Privacy Policy

1. Information we collect

Account information. When you create an account with email and password, we store your name, email address, and a securely hashed password. When you sign in with Google instead, we receive your name, email address, and profile photo from Google — we never see or store your Google password.

Content you create. Vocabulary sets, words, examples, personal notes, and any images you attach.

Learning activity. Your flashcard ratings (Again/Hard/Good/Easy), review timestamps, streaks, accuracy, and progress statistics — all generated automatically from how you use the app.

2. The shared vocabulary bank

Word content you add (the word itself, meaning, pronunciation, examples, collocations, related words, and any image) is stored in a bank shared across all MinLish users, so other learners can reuse it in their own sets. This does not include your personal notes, which stay private to you, or your review history, which is never shared. Which sets a word belongs to, and your progress on it, remain private to your account.

3. How we use your information

• To operate your account and keep you signed in
• To schedule your next review at the right time (spaced repetition)
• To show your progress, streaks, and statistics
• To respond if you contact us for support

We do not sell your information, and we do not run ads in MinLish.

4. Third-party services we use

• Supabase — hosts our database and handles authentication and session cookies. See Supabase's Privacy Policy.
• Google Sign-In — used only to authenticate you if you choose “Continue with Google”.
• Google Gemini API — if you use the optional “Suggest with AI” feature, only the word you typed is sent to generate a suggestion; no account or personal information is included in that request.

5. Cookies

We use a session cookie set by Supabase Auth to keep you signed in. We do not use advertising or third-party tracking cookies.

6. Data retention and deletion

We keep your data for as long as your account is active. To request deletion of your account and personal data, contact us at academy@kmin.edu.vn. Word content you contributed to the shared vocabulary bank may remain available to other users after your account is deleted, since it is no longer tied to your identity.

7. Data security

Your data is protected with database-level Row Level Security: the server always verifies your identity from your session before returning or changing any of your data, and other users can never read or modify your private data (sets, notes, review history) directly.

8. Children's privacy

MinLish is intended to be used with the involvement of a parent, guardian, or teacher for learners under the age required to consent to data processing in their country. If you believe a child has provided us with personal information without appropriate consent, contact us at academy@kmin.edu.vn and we will remove it.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date above.

10. Contact us

Questions about this policy? Email us at academy@kmin.edu.vn. See also our Terms of Service.