Privacy Policy

1. Data we collect

Account data:

• email address;
• display name;
• phone number, only if you sign in with a phone number;
• time zone and language settings.

Learning activity: your exercise attempts and course progress. We use them to save your progress and to show your statistics.

Security data: we do not store your IP address in raw form. We keep only a salted hash of it for security purposes, such as preventing abuse and protecting sign-in, and we keep it for 30 days.

Subscription data: if you buy Typelin Pro, Polar sends us your subscription status, plan, amount, currency and billing period.

Support messages: if you email us, we receive your email address and the contents of your message.

2. Sign in with Google

If you sign in with Google, we receive only your email address and your name from Google. We do not get access to your contacts, files or any other Google data. Google processes the sign-in under its own privacy policy.

3. Data we do not collect

• payment card details, which only Polar sees;
• raw IP addresses;
• geolocation;
• device fingerprints.

4. How we use your data

• to create and run your account and save your learning progress (performance of our contract with you);
• to give you access to Typelin Pro based on your subscription status (performance of contract);
• to send transactional emails, such as sign-in codes and important account notices (performance of contract);
• to keep the Service secure and prevent abuse (our legitimate interests);
• to answer your support requests (performance of contract and our legitimate interests);
• to meet our legal obligations (legal obligation).

5. Payments

Payments are handled by Polar Software, Inc., our Merchant of Record. Polar processes your card details. We never see or store them. From Polar we receive only your subscription status, plan, amount, currency and billing period. Data that Polar collects during checkout is covered by Polar's privacy policy.

6. Browser storage and cookies

To keep you signed in, we store a refresh token in your browser's localStorage, together with a short-lived access token and a cached copy of your profile so the app loads faster. All of these are removed when you sign out.

We also use localStorage for your interface preferences, such as theme and sound settings, and a small cookie to remember your interface language.

We do not use advertising or tracking cookies, and we do not use any analytics or tracking scripts. On the sign-in page, Google's sign-in script is loaded only to make Sign in with Google work.

7. Service providers

We share personal data only with the providers we need to run the Service, and only as far as needed for their task:

• Hetzner Online GmbH: server hosting in the EU (Germany and Finland);
• Cloudflare, Inc.: DNS, content delivery and media storage;
• Resend: transactional emails;
• Google LLC: Sign in with Google;
• Polar Software, Inc.: payments, as Merchant of Record.

Our servers are in the EU. Some of these providers may process data outside your country, including in the United States, under their own data protection terms.

We may also disclose data if the law requires it, for example in response to a valid legal request.

8. How long we keep data

• Account data: for as long as your account exists.
• Learning activity: detailed attempts and progress are kept for 13 months. After that they are aggregated into summary statistics.
• Hashed IP addresses: 30 days.
• Support emails: for as long as needed to resolve your request.

9. Deleting your account

You can delete your account at any time in your profile settings. After you request deletion, there is a 30-day grace period. If you sign in again during that time, your account is restored.

When the grace period ends, your email address, phone number and name are deleted, and your progress data is deleted or anonymized so that it can no longer be linked to you.

10. Your rights

Depending on where you live, you have the right to:

• access your personal data and get a copy of it;
• correct inaccurate data;
• delete your data;
• object to processing based on our legitimate interests.

To get a copy of your data or to use any of these rights, write to support@typelin.com from the email address linked to your account. We will respond within 30 days. You can change your name and settings yourself in your profile. You also have the right to complain to your local data protection authority.

11. Children

The Service is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us at support@typelin.com and we will delete it.

12. Security

We protect your data with encryption in transit (HTTPS), hashing of IP addresses and limited access to production systems. No online service can be perfectly secure, but we work to protect your data and fix problems quickly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If a change is material, we will let you know by email or in the app before it takes effect.

14. Contact

Questions about privacy? Write to us at support@typelin.com.