Privacy Policy

Last updated: 2 May 2026

LingoFlick ("we", "us") is a language-learning Chrome extension and web dashboard that lets you save vocabulary from web pages and review it with spaced repetition. This page explains what data we collect, how we use it, and your choices.

1. What we collect

• Saved vocabulary — the words you save from web pages, their context sentences, translations, definitions, and SRS state (review schedule, ease factor, repetition count).
• Anonymous device identifier — a random ID generated on first install, stored locally in your browser. This identifier is hashed (HMAC-SHA256) before being used as your user key on our server. We never see your real device ID.
• Email address — if you create an account (email + password sign-in via Supabase Auth) or purchase a Pro / Lifetime plan. Used for sign-in links, receipt delivery and review reminders (which you can disable any time).
• Payment information — handled entirely by Lemon Squeezy. We never see or store your card number. We receive only a customer ID and subscription status from Lemon Squeezy.
• Push subscription endpoint — if you opt in to review reminder notifications, your browser's push endpoint URL is stored so we can deliver reminders.

2. What we do NOT collect

• Your browsing history outside of words you explicitly save
• Page content other than the sentence around the word you saved
• Cookies for tracking or advertising
• Your name, address, phone number, or any government ID
• Analytics or behavioral telemetry (no Google Analytics, Segment, etc.)

3. How we use it

• To sync your vocabulary across devices when you install the extension on a new browser
• To compute when each word is due for review (SM-2 algorithm)
• To send you optional review reminders by email or web push
• To process subscription payments via Lemon Squeezy
• To translate words and generate definitions via OpenAI / Anthropic APIs (we send only the word + its sentence context, no other data)

4. Third parties

We share data only with these processors, only as needed:

• Supabase (PostgreSQL hosting) — stores your saved words and SRS state
• Lemon Squeezy — handles subscription billing and payment processing
• OpenAI — generates translations and definitions when you save a word
• Anthropic — generates sentence breakdowns (optional)
• Resend — sends review reminder emails
• Railway (server hosting) — runs our API

We do not sell your data and we do not share it with advertisers, data brokers, or any party not listed above.

5. Data retention

Your saved vocabulary stays in our database until you delete it from the dashboard or request account deletion. Lemon Squeezy payment records are kept for as long as legally required (typically 7 years for tax purposes). Push subscription endpoints are deleted automatically if delivery fails repeatedly.

6. Your rights

You can at any time:

• Export all your data from the dashboard (Settings → Export)
• Delete individual words or your entire library
• Cancel your subscription (Settings → Billing → Manage subscription)
• Request full account + data deletion by emailing [email protected] — we comply within 30 days
• Opt out of review reminder emails (link in every email)
• Opt out of push notifications (browser settings or extension popup)

If you are an EU/UK resident, you have additional rights under GDPR (access, rectification, portability, restriction). Contact [email protected] to exercise them.

7. Security

• All data in transit is encrypted with TLS 1.2+
• Database access is restricted by row-level security policies
• API requests are authenticated with HMAC-SHA256 tokens
• Service-role credentials are stored only in our server environment, never in the extension or browser

8. Children

LingoFlick is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has signed up, contact us and we will delete the account.

9. Changes to this policy

Material changes will be announced via in-app notice at least 30 days before they take effect. Minor wording fixes will be reflected by updating the "Last updated" date at the top.

10. Contact

Questions: [email protected]
Mailing address: available on request.