Privacy Policy

Kotobi — Privacy Policy Last updated: April 20, 2025

1. Who we are

Kotobi is a vocabulary learning application built and operated by Ali Calimli. If you have any questions about this policy, contact us at alicalimli76@gmail.com.

2. What data we collect

When you create an account and use Kotobi, we collect the following information:

Account & profile data

• Your name
• Your email address
• A profile photo URL (if you sign in with Google)
• Your native language and target language preferences

App usage data

• Vocabulary contexts and word lists you create
• Vocabulary items (native word, target word, mastery score)
• Training sessions you complete, including session titles and word references
• Daily streak and win streak records

We do not collect payment information at this time. We do not run third-party analytics trackers.

3. How we collect it

• Email/password sign-up — you provide your email and choose a password directly.
• Google OAuth — if you sign in with Google, we receive your name, email, and profile photo from Google. We do not receive your Google password.
• In-app activity — vocabulary items, contexts, and training sessions are created by you and stored on your account.

4. How we use your data

We use your data solely to:

• Create and maintain your account
• Sync and display your vocabulary lists and training sessions across devices
• Track your learning streaks and mastery progress
• Respond to support requests you send us

We do not sell your data. We do not use your data for advertising.

5. Who we share data with

Supabase — Our backend infrastructure (database and authentication) is powered by Supabase. Your data is stored on Supabase’s servers. You can review Supabase’s privacy practices at supabase.com/privacy.

Google — If you use Google sign-in, Google processes your authentication. You can review Google’s privacy policy at policies.google.com.

We share data with no other third parties.

6. Data retention

Your data is kept for as long as your account is active. If you delete your account, your profile and all associated data (contexts, vocabulary items, training sessions, streaks) will be permanently deleted from our database.

To request account deletion, email alicalimli76@gmail.com.

7. Security

Your data is protected by Supabase’s Row Level Security (RLS), meaning each user can only access their own data. Authentication is handled securely by Supabase Auth. We do not store passwords in plain text.

No system is 100% secure, and we cannot guarantee absolute security. We will notify you promptly if a breach affecting your data occurs.

8. Children

Kotobi is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

9. Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data upon request

To exercise any of these rights, email alicalimli76@gmail.com.

10. Changes to this policy

If we make meaningful changes to this policy, we will update the “Last updated” date at the top and may notify you via email. Continued use of Kotobi after changes means you accept the updated policy.