Privacy Policy

Last updated: May 5, 2026

Philongo ("we", "our", "the app") is a language learning application. This policy explains what data we collect, why we collect it, and how we protect it.

1. Data We Collect

Anonymous users (no account):

• All data stays on your device. We do not collect, transmit, or store any personal information.
• Learning progress, flashcard state, and preferences are saved locally on your phone using an on-device database.

Registered users (with account):

• Email address and password (hashed) for authentication
• Learning progress: lesson completions, quiz scores, flashcard review state, streaks, XP, and badges
• This data is synced to our servers so you can restore it if you change devices

Data we never collect:

• Location data
• Contacts, photos, or files
• Advertising identifiers
• Browsing history

2. How We Use Your Data

• To provide the language learning service (lessons, flashcards, progress tracking)
• To sync your progress across devices (registered users only)
• To send transactional emails (account verification, password reset)
• To detect and prevent abuse (rate limiting, captcha)

We do not use your data for advertising, profiling, or selling to third parties.

3. Data Storage and Security

• Local data is stored on your device using SQLite, accessible only by the app
• Cloud data (registered users) is stored on Supabase servers in the European Union (Ireland)
• All data transmission uses TLS encryption (HTTPS)
• Passwords are hashed using bcrypt before storage
• Database access is protected by Row Level Security (RLS): each user can only access their own data

4. Third-Party Services

We use the following third-party services:

• Supabase (authentication and database): Privacy Policy
• Resend (transactional email): Privacy Policy
• hCaptcha (bot protection): Privacy Policy

We do not use any analytics, advertising, or tracking SDKs.

5. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Object to data processing
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

6. Data Retention

• Your data is retained as long as your account exists
• When you delete your account, all associated data is permanently removed from our servers within 30 days
• Anonymous users: no data leaves your device, so there is nothing to delete on our end

7. Children

Philongo is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the app or via email. The "Last updated" date at the top indicates the latest revision.

9. Contact

For any questions about this privacy policy or your data, contact us at:

[email protected]