Privacy Policy

What we collect

• Your email (if you create an account) — so that you can preserve your data and sync across devices. Palabra also works without an account.
• Words you save — that's the whole point of the app
• Context sentences — the sentence around a word helps us get better translations (we strip out obvious personal info like emails and phone numbers)
• Source websites — knowing where you found a word helps us organize your exercises better. When Palabra stores a source page address, it removes query strings, fragments, and credentials first
• Practice sentences you write — sent to our AI services so you get feedback on how you used the word
• Your language preference — so we translate to the right language
• Usage counts — to enforce fair-use limits and improve the service
• How you practice — which words you know, which need more work (so we can personalize your learning)

Who sees your data

We share the minimum necessary with services that help us run Palabra:

• Translation services — your words (and sometimes context) go to professional translation APIs (DeepL) to get accurate translations
• AI services — we use AI providers (OpenAI and Google Gemini) to generate personalized exercises, give feedback on the practice sentences you write, and detect a word's language. For these features they receive your saved words, the sentences you write in practice, and the selected word with its surrounding context
• Email service — if you opt in to product updates, we use an email service to send them
• Analytics & error tracking — we use PostHog to understand product usage and Sentry to catch bugs. These services receive product-usage and diagnostic metadata to help us understand usage and fix bugs
• Infrastructure — we host on Vercel and store your data with Supabase (database and authentication), on servers in the European Union

We do NOT sell your data. We don't share it with advertisers. We don't record your general browsing history or the full contents of the pages you visit. We do collect limited product-usage metadata, including some extension events tied to site domains, so we can understand how Palabra is used and improve the product.

Chrome Web Store Limited Use

Palabra's use and transfer of information received from Chrome extension APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this data only to provide and improve Palabra's user-facing language learning features. We do not sell it, use it for personalized advertising, retargeting, or interest-based advertising, or transfer it for those purposes.

We only transfer Chrome extension data when needed to provide or improve Palabra, comply with law, protect users or the service from abuse, or complete a permitted business transfer. Human access is limited to support you with your permission, investigate abuse or security issues, comply with legal obligations, or work with aggregated or anonymized information.

Your rights

You're in control. You can:

• Request access to a copy of your personal data — email us with privacy or access requests
• Delete your data — use the delete button in your account settings. Your account and vocabulary are deleted immediately. We retain a minimal record — a hashed (non-reversible) email and account type — for internal audit and to investigate mistaken deletions if you contact support
• Unsubscribe from emails — every email has an unsubscribe link
• Complain to authorities — if you're in the EU, you can lodge a complaint with your local data protection authority

How long we keep it

• While your account is active — your vocabulary and progress stay as long as you want them
• After you delete your account — your account and vocabulary are deleted immediately. A minimal record is kept (hashed email and account type) for internal audit and support investigations

Where we store it

Your data is stored on servers in the European Union. When you use translation or AI features, your words may be processed by third-party services. By using Palabra, you consent to this processing.

Cookies & analytics

We use cookies to keep you logged in. We also use PostHog to understand how people use Palabra (which features get used, where people get stuck) and Sentry to catch and fix bugs. These services may receive technical diagnostics and limited product-usage data, such as page views on heypalabra.com, onboarding events, selected languages, aggregate counts, and limited metadata about extension usage such as the domain of a page where you open or close the sidebar. We do not use these tools to record full URLs, page contents, saved vocabulary text, context sentences, or exercise responses from the pages you browse.

Children

Palabra is for users 13 and older. We don't knowingly collect data from children under 13. If you're a parent and believe your child has signed up, please contact us.

Changes

If we make significant changes to this policy, we'll email you before they take effect. No surprises.

Questions?

Privacy questions, data requests, or just want to say hi — reach us at support@heypalabra.com.