Privacy Policy
Effective date: July 18, 2026 · Version: 1.1
This product-facing summary explains what English Pathway processes. It is not a substitute for legal review. The service operator and privacy contact must be confirmed for the jurisdictions in which the service is offered.
Data categories and purposes
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Account | Email, name, authentication identifiers | Create and secure your account | While the account exists, subject to legal obligations |
| Learning | Level, preferences, chapter/activity results, SRS items | Personalize lessons and show progress | While needed for the account; deletion is available for private tutor memory |
| Tutor memory | Short session summaries and bounded notes | Resume context and adapt help | Session summaries expire after 365 days; notes remain until deleted |
| Technical | Essential session cookies, theme preference | Sign-in, security, accessibility | Per session or until cleared |
| Optional analytics | Consent-scoped event names and bounded properties | Aggregate product quality metrics | Per the operator's approved analytics retention schedule |
Voice, text, and AI processing
The browser requests microphone access only after a user gesture in voice mode. The application uses a microphone stream for the active voice experience and stops its tracks when the session ends. The application does not store raw audio or a full transcript in its learner memory tables. ElevenLabs may process voice conversations when enabled; when it is not configured, OpenAI may process realtime voice conversations as well as embedding requests for shared curriculum retrieval. Supabase hosts authentication, database, and shared curriculum retrieval. The exact provider terms, locations, transfer mechanisms, and subprocessors must be confirmed by the operator before launch.
Text mode is a functional alternative and does not request microphone access. Browser speech features used by optional activities follow the browser's own permission and provider behavior.
Shared curriculum and private data
The curriculum knowledge base is shared canonical content and is not copied per learner. Progress, preferences, SRS data, tutor summaries, and learner memory are user-scoped with database row-level security. Server endpoints derive the user identity from the authenticated session and do not trust a client-supplied user ID.
Your choices and rights
You can use text mode, decline optional analytics, export private tutor data from Settings, and delete private tutor summaries and memory notes from Settings. Requests for access, correction, account deletion, or other rights should be sent to the verified privacy contact for the operator. Legal timelines and exceptions depend on the applicable jurisdiction.
Contact and review status
The operator must replace the placeholder privacy contact, confirm the legal basis for each processing purpose, document international transfer safeguards, and approve this version with counsel before launch.