Privacy Policy

Information the service uses

We process account and authentication information, such as the email address you provide when you create an account, learning progress, saved Vocabulary, Reading and quiz history, lesson progress, preferences, and account security requests to provide and synchronize the service.

Guest progress, session data, preferences, PWA/service-worker files, and consent choices may be stored locally on your device. Native builds may use secure token storage, non-sensitive Preferences, and optional reminder settings.

AI-generated content

Parts of the learning content, including Reading passages, are generated using AI and curated by us. AI-generated material can still contain errors, so it should be checked before you rely on it.

When you request a Custom or AI Reading, relevant selected learning targets and generation configuration may be sent to the configured AI provider. We do not send your email address, account identifiers or billing information to that provider.

Advertising and measurement

On Android, iPhone and iPad, optional Meta measurement requires your explicit consent. When accepted, Meta may receive installation, app-open and verified purchase events, purchase amount and currency, and device advertising identifiers. You can decline or change your choice in Account settings. We do not share your lesson activity, quiz answers, reading history, email address or authentication tokens with the native advertising SDK.

On iPhone and iPad, device-based Meta measurement also requires permission through Apple’s App Tracking Transparency prompt. A denial or restriction in iOS keeps device-based Meta measurement off, even if you accept the in-app advertising preference. You can change either choice in Account settings or iOS Settings. Declining does not affect learning or Premium access.

On iPhone and iPad, Apple’s SKAdNetwork also provides privacy-preserving install and initial paid purchase attribution independently of signup or tracking permission. The app sends Apple a limited conversion value, without an advertising ID, account details, email address, transaction ID or exact purchase amount. Apple may send delayed, privacy-limited attribution reports to the advertising network. This separate attribution continues when you decline device-based Meta measurement.

We use Meta (Facebook) measurement on the web to understand how people discover the service and how our advertising performs. Where it is active, Meta may set cookies or similar identifiers and receive a page view, a confirmed new-account event, or an initial verified Premium purchase amount and currency. Meta may combine that information with data it already holds about you.

In the EEA and United Kingdom, this measurement loads only after you accept optional marketing cookies. Elsewhere it may load by default unless you have explicitly declined. You can change an explicit choice from Account or Cookie settings. Your learning progress, saved items, Reading history and quiz answers are not shared with advertising providers, and we do not use them to build advertising profiles of your study activity.

For internal administration, we record signup time and platform, coarse authenticated activity such as session and explicit-login counts, and verified payment and refund facts. Where optional marketing measurement is permitted, a first-party campaign cookie may hold limited UTM and referrer-host information for up to 90 days so a signup can be attributed across our website and app. The resulting account attribution is retained with the account. This internal dataset is restricted to administrators and is not sent to advertisers.

First-party product analytics

When enabled, we use limited first-party usage information by default to operate the service, understand feature use, diagnose problems, improve lessons and learning content, and measure product performance. It is used internally, not sent to advertisers.

Proficiency checks use an opaque attempt identifier, not a name or email in behavioral events. The separate quiz record may later link that attempt to an account or purchase. Signed-in activity is linked to your internal account identifier; it is not anonymous. Usage records include activity and content identifiers, timestamps, platform and limited correctness or checkpoint scores, not lesson answers, story text, prompts or email addresses.

Where available, you can turn off Product analytics in Account on this device. This does not affect learning progress or your separate marketing choices.

Mobile app stores

If you install the app from the Apple App Store or Google Play, that store processes its own data about the download, any purchase made through it, crash reporting and its own advertising and measurement features, under its own privacy policy rather than this one. Device level advertising controls, such as the tracking permission on iOS and the advertising ID settings on Android, are managed in your device settings.

Billing and service providers

Subscription state and provider identifiers may be stored to manage access. Web card entry is hosted by Paddle, which acts as the Merchant of Record for web purchases; card details are not entered into this application. Supabase supports authentication, database, and server functions. First-party product analytics and optional advertising measurement are separate systems.

Retention, export, and deletion

Detailed product usage records are kept for up to 365 days. Unused attempt bindings are normally removed after 90 days without activity, once no retained usage record depends on them. Account-linked usage records are included in your export and removed when your account is deleted. Learning progress, Practice and Reading records, generated Readings, billing and entitlements follow their existing retention rules; analytics cleanup does not delete them.

Authenticated users can request a data export or account deletion from Account. Operational and provider records may be retained where needed for security, billing reconciliation, or applicable obligations. Deleting the app does not by itself delete a synchronized account.

Security and contact

We use encrypted transport, access controls, and row-level database policies, but no internet service can guarantee absolute security. Privacy questions: hello@omnivorian.com.