Privacy Policy | Slavonaut

1) Who we are

Slavonaut ("we", "us", "our") is a language-learning project based in Switzerland. We operate the website https://slavonaut.com and the Slavonaut app for iOS. This policy covers both.

2) What we collect

Account data: email address, used by our backend provider Supabase to authenticate you and manage your account.
Usage data: basic server logs, and anonymous, cookieless page-view and performance measurements from our hosting provider Vercel (for reliability and security).
User content: saved words, learning progress, practice results, and preferences you choose to store, kept in our Supabase database.
Product analytics (website and iOS app): product events such as lessons started, words saved, and searches, processed by PostHog (EU-hosted) to understand how Slavonaut is used and improve it. Search queries themselves are never sent — only their length and result counts. On the website, PostHog runs without cookies or on-device storage until you accept the cookie notice. Events are linked to your account only after you sign in. We never use analytics for advertising or cross-app tracking.
Website analytics (consent only): if you accept analytics cookies in the cookie notice, Google Analytics measures page views and sets its cookies. It does not load at all until you accept.
Purchase data:if you subscribe to Slavonaut Plus, our subscription provider RevenueCat processes your purchase history and an app user identifier (your account ID) to manage your entitlement across the website and the iOS app. Payment itself is handled by Apple on iOS or by RevenueCat's payment processor on the web; we never see your payment details.
AI dictionary lookups:when you look up a word that isn't in our dictionary, the word and its surrounding sentence are sent to OpenAI to generate a definition. No account identifiers are included, and generated entries are stored as anonymous dictionary data.

We do not intentionally collect special category data.

3) Why we process your data (legal bases)

Contract: to create and maintain your account and deliver core features.
Legitimate interests: to secure the service, prevent abuse, and improve performance.
Consent: for optional features like marketing emails or analytics cookies (if/when enabled).

4) How we store and share data

Storage: Supabase (EU-hosted where available) and Vercel for hosting.
Third parties: service providers acting as processors, each receiving only what its role requires — Supabase (authentication, database storage, and related infrastructure: your email, account ID, and user content such as saved words and learning progress), Vercel (hosting and anonymous performance/page-view measurement), PostHog (product analytics: usage events and, after sign-in, your account ID), RevenueCat (subscription and purchase management for Slavonaut Plus: purchase history and your account ID), Google (website analytics, only after you consent to analytics cookies), and OpenAI (AI-generated dictionary definitions: the looked-up word and its sentence, with no account identifiers). They process data only on our instructions.
International transfers: when providers transfer data outside Switzerland/EU, they use appropriate safeguards (e.g., SCCs).

5) Cookies & analytics

Essential cookies are used for authentication and session security.
Optional analytics cookiesare used only if you choose "Accept" in the cookie notice: Google Analytics then loads and sets its cookies, and PostHog switches from cookieless mode to persistent (cookie-based) tracking. If you reject or dismiss the notice, Google Analytics never loads and PostHog stays cookieless.
Anonymous, cookieless page-view and performance measurement (Vercel) runs without analytics cookies.
To change your cookie choice, clear this site's browsing data in your browser — the notice will appear again on your next visit — or contact us.
The iOS app uses first-party product analytics (PostHog) as described above; it does not use advertising identifiers or track you across other companies' apps or websites.

6) Data retention

Account data is kept while your account is active.
You can delete your account at any time, directly from the settings page on the website or in the iOS app. Deletion removes your account and stored learning data (saved words, progress, practice history); we retain data only where required for legal or security reasons.