Privacy policy

We collect information you provide and information generated when you use the service:

• Account information: your name, email address, verification status, account identifiers, and profile changes. If you choose email/password sign-in, we store a password hash rather than your password in readable form.
• Google sign-in information: your Google account identifier, name, email address, verification information, and profile image when available, together with authentication information needed to connect and protect your account.
• Learning information: the words and modules you practise, your submitted answers, results, hints and examples viewed, practice timing, progress, and review history. This lets us save your place and adapt future practice.
• Security and technical information: session identifiers, IP addresses, browser/device information, request timing, and operational or error information used to run and secure the service.
• Communications: support emails and any content reports or feedback you submit, including the information you choose to include.

We use your information for the purposes connected with the service you request:

• Create and maintain your account, authenticate you, and manage your profile and sessions.
• Save practice activity, assess answers, show progress, and schedule personalised review.
• Send account-related emails, including verification, welcome, password recovery, and password-change notifications.
• Respond to support requests, investigate reported content, and maintain the accuracy and reliability of the app.
• Prevent abuse, protect accounts, troubleshoot problems, and meet applicable legal obligations.

Google sign-in is optional. You can use email/password sign-in instead. When you choose Google, we use the identity information Google shares to create or identify your account, connect your sign-in method, and provide account-related communications. We do not receive your Google password or request access to Gmail messages, Drive files, contacts, or calendars.

We do not sell Google user information, use it for advertising, or use it to train AI models. Its use and disclosure are limited to the account features described here, necessary service providers, security, and legal requirements. We follow the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can manage Google connections in your Google Account. In our account settings, you can disconnect Google after adding another sign-in method. Disconnecting or revoking Google access does not itself delete your mellow lingo account or previously saved learning information.

We use essential authentication cookies to maintain your signed-in session and protect account actions. Blocking or clearing these cookies may sign you out or prevent account features from working. Learning progress is saved to your account on our servers rather than being kept only in your browser.

The current app does not include advertising trackers. Hosting and Google sign-in providers may use their own cookies or similar technologies for their services and security.

Pronunciation and read-aloud use your browser or device's speech-synthesis feature. We do not record your microphone or upload voice recordings through these features. Whether speech synthesis uses an online service depends on your browser, device, and chosen voice.

We do not sell or rent your personal information. We use service providers to deliver the app and the features described in this policy:

Providers process information needed for their role and may maintain their own security and operational records. We may also disclose information when required by law, to address fraud or security incidents, or to protect the rights and safety of users and the service. If the operator changes, any transfer of personal information must remain subject to applicable law and this policy, with additional notice or consent where required.

• Cloudflare delivers and hosts the website and processes network requests and related technical information.
• Railway hosts the API and database used for account information, authentication, and learning records.
• Resend delivers transactional account emails and receives recipient addresses and the message content needed to deliver them.
• Google provides optional sign-in and processes your interactions with its sign-in service under its own privacy policy.

Our providers operate in multiple countries, so information may be processed or stored outside British Columbia or Canada and may be subject to the laws of those countries. Contact us if you need more information about processing outside Canada.

We use account authentication, access restrictions, password hashing, and secure connections on the hosted service to protect information. No internet service can guarantee that information will always remain secure.

We retain account and learning records while they are needed to provide your account and saved progress. Other records may be retained for security, support, dispute resolution, or legal requirements. We do not currently apply a single automatic deletion period to all records. When information is no longer needed, we will delete it or make it no longer identifiable, subject to lawful retention requirements and backup recovery processes.

You can update your name, manage sign-in methods, and end active sessions in account settings. You can stop using the service or withdraw optional permissions, although withdrawing information required for authentication or saved progress may mean we cannot continue providing your account.

Contact [email protected] to request access to or correction of your personal information, a copy of your data, account deletion, or withdrawal of consent. Account deletion and data exports are handled through support; there is no self-service deletion or export button in the current app. We may verify your identity before acting and will respond within the time required by applicable law. Requests may be subject to lawful exceptions; we will explain any applicable limitations.

If you have a privacy concern, contact us first so we can address it. You may also contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, as applicable.

The service is intended for general vocabulary learning and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and arrange its removal. Users below the age of majority should have a parent or guardian's permission to use the service.

We will update this page and its date when our practices change. For material changes, we will provide additional notice and obtain consent where required before using information for a new purpose.

For privacy questions, concerns, or requests, contact mellow lingo in Vancouver, British Columbia, Canada. Please include the email associated with your account, but never send us your password.