Privacy Policy

Last updated: December 2, 2025
Introduction
This Privacy Policy explains how Practy collects, uses, discloses, and safeguards your information when you use the web and mobile applications. Practy is committed to protecting user privacy and maintaining transparency about data practices.
Data Collection and Storage
Account Information
When creating an account, Practy collects:
•
Email address
•
Password (securely encrypted)
•
Display name (optional)
•
Profile photo (optional)
•
Authentication data through third-party providers (when using Apple or Google Sign-In)
•
Account creation timestamp
Learning Data
For each exercise attempt, the following data is recorded:
•
Language being practiced
•
Exercise type
•
User response
•
Correctness of response
•
Time taken to respond
•
Timestamp of attempt
•
Review scheduling data (for spaced repetition exercises)
Custom Vocabulary Data
When adding vocabulary from media sources, additional metadata is stored:
•
Source information (song title, video title, book name)
•
Artist, album, or channel names
•
Context (lyrics or subtitle lines containing the word)
•
Thumbnails and source URLs
Other Data
The following data is additionally recorded:
•
User behavior within exercises and the app
•
User subscription behavior
•
User feedback and support requests
•
Exercise language data (customizations and custom lists)
Data Retention
Practy implements an automatic data retention policy where:
•
Exercise attempts are retained for 12 months
•
Older exercise data is automatically removed to maintain system performance
•
Core account information is retained as long as the account is active
•
Fraud prevention data is retained for 2+ years
How Your Information Is Used
The collected information is used to:
•
Create and manage user accounts
•
Track and display learning progress
•
Schedule reviews for spaced repetition
•
Provide personalized exercise experiences
•
Maintain and improve services
•
Make decisions about future features
•
Analyze usage patterns and performance metrics
•
Prevent subscription fraud
Data Security
Practy implements several security measures to protect user data:
•
Passwords are securely encrypted
•
User inputs are sanitized to prevent injection attacks
•
Email addresses are validated before processing
•
Secure authentication
•
Transaction-based data updates to ensure data integrity
Third-Party Services
Practy utilizes the following third-party services:
•
Firebase Authentication for account management
•
Firebase, Firestore and Google Cloud Storage for user data storage
•
Google BigQuery for analytics data storage
•
Google Sign-In for alternative authentication
•
Apple Sign-In for alternative authentication
•
Apple App Store for subscription management on iOS
•
RevenueCat for mobile subscription management
•
Stripe for payment processing on web
•
ACRCloud for song recognition
•
OpenSubtitles for TV and movie subtitles
•
Translation APIs (OpenAI, DeepL, Google Translate) for vocabulary processing
User Rights and Choices
Users have the right to:
•
Access their personal information
•
Update profile information (email, display name, password)
•
Request password resets
•
Delete their account and associated data
Local Storage
Minimal data is stored in the browser’s local storage, including:
•
Theme preferences
•
Language preferences
•
Site customizations (toggles and settings)
Changes to This Privacy Policy
This Privacy Policy may be updated as new features are developed or as required by law. Users will be notified of any material changes to this policy.
Contact Information
For privacy concerns, please contact Practy at support@practy.app or through the feedback form on the website.
Additional Notes
•
Data retention practices are regularly reviewed and updated
•
Data collection practices are maintained with transparency and aligned with service needs