Privacy Policy

Effective date: November 6, 2026

This policy explains what Wordkite English collects, why, who else handles it, and the choices you have. Wordkite is run from Brazil by Wordkite English, which is responsible for your data. Questions and requests: wordkiteenglish@gmail.com.

The short version

We collect what we need to run your account and help you learn.
We don't sell your data, show ads, or use advertising cookies. Our visitor stats don't use cookies either.
We send your answers to an AI provider to tutor you, but not your name or email address.
You can delete your account and data yourself at any time, in Settings.

What we collect

Account details: your email address, your name, and your password, which is stored only in hashed form.
Learning settings: your level, daily goal, the language you chose for your tutor, and whether you want the daily word email.
Learning data: your answers and whether they were correct, your mistakes, the explanations written for you, lesson progress, points, streaks and study time.
AI practice: the questions the AI writes for you, and how many AI credits you use each day.
Saved words: the words you save to review later.
Problem reports: if you report a problem with a question, we keep your report and any note you write, linked to your account, so we can review it.
Feedback: if you rate a lesson or send us a message about what's missing, we keep it, linked to your account, so we can improve Wordkite.
Messages to the tutor: what you write when you ask the AI tutor a question, while the conversation is in progress. We don't store chat history after you leave the page.
Technical details: your timezone, so that goals and streaks follow your day. Our providers also keep standard technical logs, such as IP addresses and browser details, and we see overall visitor stats.

We don't ask for sensitive data, such as your health or religion, so please don't include it in your answers or messages. On the home page, the sentence you write under the word of the day stays in your browser. In your account, it's sent to our AI provider to check it, and it isn't saved. Your placement test answers aren't saved either.

How we use it, and why we're allowed to

To provide the service you signed up for: running your account, saving your progress, and providing lessons, practice and tutoring.
For our legitimate interests: keeping Wordkite secure, preventing abuse, applying plan limits, and fixing and improving the service.
To meet legal duties: answering requests from authorities, and keeping records the law requires.
With your consent, where it's needed: you can withdraw it at any time, which doesn't affect what happened before.

We email you about your account, such as confirmation and password reset links. The daily word email is optional: we only send it if you turn it on, every email has an unsubscribe link, and you can also turn it off in Settings. We don't put tracking images in it. We don't send other marketing emails today, and if we ever do, you'll be able to opt out.

AI processing

To write questions, check answers and tutor you, we send OpenAI the relevant question, your answer or message, your level and tutor language, and, for study plans, a summary of your results. We don't send your name or email address with these requests, and we ask OpenAI not to store its responses. OpenAI may keep requests for a limited time under its own terms, for example to detect abuse. Please don't include personal information in your answers or messages to the tutor.

AI decides automatically whether some written answers are correct, and this affects your points and progress. It has no legal effect on you, but it can be wrong. If you think a decision was wrong, write to us and a person will review it.

Who else handles your data

Supabase: database and sign-in.
OpenAI: AI features, as described above.
Render: website hosting.
Resend: sending emails, such as confirmation and password reset links, and the daily word if you turn it on.
Cloudflare: our domain name, and the security check on the sign-in and sign-up forms, which looks at technical details from your browser to tell people from bots. Cloudflare also gives us visitor stats, such as how many people visit each page and which country they come from, without cookies and without identifying you.

We share data with these providers only so they can run these parts of Wordkite. We may also share data if the law requires it, or to protect the rights and safety of our students and the service. We don't sell your data.

Data outside your country

Wordkite has students around the world, and we and our providers may process data in other countries, including Brazil and the United States. Those countries may have different privacy laws from yours. Where the law requires it, we rely on legal safeguards for these transfers, and you can ask us about them.

Cookies

We use only the cookies needed to keep you signed in and to complete a password reset. The security check from Cloudflare may also store technical information it needs to work. We don't use advertising or analytics cookies, so we don't show a cookie banner.

How long we keep it

We keep your data while your account is active. You can delete your account and learning data at any time in Settings, or by writing to wordkiteenglish@gmail.com. We keep only what the law requires, and copies in our providers' backups and logs may last a limited time before they're removed.

How we protect it

Connections to Wordkite are encrypted, passwords are stored only in hashed form, and each student's data is kept separate from other students'. No online service is perfectly secure, so we can't promise that nothing will ever go wrong. If a security incident could seriously affect you, we'll tell you and the authorities as the law requires.

Your rights

Depending on where you live, laws such as Brazil's LGPD or the EU's GDPR give you rights over your data. You can ask us to:

Confirm whether we hold your data, and give you access to it.
Correct data that's wrong or out of date. You can change your name and learning settings yourself in Settings.
Delete your data, or limit or object to how we use it.
Give you a copy of your data in a format you can take elsewhere.
Tell you who we've shared it with.
Withdraw any consent you've given.

You can download a copy of your data and delete your account yourself in Settings. For anything else, write to wordkiteenglish@gmail.com from the email address on your account. We'll reply as soon as we can, within the time the law requires. You can also complain to your data protection authority. In Brazil, that's the ANPD.

Children and teenagers

Wordkite isn't intended for children under 13. Students who are minors should use it with the permission of a parent or guardian. If you believe a child under 13 has created an account, write to us and we'll delete it.

Changes

If we make important changes to this policy, we'll update the effective date and let you know before they apply. See also our Terms of Use.

Contact

For privacy questions and requests, write to wordkiteenglish@gmail.com.