Privacy Policy

1. Information We Collect

We collect the following information:

• Account information: Email address, encrypted password.
• Profile data: Your name, target test date, target band score (provided by you).
• Learning data: Test responses (reading, listening, writing, speaking), placement results, vocabulary progress, mistakes notebook entries.
• Audio recordings: With your permission, speech audio is processed for pronunciation assessment. You can choose assessment-only processing or private storage in Supabase Storage for up to 90 days.
• AI chat history: Messages you exchange with the AI tutor.
• Usage data: Basic product and funnel analytics, such as pages viewed and learning steps reached.

2. How We Use Your Information

Your data is used solely to:

• Provide personalized AI evaluation of your responses
• Track your progress and recommend study plans
• Maintain your account and authenticate logins
• Generate practice questions targeting your weak areas

We do not sell your data, share it with advertisers, or use it for marketing without consent.

3. Third-Party Services

To deliver the Service, your data is processed by:

• Supabase (authentication, database, file storage)
• OpenAI (AI question generation, transcription and evaluation — your writing, speech and audio may be sent for processing)
• Vercel (web hosting)
• Google Analytics and Microsoft Clarity (product usage and funnel analytics)

These providers have their own privacy policies and are bound by data processing agreements where applicable.

4. Data Storage and Security

Your data is encrypted in transit (HTTPS) and at rest. Access is restricted via Supabase Row Level Security — you can only access your own data. Audio recordings selected for retention are stored in a private bucket and are available only through short-lived authenticated links.

5. Your Rights

You have the right to:

• Access your data (visible throughout the app)
• Edit your profile and content
• Delete your account and all data (via the "Delete Account" button in the sidebar)
• Export your data (contact us for a data export)
• Withdraw audio-retention consent from your profile and delete individual saved recordings

6. Data Retention

Most account and learning data is retained while your account is active. Speaking audio selected for retention is kept for no more than 90 days and can be deleted earlier from your profile. Assessment-only audio is not added to your recording history. Upon account deletion, associated data is removed subject to service-provider backup retention.

7. Cookies

We use cookies and similar browser storage for authentication, preferences, product analytics, and session-quality measurement. We do not sell personal data or use third-party advertising cookies.

8. Children's Privacy

Wordly is not directed to children under 13. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us immediately.

9. International Users

By using Wordly, you consent to the transfer of your data to and processing in countries where our service providers operate. We comply with applicable data protection laws (GDPR for EU users, KVKK for Turkish users).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email.

11. Contact

For privacy questions or data requests, contact: sumeyyeygn@gmail.com