Privacy Policy

Last updated: April 21, 2026

This Privacy Policy describes how Tonelingo ("Tonelingo", "we", "us", or "our") collects, uses, and shares information when you use tonelingo.app (the "Service"). We aim to collect as little information as possible, to use it only for running the Service, and to never sell it.

Short version: We store the email you sign up with, the translations and learning data you choose to save, and nothing else. We don't sell your data, show ads, or track you across other sites. We send your input to third-party AI providers (Anthropic, ElevenLabs) to generate translations and audio — those providers process it on our behalf.

1. Who we are

The Service is operated by the Tonelingo team ("Operator"). You can contact us about this Policy at support@tonelingo.app.

2. Information we collect

2.1 Information you provide

Account information. When you create an account, we collect the email address and password you provide. Passwords are stored in hashed form by our authentication provider (Supabase) and are never visible to us in plaintext.
Learning content. When you use the Service, you may enter words, phrases, or sentences to translate, and you may save translations, streaks, check-ins, and language preferences. This content is stored so you can return to it across devices.

2.2 Information collected automatically

Technical logs. Our hosting provider (Cloudflare) automatically records basic request metadata — IP address, timestamp, user agent, requested URL — for security, abuse prevention, and reliability purposes. We do not use these logs to build advertising or behavioral profiles.
Local browser storage. The Service uses your browser's localStorage to cache your preferences (language pair, selected voice, theme), offline translations, and a session token so you don't have to sign in every visit. This data lives on your device and is cleared when you sign out or clear your browser storage.

2.3 Information we do not collect

We do not collect payment information (the Service is currently free). We do not use analytics cookies, advertising identifiers, or third-party tracking pixels. We do not ask for your name, phone number, or address.

3. How we use information

To create and maintain your account and let you sign in.
To provide the core translation, pronunciation, and saved-vocabulary features.
To sync your saved content across your devices.
To protect the Service against abuse, fraud, and technical failure.
To comply with legal obligations if we receive a valid legal request.

We do not use your content to train AI models, and we do not share your content with third parties except as described in Section 4.

4. Sub-processors and third-party services

To run the Service we rely on the following third-party providers, each acting as a data processor on our behalf:

Supabase — authentication and database hosting. Stores your email, hashed password, and saved learning content. (supabase.com/privacy)
Cloudflare — DNS, content delivery, and Workers hosting for the app and API. Processes request metadata for security and delivery. (cloudflare.com/privacypolicy)
Anthropic (Claude API) — generates translations and language explanations. Text you submit for translation is sent to Anthropic to produce a response; Anthropic's API terms prohibit using API inputs to train models. (anthropic.com/legal/privacy)
ElevenLabs — generates pronunciation audio. Text you request audio for is sent to ElevenLabs to synthesize speech. (elevenlabs.io/privacy-policy)

We select providers that offer reasonable security and privacy commitments. You are also bound by each provider's terms when you use the corresponding feature.

5. How we share information

We do not sell, rent, or trade personal information. We share information only:

With the sub-processors listed in Section 4, strictly to operate the Service;
If required by law, legal process, or a valid governmental request; and
In connection with a business transaction (e.g., merger or sale), in which case we will notify you through the Service or email before your information becomes subject to a different privacy policy.

6. Data retention

We keep your account and saved content for as long as your account is active. If you delete your account (see Section 8), we delete or anonymize your content within 30 days, except where we are required to retain it for legal, accounting, or security reasons. Technical logs are typically retained by our hosting provider for a short rolling window (generally 30 days or less).

7. Security

We use industry-standard safeguards to protect your information:

All traffic is encrypted in transit using HTTPS/TLS.
Passwords are hashed by Supabase using industry-standard algorithms.
Database access is restricted using Supabase Row Level Security so that you can only read and write your own content.
API keys to third-party providers are held only on our backend and never exposed to the browser.

No method of transmission or storage is perfectly secure. If we become aware of a breach that affects you, we will notify you as required by applicable law.

8. Your rights and choices

You can:

Access or export your data. Email us at support@tonelingo.app and we will send you a copy of the account data we hold about you.
Correct your data. Update your email or saved content directly in the app, or contact us.
Delete your data. You can delete your account directly in the app (tap the user menu → Delete account), which immediately removes your account and saved content. You may also email us at support@tonelingo.app to request deletion — we will delete or anonymize your data within 30 days.
Clear local data. Sign out of the app or clear your browser's site data to remove locally cached content.

If you are in California, the EU, the UK, or another region with specific privacy rights, you may also have the right to object to certain processing, to restrict processing, or to lodge a complaint with your local data protection authority. Contact us at support@tonelingo.app and we will respond within a reasonable time.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International users

The Service is hosted in the United States and data may be processed by our sub-processors in other countries. By using the Service you understand that your information may be transferred to and processed in countries other than your own.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will provide additional notice (for example, by posting a notice in the app or sending an email). Your continued use of the Service after changes become effective means you accept the updated Policy.

12. Contact

Questions? Email support@tonelingo.app.