Privacy policy

We collect information you provide and information generated when you use the service:

• Account information: your name, email address, verification status, account identifiers, and profile changes. If you choose email/password sign-in, we store a password hash rather than your password in readable form.
• Google sign-in information: your Google account identifier, name, email address, verification information, and profile image when available, together with authentication information needed to connect and protect your account.
• Learning information: the words and modules you practise, your submitted answers, results, hints and examples viewed, practice timing, progress, and review history. This lets us save your place and adapt future practice.
• Billing information: your selected plan and billing interval, Stripe customer and subscription identifiers, payment and subscription status, paid access dates, and records of refunds, disputes, and billing events. Stripe and Link collect payment details and billing information directly through their services; we do not store your full card number or card security code.
• Security and technical information: session identifiers, IP addresses, browser/device information, request timing, and operational or error information used to run and secure the service.
• Product analytics: pages visited, referral sources and campaign tags, browser/device information, account identifiers after sign-in, account creation, practice interactions and round completion, checkout starts, and confirmed initial subscription payments. We use PostHog to understand how people discover and use the service. After sign-in, we send your account email address, full name, and available first and last names to identify your analytics profile. We do not send it your password, submitted learning answers, or full payment details.
• Communications: support emails and any content reports or feedback you submit, including the information you choose to include.

We use your information for the purposes connected with the service you request:

• Create and maintain your account, authenticate you, and manage your profile and sessions.
• Save practice activity, assess answers, show progress, and schedule personalised review.
• Provide Free or Paid access, reconcile subscription changes, and handle payment recovery, refunds, and billing support.
• Send account-related emails, including verification, welcome, password recovery, and password-change notifications.
• Respond to support requests, investigate reported content, and maintain the accuracy and reliability of the app.
• Understand visitor sources, account signup, meaningful learning activity, returning learners, and subscription conversion so we can improve the service.
• Prevent abuse, protect accounts, troubleshoot problems, and meet applicable legal obligations.

Google sign-in is optional. You can use email/password sign-in instead. When you choose Google, we use the identity information Google shares to create or identify your account, connect your sign-in method, and provide account-related communications. We do not receive your Google password or request access to Gmail messages, Drive files, contacts, or calendars.

We do not sell Google user information, use it for advertising, or use it to train AI models. Its use and disclosure are limited to the account features described here, necessary service providers, security, and legal requirements. We follow the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can manage Google connections in your Google Account. In our account settings, you can disconnect Google after adding another sign-in method. Disconnecting or revoking Google access does not itself delete your Articulate Mastery account or previously saved learning information.

We use essential authentication cookies to maintain your signed-in session and protect account actions. Blocking or clearing these cookies may sign you out or prevent account features from working. Learning progress is saved to your account on our servers rather than being kept only in your browser.

The current app does not include advertising trackers. Hosting and Google sign-in providers may use their own cookies or similar technologies for their services and security.

When product analytics is enabled, PostHog uses browser local storage to recognise returning visits and connect browsing with your account after sign-in. We also keep a small local record to avoid counting the same practice action twice. Signing out clears the analytics account identity. Browser settings or tracking blockers can prevent browser analytics from being sent; account creation and confirmed payment events are sent by our API. We do not enable session recordings or automatic capture of form contents.

Pronunciation and read-aloud use your browser or device's speech-synthesis feature. We do not record your microphone or upload voice recordings through these features. Whether speech synthesis uses an online service depends on your browser, device, and chosen voice.

We do not sell or rent your personal information. We use service providers to deliver the app and the features described in this policy:

Providers process information needed for their role and may maintain their own security and operational records. We may also disclose information when required by law, to address fraud or security incidents, or to protect the rights and safety of users and the service. If the operator changes, any transfer of personal information must remain subject to applicable law and this policy, with additional notice or consent where required.

• Cloudflare delivers and hosts the website and processes network requests and related technical information.
• Railway hosts the API and database used for account information, authentication, and learning records.
• Resend delivers transactional account emails and receives recipient addresses and the message content needed to deliver them.
• Google provides optional sign-in and processes your interactions with its sign-in service under its own privacy policy.
• PostHog processes the product analytics described above, including your account email address, full name, available first and last names, and the account and subscription identifiers needed to connect a signup or purchase to the same learner. Browser events include technical information such as IP addresses and browser/device details. These analytics are used to understand product usage rather than to serve advertising.
• Stripe and Link provide checkout, recurring billing, the customer portal, payment processing, tax handling for covered transactions, fraud prevention, and transaction support. We share your account email and identifiers needed to connect a purchase to your learning account. Stripe sends us billing events so that we can update access and resolve payment issues. Stripe and Link also process information for their own payment, security, and legal purposes under their privacy notices.

Our providers operate in multiple countries, so information may be processed or stored outside British Columbia or Canada and may be subject to the laws of those countries. Contact us if you need more information about processing outside Canada.

We use account authentication, access restrictions, password hashing, and secure connections on the hosted service to protect information. No internet service can guarantee that information will always remain secure.

We retain account and learning records while they are needed to provide your account and saved progress. Billing and transaction records may need to be retained after account closure for accounting, tax, fraud prevention, or dispute resolution. Other records may be retained for security, support, or legal requirements. We do not currently apply a single automatic deletion period to all records. When information is no longer needed, we will delete it or make it no longer identifiable, subject to lawful retention requirements and backup recovery processes.

You can update your name, manage sign-in methods, and end active sessions in account settings. You can stop using the service or withdraw optional permissions, although withdrawing information required for authentication or saved progress may mean we cannot continue providing your account.

Contact [email protected] to request access to or correction of your personal information, a copy of your data, account deletion, or withdrawal of consent. Account deletion and data exports are handled through support; there is no self-service deletion or export button in the current app. We may verify your identity before acting and will respond within the time required by applicable law. Requests may be subject to lawful exceptions; we will explain any applicable limitations.

Depending on where you live and the law that applies, you may also have rights to erase information, restrict or object to processing, receive portable copies, or complain to your local privacy authority. We handle those requests under the applicable law. Requests relating to Stripe or Link's own records can also be submitted directly to them.

If you have a privacy concern, you can contact us so we can address it. You may also contact the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or your local privacy authority, as applicable.

The service is intended for general vocabulary learning and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and arrange its removal. Users below the age of majority should have a parent or guardian's permission to use the service.

We will update this page and its date when our practices change. For material changes, we will provide additional notice and obtain consent where required before using information for a new purpose.

For privacy questions, concerns, or requests, contact Articulate Mastery in Vancouver, British Columbia, Canada. Please include the email associated with your account, but never send us your password.