Privacy Policy
What we collect, why we collect it, and the control you keep over it.
Last updated: July 25, 2026
1. What we collect
Account details: your name, email address, and a securely hashed password. If you sign in with Google, we receive your name and verified email from Google instead of a password.
Learning data: the words you save, practice sessions, mastery levels, streaks, and your daily goal.
Chat data: the messages you exchange with the AI tutor, stored so your conversations can be reopened later.
2. How we use it
Your data is used to run VOCA for you: scheduling reviews, tracking progress, remembering chat context, and personalising the experience. We do not sell your data or use it for advertising.
3. AI processing
When you use the AI chat or word help, the relevant text is sent to our AI provider (Google Gemini) to generate a response. Only what is needed for the answer is sent, and it is not used by us for anything else.
4. Cookies and sessions
We use a session cookie to keep you signed in, and your browser's local storage to remember preferences such as your theme. We do not use tracking or advertising cookies.
5. Storage and security
Data is stored in a MongoDB database. Passwords are hashed with bcrypt and are never stored in plain text. Access to your data is scoped to your account.
6. Your control
You can edit or delete any word, clear conversations, and delete your entire account from Settings. Deleting your account permanently removes your profile, words, practice history, and chat history.
7. Changes to this policy
If we change how we handle your data, we will update this page and note the new date above.
8. Contact
Privacy questions? Reach out through the project's GitHub page: github.com/PulkitGarg31.