Privacy Policy

1. Information We Collect

We collect the following information:

• Account information: Email address, encrypted password.
• Profile data: Your name, target test date, target band score (provided by you).
• Learning data: Test responses (reading, listening, writing, speaking), placement results, vocabulary progress, mistakes notebook entries.
• Audio recordings: Speech recordings you make during speaking practice (stored securely in Supabase Storage).
• AI chat history: Messages you exchange with the AI tutor.
• Usage data: Basic analytics about feature usage (no third-party tracking beyond our service providers).

2. How We Use Your Information

Your data is used solely to:

• Provide personalized AI evaluation of your responses
• Track your progress and recommend study plans
• Maintain your account and authenticate logins
• Generate practice questions targeting your weak areas

We do not sell your data, share it with advertisers, or use it for marketing without consent.

3. Third-Party Services

To deliver the Service, your data is processed by:

• Supabase (authentication, database, file storage)
• Groq (AI question generation and evaluation — your writing/speech text is sent for processing)
• Vercel (web hosting)

These providers have their own privacy policies and are bound by data processing agreements where applicable.

4. Data Storage and Security

Your data is encrypted in transit (HTTPS) and at rest. Access is restricted via Supabase Row Level Security — you can only access your own data. Audio recordings are stored in a private bucket accessible only with your credentials.

5. Your Rights

You have the right to:

• Access your data (visible throughout the app)
• Edit your profile and content
• Delete your account and all data (via the "Delete Account" button in the sidebar)
• Export your data (contact us for a data export)
• Withdraw consent at any time by deleting your account

6. Data Retention

Your data is retained as long as your account is active. Upon account deletion, all associated data is permanently removed within 30 days (Supabase backup retention).

7. Cookies

We use minimal cookies necessary for authentication (Supabase session cookies). We do not use tracking or advertising cookies.

8. Children's Privacy

Wordly is not directed to children under 13. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us immediately.

9. International Users

By using Wordly, you consent to the transfer of your data to and processing in countries where our service providers operate. We comply with applicable data protection laws (GDPR for EU users, KVKK for Turkish users).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email.

11. Contact

For privacy questions or data requests, contact: sumeyyeygn@gmail.com