Privacy Policy

Last updated: September 30, 2026

learnsay.com is a language-learning app you can start for free. We collect as little as we can, we don't run ads, and we don't sell or rent your data to anyone. This page explains exactly what's stored and why.

Using learnsay.com without an account

You can learn without signing in. Your progress, streak, hearts and vocabulary history are then kept only in your own browser's storage on your device. We never see them, and clearing your browser data deletes them.

If you sign in with Google

Signing in syncs your progress across devices. From your Google account we receive and keep only:

• your Google account ID (a number that identifies your account),
• your display name, and
• your profile picture URL.

We do not store your email address or your Google password, and we can't see anything else in your Google account.

Linked to that account ID, we store your learning data: course and level progress, where you left off in a level, daily XP and streak, hearts, per-word vocabulary progress, and any custom courses you create. Your sign-in is remembered with a secure, http-only session cookie that lasts up to 30 days.

If you sign in with email

You can also sign in without Google: we email you a 6-digit code (sent through our email provider, Resend). For these accounts we keep your email address as your account identifier, plus the same learning data listed above. The code is stored only as a one-way hash and expires after 15 minutes. If you subscribe without signing in first, we create this kind of account for the email you enter at checkout. Your email address is never shown on the leaderboard: email accounts appear there as "Anonymous learner".

If you subscribe to learnsay Plus

Payments are handled by Stripe. We never see or store your card details. From the checkout we keep your email address, your Stripe customer and subscription IDs, your plan (monthly or yearly), its status and renewal date, so we know which levels to unlock. Stripe processes your payment details under its own privacy policy.

If you arrived through a partner's link, our affiliate provider (PromoteKit) sets a cookie that records which partner referred you, and that referral ID is attached to your subscription so the partner can be credited. Partners don't see your payment details.

What other people can see

• Weekly leaderboard: if you're signed in and earn XP, your display name, profile picture and weekly XP can appear on the public leaderboard.
• Custom courses: a course you create is private unless you choose to make it public. Public courses (their name, flag and questions) can be viewed by anyone with the link and may be indexed by search engines.

Your microphone and voice

Speaking exercises ask for microphone access. Your recording is transcribed entirely on your device by a speech-recognition model running in your browser. Audio is never uploaded to us or anyone else, and it isn't saved.

Pronunciation audio

Pronunciation audio is generated on your device too. The first time you use a language, your browser downloads the voice and speech models from public model hosts (Hugging Face and the jsDelivr CDN) and caches them locally. Those hosts see an ordinary download request from your IP address. For a few languages we may use your browser's built-in voices, which some browsers process on their own servers under the browser maker's privacy policy.

Diagnostics and analytics

• Diagnostic log: to fix bugs, the app records short technical events (for example "voice download succeeded" or "selected level 3") tagged with a random ID generated in your browser. They are not linked to your name or account, and only the most recent few thousand events are kept.
• Google Analytics: we use Google Analytics to understand how people find and use learnsay.com (pages viewed, rough location, device and browser type, and how you arrived). It sets cookies (such as _ga) and sends this usage data to Google, which processes it under Google's privacy policy. We don't send Google your name, email or learning data. You can opt out with Google's browser add-on or by blocking cookies for this site.
• Vercel Web Analytics: we also count page views using Vercel's analytics, which doesn't use cookies and reports only aggregated statistics.
• Google Fonts: the app's font is loaded from Google Fonts, which sees a standard font request.

Where data is kept

The app is hosted on Vercel, and signed-in learning data is stored in a Postgres database hosted by Neon. Both act as our service providers.

Keeping and deleting your data

We keep signed-in data while your account is in use. To see or delete everything stored for your account, email hello@learnsay.com from any address, tell us the display name you sign in with, and we'll take care of it. You can also revoke learnsay.com's access at any time in your Google account's security settings.

Children

learnsay.com isn't directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has signed in, contact us and we'll delete the account's data.

Changes

If this policy changes, we'll update the date at the top of this page. Significant changes will also be noted in the app.

Contact

Questions: hello@learnsay.com