Privacy policy

Draft for legal and operational review. Updated 7 November 2026. Intended audience: people aged 16 and older, internationally. This draft must be completed and approved before publication.

1. Who is responsible

The controller is Konstantin Alamov, operating GeorgianFlow from the Netherlands. Privacy and support contact: contact@onetruefaith.app. Geographic contact address: [OWNER TO CONFIRM — geographic contact address]. Legal form, registration and any required business disclosures: [OWNER TO CONFIRM]. The operator must confirm that the contact inbox is monitored.

2. Using GeorgianFlow

GeorgianFlow teaches Georgian through lessons, reading, speaking and practice. You can use many activities as a guest. Guest progress is held in your browser; visiting the site still involves network requests and hosting logs. Guest access is not a promise of anonymity.

3. Accounts and learning data

With an account, we process your email, account ID, authentication information, optional display name and sign-up declarations. Supabase handles authentication; we do not receive your plain-text password in our application database. Choosing Google sign-in shares the identity information needed for that sign-in.

Your synced learning snapshot can contain completed lessons, XP, streaks, goals, preferences, saved vocabulary, mistakes, review scheduling and statistics. Some reading and speaking history remains in local browser stores rather than the cloud snapshot. We do not ask for your date of birth, contacts, precise location, camera access or phone number. Avoid putting sensitive information in names, notes or custom vocabulary.

4. Purposes and proposed legal bases

Account management, progress synchronisation, requested AI text chat and optional friend interactions support the service you request; our proposed basis is performance of the user agreement under Article 6(1)(b) GDPR, only where necessary for that activity. Optional cloud learning analytics relies on your affirmative choice under Article 6(1)(a). Security, service reliability and proportionate abuse prevention are proposed legitimate interests under Article 6(1)(f), subject to the documented balancing assessment. A legal obligation may require specific processing under Article 6(1)(c). These assignments await legal review.

5. Optional analytics

Cloud learning analytics is off by default in the application. You can enable or withdraw it in Profile → Privacy controls. It records account-linked exercise targets, outcomes, timings and lesson completion to improve the service. It is not anonymous while linked to your account. Local review and progress work without enabling cloud analytics. Your account choice, notice version and timestamp are recorded. Withdrawing stops future uploads; use Delete my learning analytics or contact us to erase existing detailed events. Previously processed data is not made unlawful by withdrawal.

6. Speaking practice

Speaking practice uses text and optional reading guides. The app does not access your microphone, play pronunciation examples, record, transcribe or score your speech. Historical exercise results may remain in your learning data. For questions about data handled by former providers, contact contact@onetruefaith.app.

7. AI text chat

The AI partner sends the conversation supplied in the current session through Lovable's AI gateway to a Gemini model. The AI responses may be wrong. A human teacher does not write them. Our app does not normally store chat conversations in its database. If you report an AI reply, we store the selected reply, reason, your account ID and report status for safety review. Blocked-connection IDs and dates are stored to enforce your block choices. The retention periods and moderation process require owner approval before launch. Provider retention, model training and international processing depend on the actual account arrangements and remain [OWNER/PROVIDER TO VERIFY]. Do not include sensitive information in chat.

8. Friends and profile visibility

Friend features use an optional social profile, friend code, selected name/emoji, XP and streak. Connected people may see these fields according to the friendship state. The database policies limit profile and relationship access; production deployment must be verified. Cheers are fixed encouragement choices, not unrestricted public chat. You can remove a connection. We do not operate a public email-address directory.

9. Recipients and service providers

The code uses Lovable hosting/configuration, Cloudflare deployment infrastructure, Supabase authentication/database services, Lovable's AI gateway with Gemini. Google also receives data if you choose Google sign-in. Hosting, authentication/email delivery and error-monitoring infrastructure may process technical request data. Provider roles, subprocessors, regions and agreements must be confirmed for the actual deployment. Fonts are bundled rather than requested from Google Fonts. No advertising SDK, purchase service, marketing campaign system or push-subscription backend was found in the audited repository.

10. International processing

Some recipients may process data outside the EEA. The operator must identify the recipient, location and applicable safeguard for each transfer, such as an applicable adequacy decision or executed standard contractual clauses with the necessary assessment. These safeguards are not represented as already executed. Contact us for the verified information or a copy of relevant safeguards; [TRANSFER REGISTER TO BE COMPLETED BEFORE RELEASE].

11. Retention

Account and synced learning data remain until deletion, with an operational review of continued necessity. The database's existing learning-event retention default is 180 days with aggregation; its live configuration and scheduled execution must be verified. Aggregation must be assessed for re-identification risk before calling it anonymous. Security/admin logs, authentication/provider logs and backups have separate schedules: [OWNER/PROVIDERS TO CONFIRM THE PERIODS AND JUSTIFICATIONS]. Rate-limit windows are technical controls, not a promise about hosting logs. No financial records are collected through a purchase flow in the audited app.

12. Local storage and notifications

The browser stores learning progress, review/reading/speaking statistics, lesson resume state, settings, privacy choices and authentication tokens. Our data download excludes tokens. Static app assets may be cached for offline opening; server functions, account/authentication pages and query-bearing requests are excluded from the service-worker cache. Clearing browser data can remove unsynced progress. Local data is cleared when a known account changes or signs out to protect shared devices. Browser notification permission/preferences alone do not implement reliable background reminders; the current app offers a reminder plan, not guaranteed push delivery.

13. Security

The application uses authenticated server operations, ownership-scoped access, database policies, admin assurance checks, and request limits. Security also depends on deployed settings, updates and operational checks. No security measure eliminates every risk. We do not publish credentials or detailed defensive secrets in this policy.

14. Your rights and choices

Depending on applicable law, you can request access, correction, erasure, restriction, portability and objection. Consent can be withdrawn without affecting earlier lawful processing. Use Profile → Privacy controls to download app data or change analytics, Profile → Delete account, or email contact@onetruefaith.app. For records outside the self-service export or an export marked incomplete, request a complete access response by email. We verify identity proportionately and never ask for your password. GDPR requests are normally addressed within one month; any lawful extension and reasons must be communicated. Other applicable local rights remain available.

15. Account deletion

The public /delete-account page works through a browser without reinstalling the app and explains authenticated deletion or an email request. Deletion removes the auth account and application data associated with it. Other offline devices, processor copies, backups and any justified legal retention require the documented operational process. Deletion is not described as instantaneous destruction of every provider copy. The application currently has no store-managed subscription flow.

16. Age and sensitive information

The owner intends GeorgianFlow for users aged 16 and older, not as a children's service. We use an age declaration for account registration rather than collecting birth dates. If we learn of an ineligible account, we will assess proportionate verification and removal. Store age ratings are separate. Learning about heritage or religion is not a declaration of belief; we do not use learning choices to infer religious affiliation or make high-impact decisions. Tell us if sensitive information has been submitted so we can assess the appropriate response.

17. Complaints, changes and local protections

Contact contact@onetruefaith.app with privacy concerns. You may complain to your competent supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens, https://autoriteitpersoonsgegevens.nl. We update this notice when processing changes and communicate material changes as appropriate. Mandatory local protections are not waived by this policy. International rollout requires the market assessment in the release documentation.