Your data stays on your device.

The short version

Speak Indo uses a small backend (Supabase) for sign-in and to sync your progress between devices. We collect only what's needed to do that: your email, your sign-in method, your display name, and the JSON blob representing your study state. Nothing more. No tracking, no advertising cookies, no third-party analytics.

What we store, and where

• Email address — to send you sign-in links and identify your account. Stored in Supabase. Used only for authentication; no marketing emails unless you explicitly opt in later.
• Display name + sign-in method (Google or email) — so the app can greet you and show your account in the profile widget.
• Learning state — your flashcard SRS data (ease, intervals, reps per word), session counts per day, quiz stats, CEFR levels, audio preference, daily-goal setting, achievement unlocks, and the last viewed tab. Stored as a single JSON blob keyed to your account.
• Local cache — the same data is mirrored in your browser's localStorage (keys belajar:user and belajar:v3) so the app loads instantly and works offline. Both layers are kept in sync.

You can inspect the local cache in your browser's DevTools → Application → Local Storage. The remote copy is access-protected by Supabase's Row-Level Security — only the user the data belongs to can read it.

What we do NOT collect

• No IP-level tracking
• No analytics events
• No advertising identifiers
• No social media pixels
• No session recordings
• No crash reports

Third-party content

The app fetches:

• Google Fonts (Inter, Instrument Serif) — served from fonts.googleapis.com and fonts.gstatic.com. Google may log this request per its own privacy policy.
• Browser speech synthesis / recognition — your OS/browser may send audio to Google/Apple servers during speech recognition ("Speaking" quiz mode). This is under your OS's control; we don't send anything from our code.

Your rights

Because we don't hold your data, there's nothing to request, delete, or correct from us. You control everything:

• See your data: DevTools → Application → Local Storage.
• Export: copy the JSON strings to a file.
• Delete: clear site data from your browser, or use Settings → Reset progress / Sign out.

Children

Speak Indo is suitable for all ages. We collect no personal information from anyone, so no special protections for minors are required by GDPR-K or COPPA beyond what we already do — which is nothing.

Changes

If we ever add real accounts, sync, or analytics, we'll update this policy prominently and notify users in-app before collecting anything. As of April 2026, we do not.