Privacy Policy

Last updated: February 9, 2026

FluencyFound ("we," "our," or "us") operates the FluencyFound language learning platform, available at fluencyfound.com and through our mobile applications (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account, we collect:

  • Account Information: Email address, display name, and password (managed through our authentication provider).
  • Profile Information: Your selected native language, target language(s), and learning preferences.
  • Payment Information: When you subscribe to a paid plan, payment details are processed directly by Stripe, Inc. We do not store your credit card number, CVV, or full payment card details on our servers. We retain only a Stripe customer identifier and subscription status.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Learning Progress Data: Lesson completion status, vocabulary review scores, spaced repetition scheduling data, streak counts, and accuracy statistics.
  • Usage Statistics: Daily practice time, session duration, features used, and interaction patterns.
  • Conversation Data: Messages exchanged during AI conversation practice sessions, including your input and AI responses. This data is used to provide the Service and may be used to improve our AI tutoring quality.
  • Device and Browser Information: IP address, browser type, operating system, device type, and screen resolution.
  • Log Data: Access times, pages viewed, referring URLs, and error logs.

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential Cookies: Authentication tokens and session management required for the Service to function.
  • Analytics Cookies: To understand how users interact with our Service and to improve the user experience.
  • Advertising Cookies: Google AdSense uses cookies to serve relevant advertisements to Free plan users. These cookies may track your browsing activity across other websites.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Personalize your learning experience, including lesson recommendations, spaced repetition scheduling, and AI conversation difficulty.
  • Process subscription payments and manage your account.
  • Send you transactional communications (e.g., account verification, password resets, subscription confirmations).
  • Send you optional marketing communications (which you may opt out of at any time).
  • Analyze usage patterns to improve our lessons, AI models, and overall Service quality.
  • Detect, prevent, and address technical issues, fraud, or abuse.
  • Comply with legal obligations.

3. Third-Party Services

We share information with the following third-party service providers, each of which has its own privacy policy governing the use of your data:

Supabase (Authentication and Database)

We use Supabase to manage user authentication and store account data. Supabase processes your email address and authentication credentials. Supabase's privacy policy is available at supabase.com/privacy.

Stripe (Payment Processing)

We use Stripe to process subscription payments. When you subscribe, Stripe collects and processes your payment card information directly. Stripe's privacy policy is available at stripe.com/privacy.

Mistral AI (AI Conversation)

We use Mistral AI to power our AI conversation practice feature. Your conversation messages are sent to Mistral AI for processing and response generation. We do not send your personal account information (name, email) to Mistral AI—only the conversation content and your target language context. Mistral AI's privacy policy is available at mistral.ai/terms.

Google AdSense (Advertising)

Free plan users may see advertisements served by Google AdSense. Google may use cookies and tracking technologies to serve personalized ads based on your browsing history. You can manage your Google ad preferences at adssettings.google.com. Google's privacy policy is available at policies.google.com/privacy.

Cloudflare (CDN and Security)

We use Cloudflare to deliver our Service securely and efficiently. Cloudflare may process your IP address and request metadata for performance optimization and security purposes. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:

  • Account Data: Retained for the duration of your account. Deleted within 30 days of account deletion request.
  • Learning Progress: Retained for the duration of your account to provide continuity in your learning experience.
  • Conversation Data: AI conversation logs are retained for up to 90 days after the session for quality improvement purposes, then automatically deleted.
  • Payment Records: Retained for 7 years as required by applicable tax and financial regulations.
  • Log Data: Automatically purged after 90 days.

5. Your Rights and Choices

5.1 Access and Portability

You have the right to request a copy of the personal data we hold about you. Upon request, we will provide your data in a structured, commonly-used, machine-readable format (e.g., JSON or CSV).

5.2 Correction

You may update your account information at any time through the Service settings. If you need to correct information you cannot update directly, please contact us.

5.3 Deletion

You may request deletion of your account and associated personal data by contacting us at [email protected]. Upon receiving a verified deletion request, we will delete your personal data within 30 days, except for data we are legally required to retain (such as payment records for tax compliance).

5.4 Opt-Out of Marketing

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by updating your notification preferences in account settings.

6. European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis for Processing: We process your data based on (a) your consent, (b) the necessity to perform our contract with you (providing the Service), (c) our legitimate business interests, or (d) compliance with legal obligations.
  • Right to Access: You may request a copy of all personal data we process about you.
  • Right to Rectification: You may request correction of inaccurate personal data.
  • Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: You may request that we limit how we use your data.
  • Right to Data Portability: You may request your data in a machine-readable format for transfer to another service.
  • Right to Object: You may object to processing of your data for direct marketing purposes.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. Children's Privacy (COPPA Compliance)

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at [email protected] so we can take appropriate action.

Users between the ages of 13 and 18 may use the Service only with the involvement and consent of a parent or legal guardian.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit using TLS/SSL.
  • Encryption of sensitive data at rest.
  • Regular security assessments and monitoring.
  • Access controls limiting employee access to personal data on a need-to-know basis.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or in-app notification.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

FluencyFound

Email: [email protected]

Website: fluencyfound.com