The short version: We collect only what we need to run the app. We don't sell your data. We don't show you ads. Your learning data stays yours.
Who we are
Comprehenzo is a language learning application developed by InteractDev. We can be reached at privacy@comprehenzo.com.
What we collect
We collect the following information when you use Comprehenzo:
- Account information — your email address (or Google account identifier if you sign in with Google), and the date you created your account.
- Learning data — your language and level preferences, session history, scores, streak count, and question-level answer data. This is used to power spaced repetition, recommendations, and mastery tracking.
- Communication preferences — your choices about which emails, push notifications, and (if you opt in) text messages you want to receive. Each consent change is recorded with a timestamp, the source of the change (e.g., signup, settings update, unsubscribe link, SMS STOP reply), and the IP address and user-agent of the request, for legal record-keeping under TCPA and CAN-SPAM.
- Phone number — only if you explicitly opt in to SMS notifications. We collect and store your mobile phone number along with a verification flag indicating you confirmed ownership via a 6-digit code.
- Push notification token — if you enable push notifications in the iOS or Android app, we store an Expo push token issued by Apple or Google, used to deliver notifications to your device.
- Usage data — app errors and technical logs used to diagnose and fix bugs. These logs may include device type, app version, and error stack traces.
- Product analytics, including session replay — interaction events (which screens you visit, which buttons you tap, session completions) and visual session recordings, collected through PostHog. Session replay masks all text inputs and password fields. We use this only to improve the app — to see where users get stuck and which features are valuable. You can turn this off at any time in Settings → Notifications & Emails → Analytics, on a per-device basis; the off switch stops all event capture and replay locally going forward.
We do not collect your name, physical mailing address, or payment information directly. (Payment information for subscription purchases is handled entirely by Stripe — see Third-party services below.)
How we use your information
Your data is used exclusively to provide and improve Comprehenzo:
- Authenticating you and maintaining your session
- Storing and displaying your learning progress
- Generating personalized session recommendations using spaced repetition algorithms
- Sending you the emails, push notifications, and text messages you have explicitly opted in to receive — and never anything else marketing-related
- Sending transactional messages (receipts, password resets, SMS verification codes) regardless of marketing preferences, since these are necessary to provide the service
- Diagnosing and resolving technical errors
We do not use your data to train AI models, sell to third parties, or serve advertising.
Email and SMS communications
We send several distinct categories of messages, each with its own opt-in:
- Email — streak reminders, learning tips, launch news, and occasional promotions. Opt-in is collected at signup or in Settings → Notifications & Emails inside the app. Every marketing email includes a one-click unsubscribe link and our physical mailing address as required by CAN-SPAM. Unsubscribe requests are processed immediately.
- Push notifications — daily practice reminders, streak warnings, milestone celebrations, and new-content alerts. Delivered through Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. You can disable push at any time in your device settings or in Settings → Notifications & Emails.
- SMS text messages — only with your explicit, separate opt-in via a dedicated screen, and only after you verify ownership of the phone number with a 6-digit code. SMS is used solely for streak reminders and launch alerts. Message frequency varies. Message and data rates may apply. You can reply STOP at any time to unsubscribe from all SMS, or HELP for help. Your SMS opt-in is recorded with timestamp, source, and IP address for TCPA compliance.
We do not share your phone number or email address with third parties for marketing purposes. SMS opt-in data is never shared with affiliates or other companies.
Third-party services
Comprehenzo uses the following third-party services to function:
- Supabase — database and authentication. Your account data and learning history are stored in Supabase's infrastructure. See Supabase's Privacy Policy.
- Anthropic — AI-generated audio transcripts and comprehension questions. Text prompts are sent to Anthropic's API to generate session content. No personally identifiable information is included in these prompts. See Anthropic's Privacy Policy.
- Google Cloud Text-to-Speech — converts generated text to audio. Text content is sent to Google's TTS API. See Google's Privacy Policy.
- Google Sign-In — optional authentication method. If you choose to sign in with Google, we receive your Google account email and a unique identifier. See Google's Privacy Policy.
- Resend — transactional and marketing email delivery. Your email address and the message content are sent to Resend for delivery. See Resend's Privacy Policy.
- Twilio — used to send SMS verification codes and SMS notifications if you opt in. Your phone number and message content are transmitted through Twilio. See Twilio's Privacy Policy. Phone numbers and SMS opt-in data are not shared with third parties or affiliates for marketing purposes.
- Apple Push Notification service / Firebase Cloud Messaging — used to deliver push notifications to your device on iOS and Android, respectively. We send a device-specific push token (issued by Apple or Google) along with the notification content.
- Stripe — payment processing for subscriptions and lifetime purchases. We never see or store your full card number; Stripe handles payment data directly. See Stripe's Privacy Policy.
Data storage and security
Your data is stored on Supabase's servers, which are hosted on AWS infrastructure. Data in transit is encrypted using TLS. We use Row Level Security (RLS) policies to ensure your data is only accessible to you.
We retain your data for as long as your account is active. If you delete your account, your data will be deleted within 30 days.
Your rights
You have the right to:
- Access the data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your learning data in a portable format
- Update or withdraw your communication preferences at any time, in app Settings, by clicking unsubscribe in any email, or (for SMS) by replying STOP to any text message
To exercise any of these rights, contact us at privacy@comprehenzo.com.
When you delete your account, your account data and learning history are removed within 30 days. We retain consent audit-log records — without your account identifier — for the period required by applicable law (TCPA records are typically retained for at least 4 years), with your email and (if applicable) phone number kept solely as a legal record of when consent was given or withdrawn.
Children's privacy
Comprehenzo is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of Comprehenzo after changes constitutes acceptance of the updated policy.
Contact
Questions about this Privacy Policy? Contact us at privacy@comprehenzo.com.