Privacy Policy

Last updated: 10 May 2026

TL;DR. SlovLearn stores your Google account info (email, name, UID) and your learning progress in Firebase, so your flashcards stay synced across devices. When the app crashes we send anonymized error reports (no IP, no email) to Sentry so we can fix bugs. We don't sell your data, we don't show ads, and we don't track you across the web. You can delete your account and all your data at any time.

Who we are

SlovLearn ("the App", "we", "us") is a language-learning application using spaced repetition. The App is operated as an independent project by the developer based in Ljubljana, Slovenia. You can reach us at wintersword@gmail.com.

What data we collect

1. Account information (when you sign in)

SlovLearn requires sign-in with Google. From your Google account we receive:

Your email address
Your display name
Your Google profile picture URL
A unique user ID (Firebase UID) generated by Firebase Authentication

We do not receive your Google password.

2. Learning data

While you use the App, we store:

Which flashcards you have studied, marked as known, or are still learning
Spaced-repetition state for each card: due date, ease factor, current interval, repetition count
Your selected target language (Slovenian / English) and CEFR levels (A1–B2)
Your subscription status (isPremium flag)
Custom decks you create and AI-generated cards (if you use the "Add cards with AI" feature)

3. Technical data

Firebase logs basic technical information for security and abuse prevention: IP address (briefly, by Google), authentication events, timestamps. We don't run our own analytics, we don't use Google Analytics, we don't use Facebook Pixel, and the App contains no advertising SDKs.

4. Crash reports and error diagnostics

To find and fix bugs, the App sends anonymized crash reports to Sentry (Functional Software Inc., GmbH for EU traffic) when something goes wrong. A crash report includes:

The error message and JavaScript stack trace
Your Firebase UID (so we can correlate multiple reports from the same user when debugging — but we never link this back to your name or email)
A short trail of recent in-app actions ("breadcrumbs"): which screens you opened, which buttons you pressed (no card content, no personal text)
Technical context: app version, browser/Android version, device model

We have explicitly disabled IP address collection in Sentry (sendDefaultPii: false). Sentry does not receive your email, name, or any flashcard content.

Crash data is processed in the EU (Sentry's Frankfurt region, ingest.de.sentry.io) and retained for up to 90 days. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — we need to know when the App breaks for users in order to fix it. You can opt out by emailing us; we will tag your UID to be excluded from future reports.

Where your data lives

Your account and learning data is stored in Google Firebase (Firebase Authentication and Cloud Firestore), in the europe-west multi-region (Firebase project slovlearn).

Crash reports are stored by Sentry in their EU region (Frankfurt, Germany).

The App's web version is hosted on a virtual machine in Microsoft Azure (Japan East). The Android version runs entirely on your device, communicating directly with Firebase.

If you use the "Listen" or text-to-speech features, audio is generated on demand by our backend and is not stored.

We are the data controller. Google (Firebase) and Sentry act as data processors on our behalf, under their respective Data Processing Agreements.

How we use your data

Sync your progress — so you can switch between phone and web and continue where you left off.
Provide the service — show you the right flashcards at the right time, calculate stats, gate Premium content.
Security — Firebase security rules prevent users from reading or modifying anyone else's data, including their own Premium status.

We do not use your data for advertising. We do not sell your data. We do not share your data with third parties other than our infrastructure providers: Google Firebase (account, sync, AI generation), Sentry (crash reports), and Google Play Billing (subscription processing).

Your rights (GDPR)

If you are in the EU/EEA, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and all associated data
Export your data in a machine-readable format
Withdraw consent by signing out and deleting your account
Lodge a complaint with your data protection authority (in Slovenia, the Information Commissioner)

To exercise any of these rights, email wintersword@gmail.com from the address tied to your account, or use the in-app "Delete account" option (in Settings — when available; until then, email us). We respond within 30 days.

Children

SlovLearn is not directed at children under 13 (or under 16 in jurisdictions where that is the relevant threshold). We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will delete the account.

Cookies

The web version uses essential cookies / local storage to keep you signed in (Firebase Auth tokens) and to cache your progress for offline use. We do not use tracking or advertising cookies.

Subscriptions and payments

If you purchase a Premium subscription through Google Play, payment is handled entirely by Google. We never see your card details. Google sends us a server-to-server confirmation that you are a paying user, and we set your isPremium flag accordingly. You can cancel any time in your Google Play account; your Premium access remains until the end of the paid period.

Data retention

We keep your data as long as your account exists. If you delete your account, all your data is removed from Firestore within 30 days. Backup snapshots may persist for up to 90 days before being permanently overwritten.

Changes to this policy

If we change this policy, we'll update the date at the top and notify users by email and in-app for material changes. Continued use of the App after a change constitutes acceptance of the new policy.

Contact

Questions or concerns? Email wintersword@gmail.com.