Privacy Policy

Last Updated: 2025-01-28

1. Introduction

This Privacy Policy explains how ReadVocab ("we," "us," or "our") collects, uses, and protects your information when you use our Service. We are committed to protecting your privacy and maintaining the security of your personal information.

2. Information We Collect

2.1 Personal Information

We collect and store:

  • Email address (used solely for authentication)
  • Purchase history (which book flashcard sets you own)
  • Learning progress data:
    • Flashcard study history
    • Spaced repetition scheduling information
    • Chapter completion status
    • CEFR level preferences

2.2 Usage Data

We use Google Analytics to collect anonymous usage data, including:

  • Pages visited
  • Time spent on the Service
  • Device information
  • Geographic location (country/region level only)
  • Usage patterns

3. How We Use Your Information

3.1 Email Address

Your email address is used exclusively for:

  • Account authentication via One-Time Password (OTP)
  • No marketing emails
  • No promotional content
  • No newsletters
  • No notifications or reminders
  • No sharing with third parties

3.2 Learning Data

Your learning data is used exclusively to:

  • Track your progress
  • Schedule flashcard reviews
  • Provide progress metrics
  • Save your learning preferences
  • Resume your study sessions

3.3 Analytics Data

Anonymous usage data is collected to:

  • Improve our Service
  • Understand user behavior
  • Optimize performance
  • Make data-driven product decisions

4. Third-Party Services

4.1 Authentication

  • We use Supabase for user authentication
  • Supabase may use cookies for session management
  • Please refer to Supabase's Privacy Policy for details

4.2 Analytics

  • We use Google Analytics for usage tracking
  • Google Analytics may use cookies
  • You can opt-out through Google Analytics Opt-out Browser Add-on
  • Please refer to Google's Privacy Policy for details

5. Cookies and Local Storage

5.1 Essential Cookies

Our third-party service providers may use cookies for:

  • Authentication (Supabase)
  • Analytics (Google Analytics)

5.2 Our Usage

ReadVocab itself does not:

  • Set any cookies directly
  • Use browser local storage
  • Track individual user behavior

6. Data Security

We implement appropriate security measures to protect your information:

  • Email addresses are encrypted
  • No passwords are stored
  • OTP tokens are temporary and single-use
  • Data is hosted on secure cloud infrastructure

7. Your Rights

You have the right to:

  • Request deletion of your account
  • Use browser tools or extensions to control analytics tracking

8. International Data Transfer

Your information may be processed by our service providers (Supabase and Google Analytics) in various countries. Please refer to their respective privacy policies for details about international data transfers.

9. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new Privacy Policy on this page.

10. Contact Us

For privacy-related questions or concerns:

11. Legal Compliance

This Privacy Policy complies with:

  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA)
  • Other applicable data protection laws