Privacy Policy

1. Introduction

AnyVocab ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information through our website and services (collectively, the "Service").

2. Information Collection

A. Personal Information

We collect information that identifies you personally ("Personal Information") when you register for an account. This includes:

• Identity Data: Email address, name, or profile data provided via Google OAuth or Magic Link authentication.
• Payment Data: Transaction history and subscription status (processed securely by Creem). We do not store full credit card numbers.

B. Usage & Technical Data

We automatically collect certain information when you visit, use, or navigate the Service:

• Device Data: IP address, browser type, operating system, and device identifiers.
• Log Data: Access times, pages viewed, and interaction metrics used for debugging and performance monitoring (via Langfuse).
• Cookies: We use cookies to maintain your session (authentication state) and preferences.

C. User-Generated Learning Data

To deliver our core AI educational features, we process specific user content:

• Voice Recordings: Audio data captured during "Shadowing" and "Simulation" exercises.
• Creative Content: Text inputs, scripts, and drafts generated using the "Creative Assistant."
• Learning History: Vocabulary decks, flashcard progress (SR algorithms), and mistake logs.
• Imported Media: YouTube video IDs and associated subtitles (fetched via YouTube API).

3. How We Use Your Data

We use your information for the following business purposes:

• Service Delivery: To authenticate you, manage your subscription, and provide personalized language coaching.
• AI Processing: To analyze your pronunciation and generate context-aware vocabulary examples using third-party LLMs.
• Communication: To send transactional emails (e.g., login links via Resend) and important service updates.
• Optimization: To analyze usage patterns, fix bugs, and improve system latency.

4. Data Sharing & Third-Party Processors

We do not sell your personal data. We share data only with the following categories of service providers to operate the Service:

5. Cookies & Tracking Technologies

We use cookies primarily for essential purposes, such as keeping you logged in (Session Cookies) and ensuring site security (CSRF protection). You can control cookie preferences contributing to non-essential tracking via your browser settings, though this may affect site functionality.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have specific rights regarding your data:

• Access & Portability: Request a copy of the personal data we hold about you.
• Correction: Request corrections to inaccurate data.
• Deletion: Request deletion of your account and associated data ("Right to be Forgotten").
• Withdraw Consent: You may withdraw consent for data processing at any time by closing your account.

To exercise these rights, please contact specific support channels at [email protected].

7. Data Retention & Security

We retain your data only as long as necessary to provide the Service or as required by law. We implement industry-standard security measures (encryption at rest and in transit) to protect your data. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

9. International Transfers

Your information utilizing our Service may be transferred to, stored, and processed in regions outside your country of residence, where our third-party service providers (e.g., Cloudflare, Neon) operate. By using the Service, you consent to this transfer.

10. Updates to Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will indicate when the latest revisions were made. Continued use of the Service constitutes acceptance of the modified policy.