Privacy Policy

1. Introduction

Welcome to Hula, a language learning platform designed to help you expand your vocabulary and improve your language skills. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our service.

2. Information We Collect

When you use Hula, we collect the following types of information:

• Account Information: When you sign in via Google or Discord, we collect your name, email address, and profile picture provided by these services.
• Learning Data: Your progress, studied words, quiz results, learning statistics, and preferences.
• Usage Data: Information about how you interact with our service, including features used and time spent learning.
• Technical Data: IP address, browser type, device information, operating system, and language preferences.
• Feedback and Communications: Any messages, feedback, or support requests you send to us.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our language learning platform.
• Personalization: To customize your learning experience based on your progress and preferences.
• Account Management: To create and manage your account, authenticate your identity, and maintain account security.
• Communication: To send you important updates, respond to your inquiries, and provide customer support.
• Analytics: To analyze usage patterns and improve our service quality and features.
• Security: To detect, prevent, and address technical issues, fraud, and abuse.

4. OAuth Authentication

We use OAuth 2.0 protocol for secure authentication through Google and Discord. This means:

• We never have access to your Google or Discord password.
• We only receive basic profile information that you authorize us to access.
• You can revoke our access at any time through your Google or Discord account settings.
• Your authentication is handled securely by Google and Discord's infrastructure.

5. Data Storage and Security

We take data security seriously and implement industry-standard measures to protect your information:

• Your data is stored on secure servers with encryption at rest and in transit.
• We use HTTPS/SSL encryption for all data transmission.
• Access to user data is restricted to authorized personnel only.
• We regularly update our security practices and conduct security audits.
• We maintain backups to prevent data loss.

6. Data Sharing and Third Parties

We respect your privacy and do not sell your personal information. We may share data only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our platform (hosting, analytics, authentication).
• Legal Requirements: When required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, with proper notice to users.
• With Your Consent: When you explicitly authorize us to share your information.

7. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information in your account.
• Deletion: Request deletion of your account and associated data.
• Export: Download your learning data in a portable format.
• Opt-out: Unsubscribe from promotional communications.
• Revoke Access: Disconnect your Google or Discord account at any time.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session and remember your preferences.
• Analyze how you use our service to improve functionality.
• Ensure security and prevent fraud.

You can control cookies through your browser settings, but disabling them may limit some features of our service.

9. Children's Privacy

Our service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal purposes.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last updated" date.
• Sending you an email notification if the changes materially affect your rights.

Your continued use of Hula after changes are posted constitutes your acceptance of the updated policy.