Privacy Policy

What we collect, why we collect it, and the control you keep over it.

Last updated: July 25, 2026

1. What we collect

Account details: your name, email address, and a securely hashed password. If you sign in with Google, we receive your name and verified email from Google instead of a password.

Learning data: the words you save, practice sessions, mastery levels, streaks, and your daily goal.

Chat data: the messages you exchange with the AI tutor, stored so your conversations can be reopened later.

2. How we use it

Your data is used to run VOCA for you: scheduling reviews, tracking progress, remembering chat context, and personalising the experience. We do not sell your data or use it for advertising.

3. AI processing

When you use the AI chat or word help, the relevant text is sent to our AI provider (Google Gemini) to generate a response. Only what is needed for the answer is sent, and it is not used by us for anything else.

4. Cookies and sessions

We use a session cookie to keep you signed in, and your browser's local storage to remember preferences such as your theme. We do not use tracking or advertising cookies.

5. Storage and security

Data is stored in a MongoDB database. Passwords are hashed with bcrypt and are never stored in plain text. Access to your data is scoped to your account.

6. Your control

You can edit or delete any word, clear conversations, and delete your entire account from Settings. Deleting your account permanently removes your profile, words, practice history, and chat history.

7. Changes to this policy

If we change how we handle your data, we will update this page and note the new date above.

8. Contact

Privacy questions? Reach out through the project's GitHub page: github.com/PulkitGarg31.