Privacy Policy

1. Introduction

Divinari is a cross-platform language learning application built with a "Privacy by Design" philosophy. We minimize data collection and prioritize local storage to ensure your learning journey remains yours.

2. Information We Collect

We collect minimal information required to provide a functional and improving learning experience.

Account Information

To synchronize your basic identity across sessions, we collect:

• Authentication Identifiers: Unique identifiers provided by Firebase Authentication.
• Email Address: Collected only when you register using email/password or when provided by a social login provider.
• Authentication Provider: Information about whether you signed in via Google or Email.

Usage Information (Optional)

If you opt-in to product usage analytics, we collect anonymous events such as:

• App Lifecycle: When the app is opened or a session begins.
• Onboarding Progress: Completion of language selection and goal setting.
• Learning Activity: Start and completion of lessons, exercise success/failure, and streak updates.
• Technical Data: Anonymous crash reports and performance information.

What We DO NOT Collect

Divinari does not collect, see, or store the following:

• Passwords: These are handled securely by Firebase Authentication and are never visible to us.
• Precise Location: We do not track your GPS coordinates.
• Contacts: We do not access your phone's contact list.
• User-Generated Content: Your private notes, raw answers to open-ended questions, and voice recordings remain exclusively on your device.
• Personal Media: We do not access your photos or videos.
• Payment Information: Financial transactions are handled by platform app stores (Apple App Store or Google Play Store).

3. How We Use Information

We use the information we collect to:

1. Provide Authentication: Allowing you to securely sign in to your account.
2. Improve the Experience: Analyzing anonymous usage trends to identify which lessons are effective and where the app can be improved.
3. Maintain Safety: Detecting and preventing fraudulent or unauthorized use of our services.

4. Local Data Storage

Currently, Divinari uses a local database (Drift SQLite) to store your learning progress, vocabulary mastery, and achievement history exclusively on your device.

5. Firebase and Third-Party Services

We use Google Firebase to provide essential app infrastructure:

• Firebase Authentication: Securely manages your login credentials.
• Firebase Analytics: Processes anonymous usage data (if you opt-in).

6. Website Analytics and Cookie Consent

Our website analytics approach is privacy-first and GDPR-conscious:

• Opt-In Consent Only: Google Analytics (gtag.js) tracking is disabled by default and does not load or send events until you explicitly click Accept Analytics on our consent notice.
• Revocable Anytime: You can change or revoke your analytics choice at any time by clicking the Privacy Settings link located in the website footer.
• No Advertising Cookies: We do not use advertising cookies, perform retargeting, or share tracking data with third-party data brokers.
• Purely Functional Improvement: Analytics events measure aggregate page performance and feature usage solely to improve Divinari.

7. Authentication Providers

• Email/Password: Traditional secure login.
• Google Sign-In: Allows you to use your Google account for easy access.
• Facebook Login: Implementation exists but is currently disabled pending verification. It may become available in a future update.

8. Data Security

We use industry-standard security protocols and rely on the robust security infrastructure of Google Firebase to protect your account information during authentication.

9. Data Retention

We retain your account information only as long as your account is active. If you choose to delete your account, your data is removed as described below.

10. Account Deletion

You have the "Right to be Forgotten." You can delete your account at any time via the More tab in the app.

When you delete your account:

1. Your Firebase Authentication record is permanently deleted.
2. A recursive wipe is performed on your device, deleting all local learning progress, activity logs, and settings from the local database.

11. User Privacy Rights

You have the right to:

• Access: Request a copy of the limited account information we hold.
• Correction: Update your display name or profile details in the app.
• Deletion: Permanently delete your account and all local data.
• Object: Opt-out of analytics collection at any time.

12. Children's Privacy

Divinari is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

13. International Users and GDPR

For users in the European Economic Area (EEA) and the UK:

• We process your data based on your explicit consent (for analytics) and for the performance of a contract (to provide your account).
• Your data is stored and processed on secure servers provided by Google.

14. Changes to This Privacy Policy

We may update this policy to reflect changes in our app or legal requirements. We will notify you of any significant changes by posting the new policy within the app.

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@divinari.app

Divinari Team