Privacy policy

This policy explains what the Spanish Audio Course ("we") collects when you use the website, the private podcast feed and speaking practice, why, and what you can do about it. TODO: business name and address. Last updated: TODO date.

What we collect

• Account: your email address, used to sign you in with a magic link.
• Subscription: your plan, billing status and Stripe customer ID. Card details go directly to Stripe; we never see or store them.
• Learning progress: where you are in each lesson and which lessons you've finished.
• Private feed: a secret feed link (we store only a scrambled version of it) and when it was last used, to spot shared links.
• Speaking practice: when you practiced, for how long, which lesson, and how many AI tokens the session used, to count your plan's minutes and to understand our costs. See below.
• Technical data: IP address and request logs, kept briefly for security and rate limiting.

Speaking practice

While you practice speaking, your microphone audio is streamed through our server to Google's Gemini API, which powers the AI tutor and creates live transcripts. We don't record your audio and we don't store transcripts: they appear on your screen during the session and are gone when it ends. Google processes this audio under its Gemini API terms for paid services. TODO: link Google's Gemini API data-use terms and confirm their retention period.

If we add end-of-session feedback, we'll keep only the short list of corrections it produces (which may quote phrases you said), and you'll be able to delete it from your account.

Who processes your data

• Supabase: accounts and the database
• Stripe: payments and billing
• Cloudflare: lesson audio storage and delivery
• Vercel: website hosting
• Google Cloud: speaking practice (the Gemini API and our relay server)

We don't sell your data or use it for advertising.

Cookies and analytics

We use one cookie, to keep you signed in. Analytics, if enabled, are cookieless and don't identify you.

How long we keep it

Account, progress and speaking-usage records are kept while you have an account. Billing records are kept as long as tax law requires. Delete your account and we delete your account data within TODO days, except records we must keep by law.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Contact TODO: contact email. TODO: add jurisdiction-specific rights (e.g. GDPR, CCPA) after legal review.