Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account and subscribe to our service:

• Email address (required for account creation and email delivery)
• Language and difficulty level preferences
• Payment information (processed securely by Stripe — we never store your card details)
• Usage data such as email open rates and interaction with our service

2. How We Use Your Information

We use the information we collect to:

• Deliver your weekly language learning emails
• Personalize content based on your language and difficulty preferences
• Process your subscription payments
• Communicate with you about your account and service updates
• Improve and optimize our service

4. Third-Party Services

We use the following third-party services to operate LinguaBrief:

• Supabase — Database and authentication (stores your account data)
• Stripe — Payment processing (handles all payment data)
• Resend — Email delivery (receives your email address to deliver articles)
• Vercel — Website hosting and infrastructure

6. Your Rights (GDPR)

If you are a resident of the European Economic Area, you have the following data protection rights:

• Right to access — You can request a copy of your personal data
• Right to rectification — You can request correction of inaccurate data
• Right to erasure — You can request deletion of your personal data
• Right to data portability — You can request your data in a machine-readable format
• Right to restrict processing — You can request that we limit how we use your data
• Right to object — You can object to the processing of your personal data

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

3. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS infrastructure in the EU). We implement industry-standard security measures including encryption in transit (TLS) and at rest. Payment processing is handled entirely by Stripe, which is PCI-DSS Level 1 certified.

5. Cookies

We use essential cookies required for the operation of our service, such as session management and authentication. We do not use advertising or tracking cookies.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

8. Children's Privacy

LinguaBrief is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by sending an email to the address associated with your account. Your continued use of the service after such notification constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: privacy@linguabrief.com