Legal
Privacy Policy
Effective 2026-05-21. This policy explains what data VocaEasy handles and why.
1. Data we collect
Depending on how you use the service, we may process:
- account data such as email, name, profile image, and user ID;
- learning settings such as native language and English level;
- sentences, selected words, translations, examples, and lists;
- practice chat messages and generated practice replies;
- subscription status, plan, quota usage, and Stripe customer IDs;
- technical data such as logs, errors, IP-derived security data, and device/browser metadata;
- analytics events only when analytics consent is allowed.
2. Why we use data
We use data to:
- create and secure accounts;
- provide contextual vocabulary analysis and practice;
- store lists, exports, preferences, and usage limits;
- process subscriptions and billing;
- send transactional emails;
- detect errors, abuse, and security issues;
- understand product usage when analytics is accepted.
3. Legal bases
Where GDPR or similar laws apply, we rely on contract performance to provide the service, legitimate interests for security and reliability, consent for optional analytics cookies, and legal obligations for billing or compliance records.
4. Third-party providers
We use trusted providers to run the service. These providers process data only as needed for their role.
Account and authentication
Clerk
Payments and subscriptions
Stripe
Language processing
OpenAI
Hosting, database, and infrastructure
Vercel, Neon Postgres, Upstash Redis, Cloudflare
Email and support
Resend, Cloudflare Email Routing
Monitoring and analytics
Sentry, PostHog
5. Payments
Card details are handled by Stripe. We do not store full card numbers in our database. We store subscription and customer references needed to keep plan access in sync.
6. Language processing
Sentences, selected words, and practice messages may be sent to OpenAI to generate translations, explanations, examples, and practice replies. Avoid submitting sensitive personal data or confidential material.
7. Retention
We keep account and learning data while your account is active. Deletion requests are handled within a reasonable period, except for records we must keep for legal, billing, tax, security, or dispute reasons.
8. Your rights
Depending on your location, you may request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. Contact support@vocaeasy.com to exercise these rights.
9. International transfers
Some providers may process data in countries outside your own. When required, transfers rely on contractual, technical, and organizational safeguards offered by those providers.
10. Contact
For privacy questions or data requests, contact support@vocaeasy.com.