Privacy Policy

1. Information we process

Account information includes your email address, securely hashed password, account status, display name, profile picture and login sessions. We do not store your LearnBit password in plain text.

Learning and content information includes your learning and native languages, saved words and sentences, notes, study and review progress, and books, text, media links, subtitles or files that you choose to import, upload or submit for processing. The information involved depends on the features you use.

Operational and security information includes request times, IP addresses, browser or device information, errors and records needed for authentication, rate limiting, troubleshooting and service operation. Information you voluntarily send to support is used to address that request.

Optional product analytics records page categories, feature interactions, language codes, membership tier and coarse completion or duration groups. Analytics does not include your email address, saved words or sentences, subtitle text, book titles, search text, passwords or access tokens.

2. Google sign-in data

Google sign-in requests only the openid, email and profile scopes, which provide your Google account identifier, verified email address, name and profile picture. We use this information to create or match your LearnBit account, sign you in and display your profile. A matching verified email address may be associated with an existing LearnBit account.

Signing in with Google does not give LearnBit access to your Gmail messages, Google Drive files, contacts, calendar or private YouTube data. We do not store your Google password. Google authorization codes and access tokens are used to complete sign-in; LearnBit then uses its own login sessions.

Information obtained through Google APIs is used only to provide and maintain user-facing account and sign-in features and necessary security protections. We do not sell this information, use it for advertising profiles, or use it to train general-purpose AI models. Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Access to or disclosure of Google user data is limited to applicable situations permitted by Google's requirements, such as providing the service, your explicit consent, addressing security issues, legal obligations or a legally compliant business transfer.

3. How information is used

We use information to register and authenticate accounts, support password recovery, save and synchronize study materials, manage account entitlements, provide dictionary, translation, AI analysis or speech features you request, maintain security and respond to support requests.

Third-party content and reusable language-processing results may be stored as shared service resources. Your personal saved items, notes and learning state are handled by account. Avoid submitting identity documents, financial details, other people's private information or other highly sensitive content to learning or AI features that do not need it.

We do not sell your personal information or use Google sign-in data for targeted advertising.

4. Service providers and sharing

Hosting and networking: our main application servers are located in the United States. Cloudflare provides proxying, TLS, security and content delivery. These providers process network requests and technical information needed to perform those services.

Google: provides optional account sign-in, product analytics and transactional email delivery. Product analytics uses Google Analytics 4 with advertising storage, advertising personalization and Google Signals disabled. When you use Google translation or pronunciation features, selected text and necessary language parameters may be sent to Google. Your browser also connects to YouTube/Google when you use embedded YouTube content.

Language and AI: tokenization and hover dictionaries send relevant text, words and language parameters to Dioco. AI definitions, sentence analysis and translation send the words, sentences or related content needed for the requested feature to the configured AI provider. The current production AI provider is DeepSeek.

Speech and transcription: when the relevant features are enabled and used, necessary text or audio may be processed by Microsoft Azure Speech, Speechmatics or server-side models. Not every implemented feature is always enabled. Signing in with Google does not grant these providers access to your Google account.

Some third-party requests are made by our servers and others directly by your browser. Direct requests typically disclose your IP address, browser information and relevant request parameters to the recipient. Third-party providers process data under their own policies. We share information needed for the requested function and do not guarantee third-party availability.

5. Storage, security and international processing

Account and learning records are stored in a database; uploaded files and processing artifacts are stored in object storage. We use measures including HTTPS, account access controls, password hashing and restricted configuration access. No network or storage system can guarantee absolute security.

Our main hosting location is the United States. Cloudflare and third-party providers may process requests in other countries or regions. Your information may therefore be transferred, stored or processed outside your country. We will handle applicable legal requirements relating to these activities.

Retention depends on what is necessary to provide the service, manage accounts, protect security, resolve disputes and meet legal obligations. Processing artifacts and caches may be removed. Different categories of information and backups may be deleted at different times; closing an account does not mean that every copy is immediately physically erased.

6. Your choices and deletion requests

You can view or change available profile and learning settings and manage saved items and content through existing product features. You may request access, correction, export or deletion of your information by emailing [email protected]. We may need to verify account ownership and will respond according to applicable law and the scope of your request.

Deleting your account in settings disables the account, revokes login sessions and clears primary account identity information. Related learning content, third-party sign-in associations, security records and backups may not be immediately physically deleted. Contact us with a specific request for further deletion; records that must be retained by law may be kept for that limited purpose.

You can revoke LearnBit's access in your Google account's third-party connections settings. Revoking Google access and deleting your LearnBit account are separate actions. Revocation does not automatically delete learning materials already stored in LearnBit.

You may choose not to use optional Google sign-in, AI, translation or speech features. A feature may not work if you do not provide the information it requires.

You can disable anonymous product analytics in LearnBit settings. Disabling analytics does not affect account, learning, subtitle, reader or payment features.

7. Browser storage and external content

LearnBit uses local storage, session storage and offline browser databases to keep login state, preferences, reading caches and data needed for synchronization. Clearing this storage may sign you out or remove local content that has not yet synchronized.

Cloudflare, Google/YouTube and other external services you use may use their own cookies or similar technologies. You can manage these through browser and provider settings. Blocking necessary storage may prevent related features from working.

8. Children and younger users

LearnBit is not directed to children under 13. If your location requires a higher age for independent use or consent to processing personal information, follow that requirement and obtain parental or guardian consent when required. Contact us if you believe a child has provided personal information contrary to these requirements so we can investigate and address it.

9. Updates and contact

We may update this policy and its effective date when the service or its data practices change. We will provide separate notice or obtain consent for material changes where required by law.

For privacy, Google data-use or deletion questions, email [email protected]. Describe the account and request involved, but do not send passwords or app passwords.