Privacy

What we collect

• Your name, email address and the class you belong to.
• Your learning profile: timezone, support language, goals and reminder preferences.
• Your homework submissions, uploads, recordings and the feedback your teacher writes.
• Your vocabulary review history and quiz attempts.
• Estimated active learning time, recorded as an area of the app and a duration. Counting pauses after five minutes without interaction and starts again when you do something. Study you log afterwards from memory is labelled self-reported.

What we never record

• Keystrokes, clipboard contents, or anything you type outside a field you submit.
• Time spent in a background tab.
• Your location beyond a country code your browser or network already sends.
• Your raw IP address in analytics. Where one is needed for abuse control we store a salted hash.

Who can see what

Your teacher can see your work, your feedback, your learning time and your progress. A classmate sees your name (unless you hide it), a level in the subject that rises as you collect concept cards, your streak, your weekly points, and that you learned today — never for how long or on what, and never the number of cards itself, a lesson, a score or a share of the course. You can hide your display name from classmates in settings and still take part.

Your learning profile — where you stand on each topic, what you still find hard, how many words you know — belongs to you, not to any one class. A class only sees it once you accept its invitation, which tells you so before you join; leaving the class ends the sharing. Your homework, recordings, feedback and private notes never leave the class you made them in, even when your profile does.

Corrections by an AI service

When you press Check on writing or a spoken recording, your answer and your first name go to an AI service that corrects it. It never receives your surname, your email address, your teacher’s private notes or anyone else’s work.

In practice, a spoken answer is sent to the AI service to be corrected, and its recording is deleted once it has been corrected. What was heard and the correction stay in your account, and no teacher sees them.

The waitlist

Joining the waitlist does not create an account. We store your address, your answers and how you found us so we know who to invite next. We ask for consent before emailing you and every email carries an unsubscribe link. We do not sell or share your address.

Where your data lives

Application data is stored in a managed PostgreSQL database. Files you upload are stored privately and are only reachable through short-lived links issued after we check that the request is yours or your teacher is entitled to it. Transactional email is sent by our email provider.

Your rights

You can request a copy of your data from Settings, and your teacher will send it. A learner can delete their own account from Settings at any time: you leave your classes and are signed out at once, nothing is erased for seven days so that signing in again can undo it, and after that your account, your work and your recordings are deleted for good. You can also reset what Pinajo knows about you in one subject without leaving. Teachers can write to us to have an account removed. Some records, such as audit logs of privileged actions, are retained in a form that no longer identifies you.