Privacy Policy

Last updated: May 19, 2026

This Privacy Policy explains what data PhraseWeaver collects, how it is used, and your rights regarding that data. By using PhraseWeaver you agree to the practices described here.

1. Data We Collect

• Account data: Email address, username, and password (stored as a salted hash).
• Billing data: Payment information is collected and processed directly by Stripe. We do not store your card number; we retain only a Stripe customer ID.
• Study activity: Islands you create or study, phrases, vocabulary exposure counts, pronunciation scores, study session timestamps, and spaced-repetition review history.
• Pronunciation recordings: Short audio clips you submit for pronunciation assessment. These are uploaded to DigitalOcean Spaces (US region, SFO2 data center) under a temporary path and are automatically deleted within 24 hours via a storage lifecycle rule.
• Generated audio: Text-to-speech audio clips generated for your study content. These are stored in DigitalOcean Spaces and are deleted when you delete the associated content or your account.
• IP address and usage data: Server logs record your IP address and request metadata for security and debugging purposes. Logs are retained for up to 30 days.

2. Third-Party Data Processors

We share your data with the following processors only as needed to deliver the service:

• Google Gemini API — Phrase text and pronunciation recordings are sent to Google's Gemini API for AI-assisted translation and automated pronunciation assessment. Google processes this data under its API Terms of Service.
• Google Cloud Text-to-Speech — Phrase text is sent to Google's Cloud TTS API to generate audio clips. Google processes this data under its API Terms of Service.
• Stripe — Payment processing. Stripe handles your card data and subscription billing. Stripe's privacy policy governs their use of your payment information.
• DigitalOcean Spaces — Audio files (both generated clips and temporary pronunciation recordings) are stored in DigitalOcean's object storage in the SFO2 (San Francisco) region.
• SendGrid — We use SendGrid to send transactional emails such as password reset links and study reminders. Your email address is shared with SendGrid for this purpose.

3. How We Use Your Data

• To operate and provide the language learning service
• To process subscription payments and send billing confirmations
• To send password reset emails and optional study reminders
• To generate AI translations and pronunciation assessments
• To generate and store text-to-speech audio for your study content
• To detect and prevent abuse or security incidents

4. Data Retention

• Pronunciation recordings in temporary storage are automatically deleted within 24 hours via a storage lifecycle rule.
• All other user data — including account details, study history, and generated audio — is retained until you delete your account.
• Server logs are retained for up to 30 days.
• Payment audit records (Stripe event IDs) are retained for 7 years as required by financial regulations.

5. Your Rights

You have the right to access, correct, and delete your personal data. You can delete your account and all associated data at any time from the Account page. On deletion, your profile, study history, and generated audio are permanently removed from our systems. Requests for data export or correction can be submitted to support@phraseweaver.com.

6. Cookies

PhraseWeaver uses a session cookie to keep you logged in and a CSRF cookie to protect form submissions. No third-party tracking cookies are used.

7. Children's Privacy

PhraseWeaver is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us at support@phraseweaver.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice in the application.

9. Contact

Questions or data requests? Email us at support@phraseweaver.com.