Privacy Policy

Your account details (an email address, an optional display name, and a securely hashed password) together with your learning record: review schedule, study activity, experience points, and streaks.

We do not hold payment card details, and we never ask for your date of birth, phone number, or precise location.

To provide your account, keep your progress in sync across devices, keep you signed in, and protect the service from abuse. Our legal basis is the performance of our agreement with you, alongside a legitimate interest in a secure and reliable product.

Your data is held on infrastructure we operate ourselves, and every connection is encrypted in transit. We keep limited security records for a short period (up to 90 days) solely to detect and prevent abuse.

You can export everything we hold about you as a single file, and delete your account (along with its learning data) at any time from your account page.

Where local law provides, you may also request access to, correction of, or a restriction on the processing of your data by contacting us.

We rely on a small number of trusted providers to operate: for content delivery and security, for payment processing where you choose to subscribe, and for the transactional emails that verify your address or reset your password. Pronunciation audio is generated in-house and served from our own systems. We do not work with advertising networks.

Payments are handled by Polar Software Inc., our merchant of record, which receives the billing information needed to complete your purchase and to meet its tax and accounting obligations. We receive only your subscription status.

The providers behind those functions are named here so you know who handles what. Cloudflare delivers the site and shields it from attack, and therefore sees the connection metadata every web request carries, such as your IP address. Cloudflare Turnstile runs the human check on the sign-in, sign-up and password-reset forms. Resend delivers our transactional email, so it receives your address and the contents of those messages. Google receives the text you send to the Sensei tutor, through its Gemini API, in order to answer it. Google Play processes Android purchases and receives what it needs to bill you. None of these providers receive your learning record, and none of them are advertising networks.

Deleting your account removes your learning record permanently: reviews, progress, achievements and exam history cannot be restored.

One item survives: an irreversible fingerprint of your email address, produced by a one-way function and stored without the address itself. We keep it for a single purpose (so that the three-day free trial is granted once per person) and it cannot be used to identify or contact you.

For any privacy request, write to contact@mirasen.app. To report a security concern, write to security@mirasen.app.