Last updated: April 17, 2026
This Privacy Policy explains how Practy collects, uses, discloses, and safeguards your information when you use the web and mobile applications and browser extension. Practy is committed to protecting user privacy and maintaining transparency about data practices.
Data Collection and Storage
When creating an account, Practy collects:
•
Password (securely encrypted)
•
Authentication data through third-party providers (when using Apple or Google Sign-In)
•
Account creation timestamp
For each exercise attempt, the following data is recorded:
•
Review scheduling data (for spaced repetition exercises)
When adding vocabulary from media sources, additional metadata is stored:
•
Source information (song title, video title, book name)
•
Artist, album, or channel names
•
Context (lyrics or subtitle lines containing the word)
•
Thumbnails and source URLs
When using the Practy browser extension, the following processing occurs:
•
The extension reads visible page text and video subtitles on supported sites to provide translations, definitions and allow word saving
•
Page content is processed locally in your browser and is not transmitted to servers
•
For videos without available subtitles, audio may be uploaded to Google Cloud Storage and processed by a speech-to-text service to generate subtitles. Audio files are used solely for transcription and are not retained long-term
The following data is additionally recorded:
•
User behavior within exercises and the app
•
User subscription behavior
•
User feedback and support requests
•
Exercise language data (customizations and custom lists)
Practy implements an automatic data retention policy where:
•
Exercise attempts are retained for 12 months
•
Older exercise data is automatically removed to maintain system performance
•
Core account information is retained as long as the account is active
•
Fraud prevention data is retained for 2+ years
How Your Information Is Used
The collected information is used to:
•
Create and manage user accounts
•
Track and display learning progress
•
Schedule reviews for spaced repetition
•
Provide personalized exercise experiences
•
Maintain and improve services
•
Make decisions about future features
•
Analyze usage patterns and performance metrics
•
Prevent subscription fraud
Practy implements several security measures to protect user data:
•
Passwords are securely encrypted
•
User inputs are sanitized to prevent injection attacks
•
Email addresses are validated before processing
•
Transaction-based data updates to ensure data integrity
Practy utilizes the following third-party services:
•
Firebase Authentication for account management
•
Firebase, Firestore and Google Cloud Storage for user data storage
•
Google BigQuery for analytics data storage
•
Google Sign-In for alternative authentication
•
Apple Sign-In for alternative authentication
•
Apple App Store for subscription management on iOS
•
RevenueCat for mobile subscription management
•
Stripe for payment processing on web
•
ACRCloud for song recognition
•
OpenSubtitles for TV and movie subtitles
•
Translation APIs for vocabulary processing
•
Chrome built-in Translator API for on-device translation in the browser extension
•
Access their personal information
•
Update profile information (email, display name, password)
•
Delete their account and associated data
Minimal data is stored in the browser’s local storage, including:
•
Site customizations (toggles and settings)
The browser extension additionally stores the following data locally on your device using IndexedDB and Chrome storage:
•
Translation and transliteration caches to reduce repeated lookups
•
Auto-generated subtitle caches for previously processed videos
•
Word preview and definition caches
•
Extension settings and preferences
Changes to This Privacy Policy
This Privacy Policy may be updated as new features are developed or as required by law. Users will be notified of any material changes to this policy.
For privacy concerns, please contact Practy at support@practy.app or through the feedback form on the website.
•
Data retention practices are regularly reviewed and updated
•
Data collection practices are maintained with transparency and aligned with service needs