This policy explains what data YabLab collects, why, and what control you have. Short version: we collect what the learning features need, checking runs only with your consent, we never sell your data, and you can delete everything.
1. What we collect
- Account — email, name, password hash, interface preferences.
- Learning data — words you save, flashcards, writing attempts, detected mistakes and your personal error profile, practice results. This is the product: it exists so the Service can teach you.
- Text you write — sent for checking only while checking is turned on. The extension is off until you explicitly enable it, and you can pause it or disable it for any site in one click.
- Usage analytics — product events (e.g. “session started”), collected via PostHog to improve the Service. No advertising trackers.
- Payments — handled entirely by Paddle, our merchant of record. We receive subscription status, never your card details.
2. How AI processing works
To produce corrections, explanations and exercises, the relevant text is sent to our servers and processed by third-party AI model providers acting as our processors. We send only what the feature needs, providers are bound by their data-processing terms, and we do not use your text to train models of our own. AI requests are metered per account to prevent abuse.
3. What we never do
- Sell or rent your personal data.
- Use your texts for advertising or profiling unrelated to learning.
- Read your writing when checking is off.
4. Storage and retention
Data is stored on our servers in the EU. Learning data is kept while your account exists. Deleting your account removes your personal data from production systems; residual copies in encrypted backups expire on backup rotation.
5. Your rights
You can access and export your data, correct it, or delete your account from profile settings. For anything else (GDPR-style requests included), contact us via the support form — we answer within 30 days.
6. Cookies
We use strictly necessary cookies for authentication (session refresh). No third-party advertising cookies.
7. Children
The Service is not directed at children under 16.
8. Changes and contact
We will announce material changes to this policy in the app or by email. Questions: support form in the app profile, or the contact link in the footer.