Privacy Policy
Last updated: February 7, 2026
1. Information We Collect
Account Information
When you create an account, we collect your email address, display name, and profile image (if provided via OAuth). If you sign in through Google or Kakao, we receive basic profile information from those providers.
Usage Data
We collect anonymized usage analytics through PostHog, including pages visited, exercises completed, quiz scores, and feature usage. This helps us improve the learning experience.
Payment Information
Payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full card details. We store your Stripe customer ID and subscription status to manage your access.
Learning Data
We store your exercise progress, flashcard review history, word bank entries, leaderboard scores, and quiz results to provide personalized learning and track your progress.
2. How We Use Your Information
- To provide and personalize the learning experience
- To manage your account and subscription
- To send transactional emails (welcome, password reset, subscription updates)
- To improve the Service through aggregated analytics
- To prevent fraud and enforce our Terms of Service
3. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe - for payment processing
- PostHog - for anonymized product analytics
- Sentry - for error monitoring (no personal data, only error context)
- Resend - for transactional email delivery
- Neon - database hosting (your data is stored securely on Neon PostgreSQL)
4. Data Storage and Security
Your data is stored on servers in the United States (Neon PostgreSQL, Upstash Redis). We use HTTPS encryption for all data in transit and rely on our hosting providers' encryption for data at rest. Passwords are hashed using industry-standard algorithms via Better Auth.
5. Cookies
We use essential cookies for authentication (session tokens) and a guest identifier cookie for anonymous users. We do not use advertising or tracking cookies. PostHog analytics uses local storage, not cookies.
6. Your Rights
You have the right to:
- Access your data: view your profile, progress, and learning history
- Delete your account and all associated data by contacting support
- Export your learning data by contacting support
- Opt out of analytics by using a browser extension that blocks PostHog
7. Children's Privacy
Chamelingo is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
8. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized analytics data may be retained indefinitely.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice.
10. Contact
For privacy-related questions, contact us at privacy@chamelingo.com.