Privacy Policy — LectiFluentia

1. Who We Are

LectiFluentia is a language learning web application that allows users to upload texts in a foreign language, read them in an interactive reader, track vocabulary knowledge, and receive AI-generated word translations.

2. Information We Collect

2.1 Account Information (via Clerk): Authentication and identity management are handled by Clerk (clerk.com). When you register or sign in, Clerk collects your email address, your name (if provided), and OAuth profile data (if you sign in via a social provider such as Google). We receive a user identifier from Clerk and store a minimal user record in our database (user ID, preferred source language, preferred known language, and account creation date). We do not store passwords.

2.2 Content You Upload: When you upload a text file, we store the file content (plain text or Markdown), the title you assign to the text, the source language you select for the text, and the date of upload. Uploaded texts are private to your account. They are not shared with other users and are not used to train any model.

2.3 Word Ratings: As you read and grade words, we store word rating records containing the word (normalised form), the source language of the word, the rating you assigned (1, 2, 3, or starred), and the date of last update. Word ratings are private to your account.

2.4 AI Translation Data: When you click a word in the reader for the first time, we send the word (normalised form), the source language of the word, and your chosen known language to an AI translation provider. We do not send your identity, email address, or any text beyond the individual word and a short context snippet. Translation results are stored as a shared, anonymised cache shared by all users.

2.5 Usage and Technical Data: We may collect standard server-side technical data including IP addresses (processed by infrastructure and not persistently logged at the application layer), browser type and version, and error and diagnostic logs (retained for a short period for debugging). We do not currently operate client-side analytics.

3. How We Use Your Information

We use your information to provide and operate the Service (performance of contract), authenticate your identity and secure your account (performance of contract / legitimate interest), store your texts, word ratings, and learning progress (performance of contract), generate and cache AI-powered word translations (legitimate interest), diagnose errors and improve Service reliability (legitimate interest), and comply with legal obligations (legal obligation).

We do not use your data for automated decision-making or profiling in any way that produces legal or significant effects on you.

4. Sharing of Information

We do not sell your personal data. We do not share your data with third parties for advertising purposes.

We share data only in the following limited circumstances: Clerk receives your authentication data to manage sign-in and session management. Our AI Translation Provider receives individual words and language codes (not your identity) to generate translations. Infrastructure Providers process data on our behalf under data processing agreements. We may disclose data if required by law, court order, or to protect the rights and safety of users.

5. Data Retention

Account records, uploaded texts, and word ratings are retained while your account is active and deleted within 30 days of account deletion. AI translation cache records are retained indefinitely as they contain no personal data. Server error logs are retained for up to 30 days.

6. Your Rights

Depending on your location, you may have the right to access a copy of the personal data we hold about you, request correction of inaccurate data, request deletion of your account and all associated personal data, request a machine-readable export of your data, object to or request restriction of certain processing activities, and withdraw consent where processing is based on consent.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, the right to opt out of the sale of personal information (we do not sell personal information), and the right not to be discriminated against for exercising these rights.

To exercise any of these rights, contact us at the address in Section 10. We will respond within 30 days.

7. Data Security

We use industry-standard security measures to protect your data: all data is transmitted over HTTPS (TLS), authentication is managed by Clerk which implements industry-standard security controls, database access is restricted to application infrastructure only, and uploaded content is accessible only through authenticated, user-scoped API routes.

No method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your data but cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date shown at the top of this page. We encourage you to review this policy periodically.

10. Contact

If you have questions or requests regarding this Privacy Policy, please contact us at: LectiFluentia, Email: contact@lectifluentia.com