What we collect

• Account: your email address, a display name if you give one, and your password (kept only as a secure hash by our sign-in provider). If you sign in with Google, we receive your Google email and name.
• Learning: your lessons and attempts, progress, streaks, points, mistakes, word-list progress, settings and preferences.
• Country: the country you choose when you set up your account, and the country your connection appears to come from, which our hosting provider tells us when you open the upgrade page, a locked lesson or word list, or start a payment. We use that only to pick the price that applies to you.
• Payments: when you buy Premium we keep a record of the order (plan, price, amount, status and dates) and the reference from our payment partner. Your card or wallet details are entered on our payment partner's page and never reach us. If you pay with Binance Pay we also keep what Binance shows us about your transfer: its transaction ID, time, amount and coin, the note you wrote (the order code), and your Binance ID and display name as Binance reports them. While the Binance Pay payment page is open we also record, so we can fix payment problems, when it was opened and left, how long it stayed open, whether you copied the ID or the order code, your approximate location (the country, and the city where available), your time zone and language, and the kind of device and browser. This record does not include your IP address. We never see your Binance password or wallet.
• Messages: the reports and emails you send us, and our replies.
• Ratings: if you rate the app, your stars, your comment, the lesson you had just finished and your language. If you are signed in we keep it with your account and may answer you at your account email; if not, you can leave an email so we can answer you. We may show a rating and its comment on our website, never with your name or email, and only after we have approved it.
• Technical and usage: basic error and performance information, simple events about what you do in the app (such as finishing a lesson or opening the upgrade page) which we store ourselves, and settings kept in your browser, such as language and theme, your progress if you don't have an account, and a cookie that lasts one hour and remembers which lesson you were on when you started a payment, so we can take you back to it.

How we use it

• To provide the lessons and save your progress.
• To process purchases, activate Premium and show you the right price.
• To send the emails you would expect: a welcome, a receipt when you buy Premium, account notices such as Premium ending, reminders and milestones you can switch off in Settings, and replies to your messages.
• To fix problems, protect the service from abuse and improve the lessons.

Who helps us run SentenceStep

Each of these receives only what it needs to do its job:

• Supabase: our database and sign-in.
• DigitalOcean: the servers that run SentenceStep, including a small one in Germany that reads the Binance Pay transfers we receive.
• Cloudflare: sits in front of it to keep it fast and safe, and tells us your approximate country from your connection.
• Wayl: payments. Wayl is an independent company: what you give them on their page, such as your name, phone number and card or wallet details, is handled under Wayl's own terms and privacy policy.
• Binance: only if you pay with Binance Pay. Binance is an independent company: the transfer is made in your Binance app under Binance's own terms and privacy policy, and we read the incoming transfers of our own account to match them to your order.
• Resend: sending emails.
• Where enabled: Sentry for error monitoring, and Cloudflare Turnstile to check that sign-ups come from a person.
• Google: only if you choose “Continue with Google”. If you rate the app, your rating and comment are saved in our database and, as a backup, in a spreadsheet we control.
• Your browser's push service: only if you turn on notifications.

What we don't do

We don't sell your personal data, we don't show ads, and we don't share your data with advertisers.

How long we keep it

Your account and learning data stay until you delete your account. Payment records are kept for as long as accounting and legal obligations require, even after an account is deleted. Reports and emails you send us are kept so we can help you and improve the service.

Your choices

In Settings you can download your data as a file, change your email and notification preferences, turn push notifications on or off, and delete your account. To correct your data or ask about it, email us.

Security

Your data is stored with Supabase over encrypted connections, access is limited to what the service needs, and your card details never pass through our servers. No online service can promise perfect security, but we take care to protect yours.

Changes

If we change how we use your data, we will update this page and its date.

Contact

Questions about your data: support@sentencestep.com