LEGAL
Privacy Policy
This policy describes what data SYNTAX.exe collects, how it is used, and your choices. By using the app you agree to this policy.
1. Summary
SYNTAX.exe is an account-based Spanish learning app. We collect the minimum data needed to run accounts, sync progress, grade practice (including speech), and keep the app stable. We do not sell personal data, show ads, or use advertising identifiers for tracking.
2. Data we collect
| Category | Examples | Purpose |
|---|---|---|
| Account / contact | Email address (if you sign in with email), auth user ID | Create and secure your account |
| Profile | Handle, language preferences, timezone, placement level | Personalize learning and sync profile |
| Learning progress | XP, streaks, unlocked nodes/features, mastery / SRS state, run history, daily ops | Provide the learning loop and sync across devices |
| User content | Written answers, dialog transcripts, speech transcripts, and optional live voice audio | Grade practice, generate dialog, and provide live speaking feedback |
| Diagnostics | Crash, performance, and other technical diagnostic data (via Sentry), tagged with your user ID | Find and fix bugs and monitor app health |
Microphone / speech recognition. Speaking features request microphone and (on iOS) speech recognition access. Speech audio or transcripts are processed only after you start a speaking feature. Voice Link streams microphone audio and a live transcript to OpenAI for the conversation. Raw Voice Link audio is not stored in the SYNTAX.exe Supabase database. We do not use microphone access for advertising.
Not collected: precise location, contacts, browsing history, purchases (v1 has no IAP), advertising identifiers for tracking, or third-party analytics SDKs (PostHog, Amplitude, Mixpanel, etc.).
3. How we use data
- Authenticate you and keep you signed in
- Sync progress and content unlocks
- Grade practice, including AI-assisted dialog, composition, or speech grading where enabled
- Diagnose crashes and reliability issues
- Comply with law and App Store / Google Play requirements
4. Processors / service providers
- Supabase — authentication, database, storage, and edge functions that power the app backend
- Sentry — crash, performance, and other technical diagnostics
- OpenAI (only after you grant AI data permission and use an AI feature) — processes written answers, dialog or speech transcripts, and Voice Link audio needed to generate or grade that session
These providers process data on our behalf. We require service providers to protect personal data consistently with this policy and applicable law, and we do not permit them to use it for their own advertising.
5. Sharing
We do not sell personal information. We share data only with the processors above as needed to operate the app, or if required by law.
OpenAI permission. Before any answer, transcript, or microphone audio is shared with OpenAI, the app identifies OpenAI, lists the data involved, and asks you to explicitly allow the transfer. If you choose Not now, nothing is sent to OpenAI and non-AI lessons remain available. You can withdraw permission at any time from ME → Legal → Revoke OpenAI Permission. Revocation blocks future transfers; it does not undo processing that already occurred.
Public-facing game features (for example public bases or ghost race profiles, if enabled) may expose limited profile information such as handle and relevant progression stats to other players.
6. Retention and deletion
Account and progress data are retained while your account is active. You can delete your account from inside the app (ME → Legal → Delete Account). Deletion removes your auth user and associated owned app data via our delete-account process. Limited records already processed by OpenAI or Sentry may persist for their configured security, abuse-prevention, backup, or legal retention periods before deletion or de-identification.
7. Security
We use industry-standard transport encryption (HTTPS) and rely on Supabase auth and row-level security for user-scoped data. No method of transmission or storage is 100% secure.
8. Children
SYNTAX.exe is not directed at children under 13. If you believe we have collected data from a child under 13, contact us and we will delete it.
9. Your rights
Depending on where you live, you may have rights to access, correct, or delete your data. In-app account deletion is the primary path. For other requests, contact us using the details below.
10. Changes
We may update this policy. The effective date above will change when we do. Continued use after an update means you accept the revised policy.
11. Contact
Privacy questions: nickbrough@outlook.com. Also reachable via the App Store listing contact information for SYNTAX.exe.