When you create an account we store the email address you sign up with, a salted, one-way hash of your password (never the password itself), your language preference, lesson progress, quiz attempts, RippleNav usage time, and any questions you ask. Payment card numbers are never handled by us. Stripe does.
You can sign in with an email address and password, with a one-time link sent to your email, or with Google, Facebook or Microsoft. When you use one of those providers it confirms who you are and shares your email address with us. The provider is an identity processor only. We never post anything on your behalf, and we store no provider access token.
We do not sell or rent personal information. We do not profile you or build advertising profiles from your practice data.
Email is used to sign you in, to verify your address, to reset your password and to deliver consult replies and account notifications (sent by Resend). Stripe processes subscriptions and one-off payments and holds the billing email you provide at checkout. Cloudflare hosts the app and database (D1).
We do not share personal information with third parties except the processors named above, or where required by law.
You can export or delete your account and its data from the Account page, or by contacting us. Deleting an account removes your local data. Financial records required by law may be retained by Stripe.
An inactive account is removed. An account is inactive when it is not paying, holds no free access, is not an admin, has no question waiting for an answer, and has shown no activity for six months (no lesson progress and no recorded practice) or twelve months (some progress or recorded practice). Accounts with four hundred recorded hours of practice, or the advanced tier open, are kept. One warning email is sent thirty days before removal, and signing in once keeps the account. You may also ask for earlier deletion at any time.
Material changes to this policy will be posted here.