Last updated: March 30, 2025

Introduction

This Privacy Policy explains how Practy collects, uses, discloses, and safeguards your information when you use the web and mobile applications. Practy is committed to protecting user privacy and maintaining transparency about data practices.

Data Collection and Storage

Account Information

When creating an account, Practy collects:

• •Email address
• •Password (securely encrypted)
• •Display name (optional)
• •Profile photo (optional)
• •Authentication data through third-party providers (when using Apple or Google Sign-In)
• •Account creation timestamp

Learning Data

For each exercise attempt, the following data is recorded:

• •Language being practiced
• •Exercise type
• •User response
• •Correctness of response
• •Time taken to respond
• •Timestamp of attempt
• •Review scheduling data (for spaced repetition exercises)

Other Data

The following data is additionally recorded:

• •User behavior within exercises and the app
• •User subscription behavior
• •User feedback and support requests
• •Exercise language data (customizations and custom lists)

Data Retention

Practy implements an automatic data retention policy where:

• •Exercise attempts are retained for 12 months
• •Older exercise data is automatically removed to maintain system performance
• •Core account information is retained as long as the account is active

How Your Information Is Used

The collected information is used to:

• •Create and manage user accounts
• •Track and display learning progress
• •Schedule reviews for spaced repetition
• •Provide personalized exercise experiences
• •Maintain and improve services
• •Make decisions about future features

Data Security

Practy implements several security measures to protect user data:

• •Passwords are securely encrypted
• •User inputs are sanitized to prevent injection attacks
• •Email addresses are validated before processing
• •Secure authentication
• •Transaction-based data updates to ensure data integrity

Third-Party Services

Practy utilizes the following third-party services:

• •Firebase Authentication for account management
• •Firebase, Firestore and Google Cloud Storage for user data storage
• •Google Sign-In for alternative authentication
• •Apple Sign-In for alternative authentication
• •Apple App Store for subscription management on iOS
• •Stripe for payment processing on web

User Rights and Choices

Users have the right to:

• •Access their personal information
• •Update profile information (email, display name, password)
• •Request password resets
• •Delete their account and associated data

Local Storage

Minimal data is stored in the browser's local storage, including:

• •Theme preferences
• •Language preferences
• •Site customizations (toggles and settings)

Changes to This Privacy Policy

This Privacy Policy may be updated as new features are developed or as required by law. Users will be notified of any material changes to this policy.

Contact Information

For privacy concerns, please contact Practy through the feedback form on the website.

Additional Notes

• •Data retention practices are regularly reviewed and updated
• •Data collection practices are maintained with transparency and aligned with service needs