Privacy Policy

Last updated: 6 September 2026

FlipFluent ("we", "us") is a language-learning app that helps you build flashcard decks, practice pronunciation, and track your progress. This policy explains what we collect, why we collect it, and what rights you have over your data.

1. Information we collect

From your account

Email address — used for sign-in, password recovery, and important service notices.
Display name + optional avatar — only if you set one in your profile.
Authentication metadata — we receive your user ID and provider when you log in via email, Google, Facebook, LinkedIn, Apple or TikTok. TikTok shares only an account ID, display name and avatar — no email address — so after a TikTok sign-in we ask you for one and confirm it with a one-time code.

From your learning

Profile preferences — target language, native language, CEFR level, learning goals, audio speed, text size.
Progress data — which decks and cards you've reviewed, your accuracy, streak count, mastery boxes, badges earned.
Saved content — flashcards you've created, decks you've cloned, stories you've read.
Tutor conversations — chat history with the AI tutor when you use that feature, used to personalize subsequent sessions.

Microphone audio (only when you tap to record)

FlipFluent's pronunciation feedback feature records short audio clips when you tap the microphone button. Each clip is sent to Google's Gemini multimodal API for scoring and is not stored on our servers. The token-cost log records only the duration estimate — never the audio itself.

Anonymous diagnostics

Crash reports + performance traces via Google Cloud Logging.
Aggregate usage metrics (e.g. "200 cards reviewed today") — never tied to identifiable users in shipped reports.

2. How we use your data

Provide the service — sync your progress across devices, surface decks at your level, render the right language UI.
Personalize learning — the spaced-repetition engine, AI tutor recommendations, and Story-of-the-Day picker all read your study history.
Improve the product — aggregate metrics inform which features to build next. We do not sell, license, or rent your individual data.
Communicate — service emails (account deletion confirmation, security alerts). We do not use your data for marketing emails unless you opt in.

3. Third parties we share data with

FlipFluent runs on a small, deliberately limited stack:

Supabase (self-hosted on Google Cloud) — primary database, authentication, file storage. Data lives in our own GCP project, not Supabase's shared cloud.
Google Cloud Run + Cloud Storage — hosts the app servers and stores generated images/audio.
Google Gemini API — receives your AI-tutor prompts and pronunciation audio for inference. Subject to Google's API terms.
OpenAI / Anthropic / Replicate — used as fallbacks for image generation, deck generation, and chat. Only the prompt content is sent; never your account email or stable identifiers.
ElevenLabs / Google Cloud TTS — text-to-speech for card audio. Receives card text only.

We do not use third-party advertising networks, analytics SDKs, or trackers. There are no advertising IDs collected from your device.

4. Your rights

Access & export — sign in, go to Settings → Privacy & Data, click Export. You'll get a JSON dump of every record tied to your account.
Delete — same page, click Delete; in the mobile app, Profile → Delete account. Immediate, no grace period. Erases your auth user and every personal record; what is kept is listed at /legal/delete-account. Public-facing decks you authored stay in the community library with your name removed (shown as "anonymous").
Correct — edit your profile fields any time in Settings.
Withdraw consent — revoke microphone / photo permissions in your device's system settings. The app degrades gracefully.
Lodge a complaint — EU residents may contact their national supervisory authority. California residents have CCPA rights documented in section 7.

5. Children

FlipFluent is not directed at children under 13. We do not knowingly collect data from anyone under 13 in jurisdictions where COPPA / similar regimes apply. If you believe a child has registered, contact us and we'll delete the account.

6. Data retention

We keep your account data while your account is active. When you delete your account, personal records are erased immediately from primary storage; nightly Postgres backups (kept 30 days) cycle out within a month. Five things outlive the account, without any link to you: billing records, including the payment provider's event records with the email address removed and each event reduced to id, type, amount, currency and date (kept as long as tax and accounting law requires); support tickets with your email, subject and message text replaced by a placeholder; anonymized usage, analytics and error-report rows, which we retain indefinitely; decks you published to the community library, with your name removed; and, if you held an operator role, the audit log of administrative actions you performed, which keeps your email address. Details: /legal/delete-account.

7. International transfers

Our infrastructure runs in Google Cloud's us-central1 region. If you're accessing FlipFluent from outside the United States, your data is transferred there for processing. We rely on Standard Contractual Clauses for EU transfers.

8. California (CCPA / CPRA)

California residents may request, at no cost, the categories of personal information we've collected, the purpose, and the third parties we've shared it with. We do not sell personal information. Submit requests to the email below.

9. Security

All traffic is HTTPS-only. Postgres has row-level security on every user-scoped table. Service-role keys are stored in Google Secret Manager and never shipped to clients. We disclose breaches affecting your data within 72 hours of confirmation.

10. Changes to this policy

Material changes are announced in-app and reset the "Last updated" date at the top. Continued use after the effective date constitutes acceptance.

11. Contact

Questions, requests, or DPO inquiries: privacy@flipfluent.online.