Privacy Policy

You can use yomion with no account at all — typing, flashcards, spaced repetition, and gamification work entirely in your browser via local storage. If you create an account, we store your email, study progress, and (if you subscribe) billing relationship. We do not sell your data, show ads, or use tracking cookies. Analytics are cookieless.

aaen studios operates yomion and is the data controller for your personal data. To reach us about privacy: elliot@aaenz.no (within 2 business days).

Account data (Supabase Auth) — when you sign up:

• Email address and a hashed password, or your Google account via OAuth.
• Display name, avatar, timezone, and study preferences you set.
• Email-verification state (a verified email is required to start a trial).

Payment data (Stripe):

• Stripe customer and subscription IDs, billing tier, and period.
• Card numbers never touch yomion. Checkout and the customer portal are hosted by Stripe.

Study & user content (Supabase Postgres + Storage):

• Decks, cards, review state (SRS), gamification progress, and achievements.
• Lesson progress, chat sessions and messages, custom scenarios, and AI-generated icons you save.
• Avatar images (private storage bucket) and cached audio/TTS assets.

Anonymous, local-first play:

• If you never sign up, your typing, cards, SRS, and gamification state live only in your browser's local storage.
• On signup, this local state is merged into your cloud account; the cloud becomes the source of truth thereafter.

AI feature inputs/outputs (OpenRouter):

• The text you submit for translation judging, explanations, scenario chat, and icon/deck/sentence generation is sent to an LLM provider to generate a response.
• Responses are cached by content hash so repeat identical requests are served from our cache, not re-sent.
• Free-tier AI is capped at 15 actions/day; paid tiers get more — see our Plans.

Rate-limiting & anti-abuse (Upstash Redis):

• Per-IP request counts for burst protection and daily AI quota.
• For anonymous AI use, a signed httponly device cookie carries a counter. Clearing it just rolls a fresh 15/day budget on a new cookie.

Analytics & performance (Vercel):

• Cookieless page-view counts and real-user Core Web Vitals (LCP/INP/CLS).
• Because these are cookieless, no consent banner is required.

The providers that process data on our behalf, and what each does:

If you're in the EEA/UK/Switzerland, we process your data on these bases:

• Performance of a contract — running your account, study state, and subscription.
• Our legitimate interests — security, rate-limiting, analytics, and fraud/abuse prevention.
• Consent — for optional features like Google sign-in and AI features.
• Legal obligation — e.g. tax/records where required.

• Account and study content: kept while your account is active. Deleted when you delete your account (see Your Rights).
• Stripe billing records: retained by Stripe per its own policy; we keep only the IDs and tier.
• AI cache: kept to serve repeat requests and pruned on a lifecycle schedule.
• Anonymous local storage: lives only in your browser until you clear it.
• Logs: short-lived operational logs are retained only as long as needed for security and troubleshooting.

You can access, export, correct, or delete your data. You can also object to or restrict certain processing, and withdraw consent without losing the right to use the free tier.

• Self-serve. Export your decks to CSV from the app; cancel your subscription from Settings → Account.
• Email us. For account deletion or a full data export, email elliot@aaenz.nofrom your account address. We'll respond within 2 business days.
• California (CCPA).We do not sell personal information. You have the right to know, delete, correct, opt out of any “sale” or “sharing,” and not to be discriminated against for exercising these rights.
• Lodge a complaint. You can contact your local data-protection authority (e.g. the Norwegian Datatilsynet or your national DPA).

We use a theme cookie (light/dark) and a signed device cookie for anonymous AI-quota counting. We do notuse advertising or cross-site tracking cookies. Analytics are cookieless. Study progress for anonymous use is stored in your browser's local storage.

yomion is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has given us personal information, email us and we will delete it.

Your data is processed by the providers listed above, which may store or transfer data outside your home country. Each provider relies on appropriate safeguards (such as Standard Contractual Clauses) for such transfers. See each provider's policy for specifics.

We use row-level security in the database so each user can access only their own data, signed server-only cookies for quota, and Stripe-hosted checkout so card data never reaches our servers. No method is perfectly secure, but we follow industry practices for a service of our size.

We may update this policy as the product changes. The “Last updated” date above always reflects the current version. Material changes will be noted here or, where appropriate, by email.

Questions or a data request? Email elliot@aaenz.no. Also see our Terms of Service.