Legal

1. What We Collect

Locally (on your device)

• Extension settings (theme, mode, whitelist, API keys)
• Captured English text snippets you write on websites (for the Analyzer feature)
• Flashcard data (Immersion Deck)
• Daily AI usage counters

Sent to our servers (Supabase)

• Account info (email, user ID)
• Your saved settings, writings, deck cards, and AI usage stats
• Everything is tied to your authenticated account only

Sent to OpenAI

• Text snippets you explicitly choose to analyze or validate
• Only when you provide your own OpenAI API key (Pro users)

2. Why We Collect It

• To sync your data across devices
• To run the English Analyzer and AI language detection
• To enforce plan limits (Free vs Pro)

3. Data Storage & Security

• All cloud data is stored in Supabase (PostgreSQL) with Row Level Security (RLS)
• Passwords are handled by Supabase Auth (bcrypt hashed)
• We do not sell or share your data with third parties
• OpenAI API calls are made directly from your browser using your own key

4. Your Rights

You can request deletion of all your data at any time by contacting us or deleting your account in the extension settings.

5. Contact

For privacy questions or data deletion requests, open an issue on the GitHub repository.