Privacy Policy

1. Who we are

KalbaLab is a free Lithuanian language learning platform operated as a personal project. For privacy questions reach us at armansalekofficial@gmail.com.

2. What we collect

• Account data — full name, email, hashed password (or Google OAuth identifier).
• Learning progress — words you've marked, lessons completed, quiz scores, XP, streak counter, daily goal.
• Preferences — chosen UI language, theme (light/dark), audio autoplay preference. Stored in your browser's localStorage.
• Translation cache — translations you trigger via the "native column" are cached in your browser's localStorage so we don't hit the translation API repeatedly.
• Server logs — standard request logs (IP, user-agent, URL) kept short-term for debugging and abuse prevention.

3. What we do NOT collect

• We don't track you across other sites.
• We don't use ad networks or data brokers.
• We don't sell your data, ever.
• We don't collect payment information (the app is free).

4. Third-party services we use

• Supabase — hosts our database (account & progress) and authentication. Their privacy policy applies to data at rest on their servers.
• Google Translate (translate.googleapis.com) — used for native-language column on the Vocabulary page. Only the English source word is sent; your account is never associated with translation requests.
• MyMemory Translation API — backup translation provider, same scope as above.
• Google Text-to-Speech — generates Lithuanian audio. Only the Lithuanian word/sentence is sent.
• Buy Me a Coffee — optional donation link on our footer. Their privacy policy applies if you choose to donate.

5. Cookies & local storage

We use a single first-party cookie / localStorage entry to remember your sign-in session and preferences. We do not use advertising, analytics, or tracking cookies. See our Cookie Policy for the full list.

6. How long we keep data

Account data is stored as long as your account exists. If you delete your account (via the Profile page or by emailing us), all associated learning progress is permanently removed within 30 days. Server logs are deleted after 30 days.

7. Your rights

Under EU GDPR (Lithuania is in the EU), you have the right to:

• Access — get a copy of your data.
• Correction — fix anything inaccurate.
• Deletion — close your account and remove all your data.
• Export — receive your data in a portable format.
• Object / restrict processing.

To exercise any of these, email armansalekofficial@gmail.com. We respond within 30 days.

8. Children

KalbaLab is intended for adult learners. We don't knowingly collect data from children under 16. If you believe a child has signed up, contact us and we'll remove the account.

9. Changes to this policy

If we materially change how we handle data, we'll update the "last updated" date and, where required, notify you by email.