Privacy Policy
Template for review. This document describes how the app currently handles data, but it is not legal advice. [Legal Entity] should review and finalize it (and the bracketed placeholders) with qualified counsel before launch.
This Privacy Policy explains how [Legal Entity](“Spanish Minds,” “we,” “us”) handles information in connection with the Spanish Minds Flashcards app (“Vocabulario,” the “Service”), a tool for learning the “First 625” essential Spanish words using spaced repetition.
Information we collect
- Account identifier. The Service currently uses anonymous accounts — you can learn without giving us an email or password. When you start, we create a stable anonymous account through our authentication provider and associate your learning data with its opaque identifier. We do not collect your name or email at this stage.
- Learning data. As you study, we store your per-word review history and schedule (the spaced-repetition state), session results, and gamification progress such as XP, level, streak, and daily-goal counts.
- Preferences. Settings like color theme, dialect (Latin American or Castilian), audio auto-play, and mute/haptics are stored locally in your browser.
- Technical data. Like most websites, our hosting provider may process standard technical information (e.g., IP address, browser type, request logs) to serve and secure the Service.
How we use information
- To run the core experience — scheduling reviews and showing your progress.
- To maintain your streak, XP, and daily goals across sessions and devices.
- To operate, secure, debug, and improve the Service.
We do not sell your personal information, and we do not use your learning data for advertising.
Pronunciation audio
Word pronunciation uses your browser’s built-in speech synthesis(the Web Speech API). This happens on your device; we do not record your voice and no audio is sent to our servers.
Where your data is stored & who processes it
Learning data is stored in our database hosted on Supabase, with data residency in the United States. The Service is hosted on Vercel. These providers act as processors on our behalf. Card images are served as static assets / from our storage bucket. Access to your learning rows is restricted to your own account through database row-level security.
Cookies & local storage
We use browser local storage to keep you signed in to your anonymous account and to remember your preferences. We do not use third-party advertising or tracking cookies.
Payments
The Service does not collect payments at this time. If paid features are introduced, this Policy will be updated and payments will be handled by a dedicated payment processor; we would not store full card numbers.
Data retention
We keep your learning data while your account is active so your progress persists. You may request deletion as described below; note that clearing your browser storage can detach you from an anonymous account and its progress.
Your rights & choices
Depending on where you live, you may have rights to access, correct, export, or delete your information. To make a request, contact us at [contact email]. Because accounts are anonymous, we may need information that helps us locate the correct records.
Children’s privacy
The Service is not directed to children under [minimum age], and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact [contact email] and we will take appropriate steps.
Security
We use reasonable technical and organizational measures, including row-level security and encrypted connections, to protect your data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
International users
Your information may be processed in the United States and other countries that may have different data-protection laws than your own.
Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice.
Contact us
Questions about this Policy? Email [contact email] or write to [Legal Entity], [mailing address]. See also our Terms of Service.