Privacy and data
Learn which records stay on your device, what signing in saves, and how to view or remove your records. You can access learning content as a guest.
Information updated: 2026-10-11
This draft describes the current features. The operator name and contact are awaiting confirmation and will be updated before accounts open for public use.
When you learn as a guest
Reading positions, story choices, first judgments, scenario practice, review schedules, and reading preferences stay in this browser. Necessary cookies support language, companion choices, and sign-in verification. Clearing browser data can remove local records. Guest records join an account only after you explicitly confirm the import.
When you choose to sign in
Your account stores your email and the name, profile image address, and account identifier supplied by the sign-in provider. Cloud storage holds learning records, reading positions, and supported reading preferences. Sign-in management stores necessary session information and broad browser and operating-system labels. These support identity verification, cross-device reading, learning feedback, and session management.
Sign-in and service providers
Google verifies your identity; the app does not read Gmail or Drive or store Google API authorization tokens. When email sign-in is enabled, the mail service receives your email and a single-use sign-in link, not your learning answers. The deployment plan uses Vercel for hosting, Neon for cloud data, and Resend for sign-in email. These providers also process service requests under their own policies.
What you can view and manage
Settings lets you export, preview, and merge this device’s learning backup. After signing in, the account page lets you download your own account data and cloud learning backup, revoke other sign-ins, or delete the account after confirming your identity again. Deletion can also clear this device’s cache. Signing out does not delete an account. Backups may contain personal information; keep them private.
Retention and deletion limits
Account and cloud learning records currently have no automatic time-based deletion. Account deletion removes the account, linked sign-ins, and learning records from the application database. Maintenance clears expired credentials and security rate-limit counters. Course operation receipts and version snapshots are retained separately; deleting an administrator withdraws their reviews and removes identity attribution. Backup, access-log, and email-delivery retention still requires operator confirmation. Immediate removal of every copy is not promised.
Data used in learning
Lessons and scenario practice use authored teaching content and fictional examples. Your practice answers are not sent to a generative model. The current app has no advertising or third-party analytics scripts. This describes the current implementation; operator details, deployment data-processing arrangements, and the final privacy statement still require confirmation before public service opens.