Privacy Policy

What we use and why

• Your account. Your username and password are needed to create and secure your account. Supabase handles sign-in and stores your password as a hash.
• Your practice. We save learning boards (including your native and study languages), lists, translations and mistake history to your account so you can keep practising on other devices. If you choose to import older study data from a browser, we copy the items you select. Check that they belong to you on shared devices.
• AI exercises. When you ask for AI-generated exercises, audio or feedback, we send OpenAI the words, answers or recordings needed for that request. The microphone is used only for speaking exercises when you press Record and grant permission. Recordings are sent when you ask for feedback or submit a spoken answer. We do not save the audio in your study history.
• Site operation. The site and its providers process technical information such as IP addresses, requests and errors to deliver pages, troubleshoot and limit abuse. Google receives your browser’s request when it loads the Nunito font.

Our UK GDPR legal basis for account data and learner submissions is providing the service you ask for under our terms (performance of a contract). We use technical data for our legitimate interests in operating and securing the website and limiting abuse.

Use a nickname if you prefer. Please leave names, school details and other private information out of your lists, answers and recordings. If you’re a child, ask a parent or carer before sending a recording.

Who helps us provide the service

Vercel hosts the site, Supabase provides sign-in and the database, and OpenAI processes requests for AI exercises. Our database is hosted in London. Providers and their suppliers may also process information outside the UK, including in the United States.

Where UK law requires protection for an overseas transfer, we rely on an applicable UK adequacy decision or contractual safeguards such as standard contractual clauses with the UK Addendum. You can write to us for details or a copy of the applicable safeguards.

Cookies and browser storage

Essential sign-in cookies keep your session active. They can stay in your browser for up to 14 days after sign-in or renewal. Sign out to clear the current session cookies.

Browser storage may hold old lists and mistakes, an import identifier, and new mistakes waiting to sync. Pending mistakes are normally removed from the browser after they sync. Other browser data remains until you clear it in your browser settings. Clearing it may remove unsynced or unimported work.

We do not use advertising or analytics cookies.

How long we keep information

We keep your account and saved practice data for as long as they’re needed to provide your account. You can ask us to delete them. We retain technical, backup or security records as needed to restore the service, investigate issues or meet legal obligations. OpenAI may retain some API request data for abuse monitoring, typically for up to 30 days. OpenAI API data controls

Your rights

You can ask to see, correct or delete your information, restrict its use, or receive a copy you can take to another service where the law gives you these rights. Write to Yoropi Ltd at the address above to make a request.

Right to object. You can object to processing based on our legitimate interests.

You can also complain to the UK Information Commissioner’s Office. Make a complaint to the ICO