Sprakly
NOENRU

Privacy Policy

Effective from 28 April 2026.

Who we are

Sprakly is a personal language-learning service, built by the Sprakly team. It is in closed beta, free for participants, and not a commercial product.

For anything related to data processing, contact us at info@sprakly.com. You can also write to us directly in the app, in the support chat.

What data we receive and why

When you sign in with Google, you share:

  • Email — to sign you in and to contact you about the beta.
  • Name and avatar (if present in your Google profile) — shown in the admin view for convenience.

As you use the app, we store:

  • The words you tap and their translation — to build your personal vocabulary.
  • Reading and listening progress — to show what you have done.
  • Messages you send the AI tutor — so the tutor remembers the conversation.
  • Voice recordings on the listening page — processed once to check your retelling; not stored in our database.
  • Texts you upload — so you can return to them.
  • Answers to the short in-app surveys — used anonymously to improve the service and for grant reporting.
  • Messages and screenshots in the chat with the developer — for our communication.
  • A daily counter of AI-operation usage — so one user cannot exhaust the shared beta budget.

We do not collect date of birth, gender, physical address, phone number, biometrics, or your activity outside the app. There is no Google Analytics, no advertising trackers, and no tracking pixels. There is no payment data either — the service is free during the beta.

Who else processes your data

To make the service work, we pass some requests to established providers — each with its own privacy policy:

When text is sent for translation or pronunciation, the provider receives only the text itself — without your email, name, or any other identifier.

Cookies and tracking

We use only what is necessary to operate:

  • Authentication cookies from Supabase — without them you would be logged out between pages.
  • localStorage with your chosen interface language — so the site opens in the same language next time.

We use Vercel's cookieless, aggregate analytics to see which pages and features are used — no personal data, no cookies.

No advertising, no cross-site telemetry, no tracking pixels.

How long we keep it

All your data is kept while you use the service. If you stop using it and want your data deleted, email the address above and we will delete it within 14 days.

The cache of translations and audio pronunciations is anonymised (stored without any link to a user) and cannot be deleted, because it is shared by everyone in the beta.

Your rights

Under Norwegian data-protection law and the GDPR, you can:

  • Request a copy of your data in a machine-readable format.
  • Request deletion of your account and associated data.
  • Request correction of inaccurate data.
  • Withdraw your consent to processing — this automatically closes your account.

Submit any such request via the email above or the support chat in the app; we handle each one manually within 14 days.

Security

  • All connections are protected with TLS (HTTPS).
  • Database access is protected by Row-Level Security: one user cannot read another's data.
  • Access to the admin area is limited to a single email address.
  • No backups “on a USB stick” or on personal devices — only in Supabase.

Cross-border data transfer

Data is stored in the EU (Supabase Frankfurt). Some AI providers (OpenAI, Microsoft) have servers in the US. Standard Contractual Clauses (SCC) from the providers apply to such transfers.

Complaints

If you believe we handle your data incorrectly:

  • write to us directly at the email above;
  • contact the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no.

Changes

If this policy changes, we will notify all active beta participants 14 days before the changes take effect.

← Back to home