Privacy Policy

1. Information We Collect

• Account Information — When you create an account, we collect your full name, email address, and password (stored securely using bcrypt hashing — never visible to us).
• Usage Data — We automatically collect learning progress (lessons completed, quiz scores, XP points), language preferences, and app usage patterns.
• Device Information — We may collect basic device information including device type and operating system version for app compatibility purposes.

2. Legal Basis for Processing (UK GDPR)

• Contract performance — to provide you with the App's features and your account.
• Legitimate interests — to improve the App and ensure security.
• Consent — for optional features such as push notifications.

3. How We Use Your Information

• Create and manage your account.
• Save and sync your learning progress across sessions.
• Send daily learning reminders (with your consent).
• Improve the App and its content.
• Respond to your support requests.
• We do NOT sell, rent, or share your personal information with third parties for marketing purposes.

4. International Data Transfers

FluentBee is operated from the United Kingdom. Your data is processed by Supabase Inc. (United States). This transfer is carried out under Standard Contractual Clauses (SCCs) approved by the UK ICO, ensuring your data receives adequate protection equivalent to UK GDPR standards.

5. Data Storage and Security

• Encrypted connections (HTTPS/TLS).
• Secure token storage on your device (iOS Keychain / Android Keystore).
• Row-level security ensuring you can only access your own data.
• Bcrypt password hashing.

6. Third-Party Services

We use the following third-party services to operate the App:

7. Children's Privacy

FluentBee is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@fluentbee.app.

8. Data Retention

We retain your personal data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. You may request deletion at any time by contacting support@fluentbee.app.

9. Your Rights Under UK GDPR

As a user you have the right to: access a copy of your data, correct inaccurate data, request erasure ("right to be forgotten"), receive your data in a machine-readable format, restrict how we use your data, object to processing based on legitimate interests, and withdraw consent at any time. To exercise any right, contact us at support@fluentbee.app. We will respond within 30 days. The same rights apply under EU GDPR and Brazil LGPD.

10. Data Breach Procedure

• Notify the UK ICO within 72 hours of becoming aware.
• Notify affected users without undue delay if there is a high risk to their rights.
• Document the incident internally in our Data Breach Register.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy in the App. Your continued use of the App after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us & Complaints

Data Controller: Iris Salgado | Email: support@fluentbee.app | ICO Registration: C1946406. We aim to respond within 5 business days. If unsatisfied, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.