Privacy Policy
Last Updated: October 16, 2026
1. Information We Collect
We collect information in two ways:
- Guest Users (Unauthenticated): If you use the app without logging in, your quiz scores and word practice history are stored exclusively in your local browser’s
localStorage. No personal identification is collected or transmitted to our servers. - Registered Users (Authenticated via Google or Microsoft): If you choose to sign in to sync progress across devices, we receive basic authentication details from your chosen OAuth provider:
- Email address
- Display name
- Profile avatar URL (if provided by Google/Microsoft)
- Learning Data: Quiz session scores, accuracy rates, and spaced-repetition performance for practice vocabulary.
2. How We Use Your Information
Your information is used strictly to provide and improve your language learning experience:
- To save and display your completed quiz scores and streaks.
- To track vocabulary mastery and generate your personalized "Words to Review" list.
- To authenticate your session securely across multiple devices.
We do not sell, rent, monetize, or trade your personal data with any third parties or advertisers.
3. Data Storage & Security
Your data is stored in a secure cloud PostgreSQL database managed via Supabase, hosted on enterprise cloud infrastructure. Security measures include:
- Encryption in Transit: All communication between your browser and our services is encrypted using HTTPS / TLS.
- Row Level Security (RLS): Our database enforces strict row-level security policies at the database engine level, ensuring that users can only view, modify, or delete their own learning records.
- No Password Storage: We authenticate exclusively through industry-standard OAuth 2.0 (Google and Microsoft Entra ID). We never handle, store, or have access to your account passwords.
4. Your Rights & Data Deletion (GDPR & CCPA)
You have full control over your personal data:
- Right to Access: You can view all learning data associated with your account directly in the "My Stats" dashboard.
- Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your account and all associated quiz history at any time. To request data deletion, email us at dev@basicrussian.org, and we will purge your records within 14 business days.
- Local Storage Cleansing: Guest users can erase their local browser history anytime by clearing site cookies and storage in their browser settings.
5. Third-Party Services
To deliver this application, we work with trusted infrastructure providers:
- Google Identity & Microsoft Entra ID: Used for secure single sign-on authentication.
- Supabase: Provides managed PostgreSQL database hosting and session management.
- Netlify: Provides global static web hosting and serverless functions.
6. Children’s Privacy
Basic Russian is designed as a general educational resource. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal information, please contact us for immediate removal.
7. Changes to This Policy
We may update this Privacy Policy from time to time to reflect improvements to our app. Any updates will be posted here with a revised "Last Updated" date.
8. Contact Us
If you have any questions or requests regarding your privacy, please contact:
Basic Russian
Attn: John Bendfeldt
Email: dev@basicrussian.org
Website: https://basicrussian.org