1. Introduction

frflashy.com ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our French language learning service.

By using frflashy.com, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Username: Your chosen display name
• Email Address: For account verification and communication
• Password: Stored securely using industry-standard hashing (bcrypt)
• Study Level: Your selected DELF level (A1-C2)

2.2 Usage Information

We automatically collect certain information when you use our Service:

• Log Data: IP address, browser type, pages visited, time spent
• Learning Progress: Which lessons you've completed, quiz scores
• Audio Recordings: Pronunciation practice recordings (stored temporarily)

2.3 Cookies

We use a single essential cookie to manage your login session. This cookie is necessary for the Service to function and allows you to stay logged in as you navigate between pages. We do not use any tracking cookies, advertising cookies, or third-party analytics cookies.

You can disable cookies in your browser settings, but this will prevent you from logging in to your account.

3. How We Use Your Information

We use the collected information for:

• Account Management: Creating and maintaining your account
• Email Verification: Sending verification codes during registration
• Service Delivery: Providing personalized learning content
• Pronunciation Feedback: Processing audio recordings with OpenAI's API
• Communication: Sending important updates about your account or the Service
• Improvement: Analyzing usage patterns to improve our Service
• Security: Detecting and preventing fraud or unauthorized access

4. Third-Party Services

We use the following third-party services that may collect your information:

4.1 OpenAI

We use OpenAI's APIs for pronunciation feedback and audio transcription. Your audio recordings may be processed by OpenAI according to their privacy policy and data usage policies.

4.2 Google Cloud

We use Google Cloud Speech-to-Text (STT) and Text-to-Speech (TTS) services for pronunciation practice features. Your audio may be processed by Google according to their privacy policy and data usage policies.

4.3 Amazon Web Services (AWS)

Our application is hosted on AWS infrastructure. AWS provides secure, reliable cloud computing services in accordance with their privacy policy.

4.4 Neon Database

User data is stored in a PostgreSQL database hosted by Neon. They provide secure, encrypted data storage.

5. Data Retention

• Account Information: Retained while your account is active
• Email Verification Codes: Deleted after 24 hours or upon successful verification
• Audio Recordings: Stored for feedback, then deleted within 3 days
• Learning Progress: Retained to provide continuous learning experience

6. Data Security

We implement security measures to protect your information:

• Encryption: Passwords are hashed using bcrypt
• HTTPS: All data transmission is encrypted via SSL/TLS
• Access Control: Limited access to personal data by authorized personnel only
• Secure Storage: Database credentials and API keys are stored securely

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Opt-Out: Unsubscribe from marketing emails (account-related emails may still be sent)
• Data Portability: Request your data in a machine-readable format

To exercise these rights, contact us at admin@frflashy.com.

8. Data Deletion / Account Deletion

Under GDPR, CCPA, and similar data protection regulations, you have the right to request deletion of your personal data. To delete your account and all associated data, send an email to admin@frflashy.com from the email address associated with your account.

Upon receiving your request, we will:

• Delete your account and login credentials
• Remove your learning progress and history
• Delete any stored audio recordings
• Remove your information from our database

Please allow up to 30 days for your request to be processed. Some information may be retained for legal or legitimate business purposes (e.g., transaction records for tax purposes).

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

California Age-Appropriate Design Code Act (CAADCA)

frflashy.com is compliant with the California Age-Appropriate Design Code Act (CAADCA), enacted in September 2022. Our Service does not contain any age-restricted content. We do not profile users based on age, and we do not use design features that could be harmful to minors. Our educational French language content is appropriate for users of all ages.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using our Service, you consent to the transfer of your information to countries that may have different data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Do Not Track

We do not currently respond to "Do Not Track" (DNT) signals from web browsers.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: admin@frflashy.com
Website: frflashy.com