Legal

Privacy Policy

What we collect, why, who processes it, and your rights. Short and plain on purpose.

Last updated: [date of publication]

Who we are

Fluent Air is a flashcard app for learning languages, run by Gabriel Domingos, Montreal, Canada. Contact for anything about your data: [privacy contact email].

What we collect

DataWhyKept
Email address, and password (stored only as a secure hash by our sign-in provider)Create your account, sign you in, send sign-in linksUntil you delete your account
Your study content: decks, cards, notes, notebook words, tags, images and audio you add or generate, files imported from AnkiProvide the app and sync it across your devicesUntil you delete it or your account
Study history: your answers to cards and when you gave them, settingsSchedule reviews (spaced repetition) and show your statisticsUntil you delete your account
AI usage records: which AI feature you used, which provider, how much, and whenPlan quotas, cost control, billing[24 months], then deleted or anonymised
Technical logs: IP address, device/browser type, request times and errorsSecurity, preventing abuse, fixing bugsA few days
Payment data (when paid plans launch)Charge your subscriptionHandled by our payment processor; we only see the plan, status and last digits of the card

We do not sell your data, show ads, or use advertising or analytics trackers. The app keeps your sign-in session and a copy of your content in your browser so it works offline; these are not tracking cookies.

Who processes your data

These service providers only get what they need to do their task:

ProviderWhat it doesData it receivesWhere
SupabaseDatabase, sign-in, file storageAll the data above except logsBrazil (São Paulo)
CloudflareHosts the app and our API, draws AI imagesTechnical logs; the short English scene description used to draw an imageWorldwide
Google (Gemini API, paid tier)Example sentences, translations, corrections, word explanationsThe word you look up, your optional note about where you saw it, a few sentences and words already in your deck, the card text you ask it to check or explainUnited States
[Voice provider]Reads sentences aloudThe sentence or word to be read[region]
Pixabay / PexelsFree stock photosA 1–3 word search term (no account data)Germany / Canada
[Stripe] (when paid plans launch)PaymentsYour email, payment detailsUnited States

These providers may process data outside your country. Where the law requires it (for example Quebec's Law 25, GDPR or Brazil's LGPD), we rely on the providers' contractual safeguards. We use AI plans in which providers do not use your content to train their models.

Tip: don't put sensitive personal information (health, passwords, ID numbers) in your cards. Card text is sent to the AI providers when you use AI features.

Legal bases

We process your data to provide the service you signed up for, to keep it secure and prevent abuse, and to meet legal obligations such as tax records for payments.

Your rights

You can also complain to your data protection authority: in Quebec the Commission d'accès à l'information, elsewhere in Canada the Office of the Privacy Commissioner, in the EU/UK your national authority, in Brazil the ANPD.

Children

Fluent Air is not meant for children under [16]. If you believe a child gave us data, contact us and we will delete it.

Security

Data travels encrypted (HTTPS). Each user can only reach their own data (row-level security in the database, private file storage). No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.