Privacy Policy

1. Overview & Scope

This Privacy Policy explains how Career English Inc. ("Career English", "we", "us", or "our") collects, uses, protects, and discloses information when you use the Career English mobile application for iOS and Android, our website, and related educational services.

2. Information We Collect

A. Account & Session Data

When you start using Career English, an anonymous identifier is assigned to your device session through our secure cloud provider, Supabase. If you sign in using email or account credentials, we store your authentication credentials securely in encrypted form. We do not require social login, phone numbers, or unnecessary personal identifiers to use the app.

B. Learning Progress & Preferences

To provide a continuous learning journey across sessions, we save your learning state, including:

• Your selected professional career goal (e.g., workplace communication, interview confidence, presentations, career growth).
• Completed lesson IDs across the 10-lesson curriculum.
• Self-review checklist selections and written practice draft notes.
• Practice session completion timestamps.

This data is stored locally on your device using encrypted local storage (AsyncStorage) and synchronized with your authenticated Supabase user profile under strict PostgreSQL Row Level Security (RLS).

C. Voice & Speaking Practice (Strict On-Device Processing)

Speaking activities and self-review practice are processed strictly on your device. Audio recordings captured during speaking exercises are stored in temporary device cache for your own playback and review. Audio data is never transmitted to external servers, cloud AI transcription engines, or third parties without your explicit, separate opt-in consent.

D. Subscriptions & Payment Transactions

Career English offers auto-renewing subscriptions through the Apple App Store (In-App Purchases) and Google Play Billing. All financial transactions and payment methods (credit cards, billing addresses) are handled directly by Apple and Google. Career English never accesses, receives, or stores your payment card details.

We use RevenueCat to validate purchase receipts, manage subscription entitlements (unlocking Lessons 4–10 for active premium subscribers), and synchronize lifecycle events. RevenueCat processes an anonymous app user identifier and receipt tokens. Webhook events (such as purchases, renewals, or expirations) are verified server-to-server and logged in Supabase for subscription accounting.

E. Educational Media Delivery

Pre-recorded coach video demonstrations (featuring Diora) and WebVTT captions are delivered via short-lived, signed URLs generated by our private Supabase Storage infrastructure. We do not embed third-party video tracking pixels or behavioral ad trackers.

F. External Account Deletion Requests

When you submit an external account deletion request through our web portal (/delete-account), we collect only the minimal data necessary to identify and verify the account: the submitted email address or learner identifier, optional notes, submission timestamp, and your connecting IP address. This data is collected solely to authenticate the request, prevent unauthorized deletion of third-party learner accounts, and fulfill data deletion compliance. Access is restricted exclusively to authorized administrative operators via encrypted service-role interfaces protected by PostgreSQL Row Level Security. Deletion request intake logs are retained for up to 90 days following completion or rejection for audit verification and dispute resolution, after which they are permanently purged.

3. How We Use Your Information

We use your information exclusively to:

• Deliver and personalize your 10-lesson professional communication curriculum.
• Maintain your learning progress and allow seamless session resumption.
• Validate subscription status and grant premium lesson access.
• Authenticate and fulfill account deletion requests securely.
• Ensure app stability, performance, and security compliance.

4. Data Retention & Permanent Deletion

Your learning progress and account records are retained for as long as your account remains active. You have full control over your data:

• Reset Learning Progress: You can clear your local completed lessons, checklist reviews, and practice drafts at any time in the app (Account & Progress > Reset Learning Progress) while keeping your account and subscription active.
• Instant In-App Deletion: You can permanently delete your account, authentication records, and personal data directly in the app (Account & Progress > Delete Account). Deletion takes effect immediately on our servers, purging your Supabase Auth user record and cascading deletion of database subscription rows.
• External Web Deletion Requests: If you cannot access the mobile app, you can submit an external request via our External Deletion Page. Because unauthenticated web requests cannot verify identity automatically, requests are manually verified before account deletion is executed.

5. Children’s Privacy

Career English is designed exclusively for adult working professionals. We do not knowingly collect personal information from individuals under the age of 13. If we discover that personal data has been collected from a child under 13, we will take immediate steps to delete it.

6. Third-Party Service Providers

We partner with trusted enterprise infrastructure providers who are bound by strict data processing agreements:

• Supabase Inc. — Authentication, PostgreSQL database with Row Level Security, and private Storage.
• RevenueCat Inc. — Mobile in-app purchase validation and subscription lifecycle management.
• Apple Inc. / Google LLC — Mobile platform distribution, native in-app billing, and operating system services.

7. Contact & Privacy Inquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or request assistance with account deletion, please contact our privacy team:

• Email: support@careerenglish.app
• Online Request: External Account Deletion Portal
• Company: Career English Inc.