Privacy Policy

Information we handle

Account and authentication information

• Your name or display name, email address, internal user ID, and account timestamps.
• A password hash when you use email and password. KaSenyas does not store your readable password.
• Session and linked sign-in records. If you choose Google Sign-In, this may include your Google account identifier, name, email address, optional profile image, and authentication tokens supplied for sign-in. If you choose Sign in with Apple, this includes your Apple account identifier, the name and email address Apple makes available (which may be a private relay address), and credentials supplied for sign-in and account deletion.

Learning activity

• Lesson and node completion, quiz results, review history and schedule, XP, streak, rank, and achievements.
• Locally saved preferences and study state, such as language selection, bookmarks, downloaded or cached content, and fingerspelling totals.

Technical and security information

• Session IP address and user-agent information used to operate and protect sign-in sessions.
• HMAC-digested rate-limit keys used to prevent abuse. These counters do not store the underlying email address or IP address.
• API request metadata, request identifiers, status, timing, and error details in short-lived infrastructure logs used to keep the service reliable and secure.

Camera and on-device activity

Fingerspelling practice uses the camera only after you grant permission. Frames and hand landmarks are processed on the device for live feedback. KaSenyas does not upload or save those frames or landmarks. Dictionary searches also stay on the device and are not sent to the server.

How we use information

• To create and manage your account, authenticate you, and send verification, email-change, or password-reset codes.
• To deliver lessons, sync progress across devices, schedule daily reviews, calculate XP and streaks, unlock ranks and achievements, and show leaderboards.
• To prevent abuse, maintain security, diagnose failures, and operate the API.
• To respond to privacy or account-deletion requests.

KaSenyas does not use personal information for third-party advertising, does not sell it, and does not use camera data to identify you.

What other learners can see

The leaderboard can show your display name, optional profile image, points, position, and current rank to other signed-in KaSenyas learners. Your email address, password, review history, and individual quiz answers are not shown on the leaderboard.

If you report a learner, KaSenyas stores your account, the reported account, the reason, and the moderation outcome so the team can review it; the reported learner is not told who reported them. Reports are deleted when either account is deleted.

Service providers

KaSenyas uses providers that process information to operate the service:

• Cloudflare hosts the API, short-lived operational logs, and authored lesson media.
• Supabase hosts the managed PostgreSQL database containing account and learning records.
• Resend delivers account verification, email-change, and password-reset emails and therefore processes the recipient email address and message.
• Google provides Google Sign-In when you choose it and sends KaSenyas the identity information needed to sign you in.
• Apple provides Sign in with Apple when you choose it and sends KaSenyas the identity information needed to sign you in. Apple may provide a private relay email address instead of your personal email address.

These providers process information under their own security and retention controls. KaSenyas may also disclose information when required by law, to protect users or the service, or as part of a legitimate transfer of the project with appropriate safeguards.

Retention and deletion

Account and synced learning data are kept while your account is active so that your progress remains available across devices. Verification codes expire after 10 minutes. Authentication abuse-prevention counters become eligible for automated cleanup after seven days. Cloudflare Workers logs are retained for no more than the retention available on the configured Workers plan, currently up to seven days.

Delete your account

If you upload a profile photo, KaSenyas stores a small, resized copy with photo metadata removed. Replaced, removed, and deleted-account photos are queued for storage deletion, with automatic retries when storage is temporarily unavailable. Photos shown on leaderboards are served through public image URLs; anyone with an image URL may access it.

You can permanently delete your account in KaSenyas from Profile → Settings → Delete account. This deletes your profile, sign-in methods, active sessions, progress, review history, XP, streak, rank, and achievement records from the application database. The app also removes account-scoped learning data stored on that device.

If you cannot access the app, use the public KaSenyas account-deletion page. Limited operational records may remain temporarily in service-provider logs or backups, or where retention is required for security, fraud prevention, or legal compliance. Your Google or Apple account is not deleted when you delete KaSenyas; the app's Apple sign-in authorization is revoked as part of account deletion.

Security, choices, and contact

KaSenyas uses HTTPS/TLS for data sent between the app and its API, stores the mobile session credential using the device's secure credential storage, limits authentication requests, and restricts database access to the server. No method of storage or transmission can be guaranteed completely secure.

Your choices

• You can deny or revoke camera permission; only camera-based fingerspelling practice is affected.
• You can use email and password instead of Google Sign-In or Sign in with Apple.
• You can edit your display name, log out, or permanently delete your account from Settings.

Contact

For questions, corrections, or privacy requests, contact privacy@kasenyas.com. KaSenyas may update this policy as the app changes; the last-updated date above will be updated when material changes are made.