Privacy Policy

We only collect information necessary to provide our services:

1. Account information: Email address, nickname/avatar (optional). We use Supabase as our backend service; your account data is stored and managed by Supabase.

2. Learning data: Words you add, vocabulary books, study records, SRS review data, etc. This data is stored in the Supabase database and associated only with your account.

3. AI configuration: AI provider API keys you configure. These are encrypted with AES-256-GCM and stored on the server; the encryption key is managed via environment variables and cannot be read directly.

4. Device and log information: To ensure service quality and security, we may record your device model, OS version, IP address, and operation logs.

We use collected information strictly in accordance with applicable laws and our agreement with you, for the following purposes:

1. To provide core learning features: word management, vocabulary books, review reminders, AI-enhanced learning, etc.

2. Account management: registration, login, authentication, password reset.

3. Multi-device sync: syncing your learning data across devices.

4. Service improvement: continuously improving product features and user experience.

5. Security: detecting and preventing fraud, abuse, and other security risks.

This App provides AI-powered learning features (such as word definitions, example sentences, story generation, AI tutor conversations, etc.). When using these features:

1. You can configure your own AI provider (OpenAI / Anthropic / Gemini / custom compatible endpoint) and corresponding API Key.

2. When calling AI features, relevant data (words, context, learning content, etc.) is sent to the AI provider you selected to generate results.

3. If you use your own API Key, related costs and data handling are subject to that AI provider's terms of service.

4. We do not use your learning data to train our own models, nor do we sell it to third parties.

We do not sell your personal information to any third party. We may share your information only in the following circumstances:

1. With your explicit consent.

2. With necessary service partners: such as Supabase (database and authentication), Vercel / Cloudflare (hosting). These partners are bound by strict data protection agreements.

3. As required by laws and regulations, or by mandatory requirements from government authorities.

4. When necessary to protect the legitimate rights and interests of us and our users.

1. Your data is primarily stored in the Supabase cloud database, with physical security provided by Supabase.

2. Sensitive information (such as AI API Keys) is encrypted on the server using AES-256-GCM.

3. All data transmission uses HTTPS encrypted channels.

4. We employ industry-standard security measures to protect your data, including but not limited to access control, encrypted transmission, and regular security audits.

5. Despite these reasonable and effective measures, please understand that due to technical limitations and potential malicious means, we cannot guarantee 100% information security at all times.

You have the following rights regarding your personal information:

1. Access: You can view and manage your profile in "Account Settings".

2. Correction: You can modify your nickname, avatar, and other personal information at any time.

3. Deletion: You can choose "Delete Account" in "Account Settings"; we will delete all your personal data (including vocabulary books, study records, AI configuration, etc.).

4. Withdrawal of consent: You can withdraw your consent by disabling features or deleting your account.

5. After account deletion, except as otherwise required by laws and regulations, we will anonymize or delete your personal information.

1. This App uses browser storage (localStorage / IndexedDB) for theme and language preferences, login state, and analytics consent choices to provide core functionality and improve your experience.

2. After you actively consent, we load Google Analytics 4 (traffic and usage analytics) and Microsoft Clarity (heatmaps and session replay). They may use cookies, local storage, and similar technologies to process page visits, device and browser type, approximate region, clicks, scrolling, and similar interaction data.

3. We do not intentionally send your email, password, words, learning content, AI conversations, or API keys to these analytics services. Clarity session replay is used to analyze interface interactions, not to read your learning content.

4. Analytics data is processed by Google and Microsoft under their respective privacy policies and may be stored outside your country or region.

5. Analytics is disabled by default. You may decline on first visit or change your choice at any time under "Settings" - "About" in the Web app. After withdrawal, we stop future analytics and attempt to remove related analytics cookies on the current domain.

6. Declining analytics does not affect core learning, synchronization, or account features.

This App is primarily intended for adult learners. If you are under 14 years old, please read this policy with your guardian and use our services only with your guardian's consent. If we discover that we have collected personal information from a child without guardian consent, we will promptly delete the relevant data.

We may update this privacy policy from time to time due to business adjustments or legal requirements. The updated policy will be posted on this page, and material changes will be notified to you via in-app notification or other appropriate means.

If you have any questions, comments, or suggestions about this privacy policy, or wish to exercise your rights, you can contact us through:

• In-app: go to "Settings" - "About" - "Feedback & Support"

• GitHub: submit an issue to the word-base repository

We will respond as soon as possible after receiving your feedback.