basis: legitimate interest.

We don’t sell your data, show adverts or use it for profiling. We don’t send your data to AI services.

Cookies and storage in your browser

We don’t use advertising or tracking cookies. The site stores your progress, settings and sign-in session in your browser’s local storage, because it can’t work without them. These are strictly necessary, so no consent banner is needed.

Who processes your data for us

• Supabase: accounts and database. Region: EU (Ireland).
• Netlify: hosts the website.
• Stripe: payments, subscriptions and teacher payouts.
• Umami: anonymous visit statistics.
• [Email provider for account emails, once set up]

Some of these may process data outside the UK. Where they do, they use the safeguards UK law requires, such as the UK International Data Transfer Addendum or an adequacy decision.

How long we keep it

• Your account and progress: until you delete your account. Accounts unused for 3 years may be deleted after an email warning.
• Payment records: 6 years, as UK tax law requires. Stripe keeps its own records under its privacy policy.
• Feedback: kept without your name after your account is deleted.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. You can delete your account and all your progress yourself at any time: account menu → Account → Delete my account. For anything else, email [contact email]. We reply within one month.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Children

Accounts are for people aged 13 and over.

Changes

If we change this policy in a way that matters, we’ll tell you on the site or by email.