Privacy Policy

1. Information We Collect

We collect the following types of information:

a) Account Information

When you create an account or sign in via Google OAuth, we collect your name, email address, and profile picture as provided by your identity provider (e.g. Google). We use Supabase for authentication and database storage.

b) Usage Data

We automatically collect information about how you interact with BhasaLearn, including: pages visited, lessons completed, streaks, quiz scores, XP earned, learning progress, and feature usage patterns. This data is used solely to improve the product and your learning experience.

c) Content You Provide

When using IRIS AI, you may upload documents (PDFs, DOCX files, images) or paste text as study materials. This content is processed to generate AI study sets, flashcards, and responses. We do not permanently store your uploaded documents beyond the current session unless you explicitly save them to a notebook.

d) Voice & Audio

The voice-to-text feature (powered by Groq Whisper) temporarily processes audio recordings on our servers. Audio is not stored after transcription is complete.

e) Technical Data

We collect standard web server logs including your IP address, browser type, device type, operating system, referring URL, and timestamps. This is used for security monitoring and analytics.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our language learning platform and AI workspace
• Personalise your learning experience (e.g. adaptive lesson recommendations, streaks)
• Process AI queries and generate study materials in IRIS AI
• Send you product updates, lesson reminders, or important account notices
• Analyse usage patterns to improve features and fix bugs
• Ensure platform security and prevent abuse
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data to train AI models without your explicit consent.

3. Third-Party Services

We use the following third-party services that may collect or process your data:

Google Analytics uses cookies and may track your interactions across sessions. You can opt out via Google's opt-out browser add-on.

4. Cookies & Local Storage

We use cookies and browser local storage for the following purposes:

• Authentication: Supabase stores your session token in local storage under the key bhasalearn_session.
• Theme preference: Your dark/light mode preference is stored in local storage under bhasalearn_theme.
• Learning progress: Lesson streaks, XP, and other game state may be stored locally to provide offline resilience.
• Analytics cookies: Google Analytics sets cookies to distinguish users and track sessions.
• Advertising cookies: Google AdSense may set cookies to serve personalised ads based on your browsing behaviour.

You can disable cookies in your browser settings. Note that disabling cookies may affect your ability to sign in or maintain your learning streak.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain data for legal or regulatory purposes.

AI conversation history stored in IRIS AI notebooks is retained until you delete it from your account. Uploaded files processed for AI analysis are not stored beyond the session unless saved.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Opt-out of analytics: Use Google's opt-out tools or configure your browser.

To exercise any of these rights, contact us at support@bhasalearn.com.

7. Children's Privacy

BhasaLearn is designed to support students of all ages, including school-age children. However, we do not knowingly collect personal information from children under 13 without verifiable parental consent, in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@bhasalearn.com and we will promptly delete such information.

8. Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Supabase Row Level Security (RLS) to ensure users can only access their own data
• Server-side API keys — no sensitive secrets are exposed in the client-side code
• Regular security reviews and dependency updates

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective Date” at the top of this page and, where appropriate, notify you by email or via an in-app notice. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: