Privacy Policy

What we store

We keep the smallest set of data that lets Coral function:

• Your account. Your email address and whether it has been verified. If you choose “Sign in with Google,” we also store the name and profile image Google provides.
• Sign-in records. The login sessions that keep you signed in, each stored with the IP address and device/browser it was created from (standard security records), plus your credentials: a securely hashed password, or the sign-in tokens from Google if you use it.
• Data from using the app. The material you create in the app (decks, flashcards, extracted vocabulary, conversation transcripts, listening sessions, and links to any source content you import), along with your review history and a lightweight activity log, which power spaced repetition scheduling and your progress stats.

What we don't collect

We don't embed any third-party advertising or analytics trackers. We don't collect your location, contacts, or payment information. Support is entirely optional and handled through external links (Ko-fi / Patreon) that we don't process on your behalf, so we never see your card or billing details.

Service providers

Coralcan't generate conversations, read text aloud, or send you a sign-in email on its own. To provide those features, some of your data is processed by a small set of service providers acting on our behalf, who may only use it to perform their function. In almost every case we forward only the content itself (the text, audio, or image involved) without attaching your name, email, or account ID:

• Google (Gemini AI).What we send: your conversation messages, translation requests, card text, and any photo you send to turn into a card. Used to generate the AI's response.
• ElevenLabs and Google Cloud (text-to-speech). What we send: the text you ask the app to read aloud. Used to generate the audio.
• Apple and Google (speech recognition). What we send: your voice audio, when you speak to the app. Used to transcribe it into text.
• Resend (email). What we send: your email address. Used to deliver account emails such as verification and password resets. Here your address is the point, so it necessarily travels with the message.
• Hosting & infrastructure. Your data is stored and cached on the hosting, database, and cache providers (for example, Fly.io) that run Coral.

We don't sell or share your data

We do not sell, rent, or trade your personal information, and we never share it with third parties for advertising, marketing, or anything else. The only parties who ever touch your data are the service providers above, strictly to deliver the features you're using.

Exporting your data

Your data belongs to you. In the app, under Settings → Your Data, you can export your cards, vocabulary, and conversations as CSV files at any time.

Deleting your data

From the same Settings → Your Data screen you can permanently delete your account. Deletion is immediate and cannot be undone: it erases your account and all associated content (decks, cards, vocabulary, conversations, listening sessions, review history, and sign-in records) from our systems.

You can also simply ask. Email us at shane@c4nr.comfrom your account address and we'll permanently delete your account and everything associated with it, the same full deletion as the in-app option.

To be fully honest about the limits: content that was already processed by a service provider before deletion (for example, a past request to Google to generate a reply) is retained or discarded according to that provider's own policies, and temporary cached copies expire automatically. Everything on Coral's own systems is deleted.

Data retention

We keep your data for as long as your account exists. Login sessions and cached content expire automatically over time. When you delete your account, your data is removed as described above.

Children

Coralis not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.

Changes to this policy

If our practices change, we'll update this page and revise the “last updated” date above so it always reflects how we handle your information.

Contact

Questions about this policy or your data? Reach us at shane@c4nr.com.