Privacy Policy

Last updated: August 6, 2026

This Privacy Policy explains how Lugha ("the App", "we", "us") collects, uses, and protects your information when you use our mobile application.

1. Information We Collect

Account Information: When you create an account, we collect your email address and a securely hashed password, managed through our backend provider (Supabase Authentication).

Learning Data: We store the vocabulary words you save, your learning progress (review history, streaks, ratings), and any custom words or sentences you add. This data is linked to your account so it syncs across your devices.

User-Submitted Content: If you use the "Extract" feature to add vocabulary from a YouTube video, we process the video's publicly available transcript to identify vocabulary words. We do not store the full video or transcript beyond what's needed to generate your word list.

Technical Information: Standard technical data (such as IP address and device type) may be logged automatically by our backend and hosting providers for security and reliability purposes.

2. How We Use Your Information

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Third-Party Services

We use the following third-party services to operate the App:

These providers process data on our behalf and are bound by their own privacy and security practices.

4. Data Storage and Security

Your data is stored on secure servers provided by Supabase, with access restricted to your own account through row-level security. We take reasonable technical measures to protect your information, but no method of electronic storage is 100% secure.

5. Data Retention and Deletion

We retain your account and learning data for as long as your account is active. The App gives you two self-service options, plus the option to contact us directly:

Reset Everything (learning data only): Open your Account settings and select "Reset Everything." This permanently deletes your saved words, learning progress, and streak history from our servers, as well as related data stored on your device. This action cannot be undone. Your account itself (your email and login) is not deleted, and you will remain signed in after the reset.

Delete Account (full deletion): Open your Account settings and select "Delete Account." This permanently and immediately deletes your account itself — including your email, login credentials, and all associated learning data (saved words, streaks, and progress) — from our servers. This action cannot be undone, and you will not be able to sign in with that account again.

Request by Email: Alternatively, you may request deletion of your account and all associated data by contacting us at ibra.alsubaie.arch@gmail.com. We will process such requests within a reasonable timeframe.

6. Children's Privacy

The App is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, use the in-app options described above, or contact us at ibra.alsubaie.arch@gmail.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

ibra.alsubaie.arch@gmail.com