Privacy Policy
Last updated: 11 November 2026
This policy explains what personal data Fluentra collects, why, who else handles it, how long we keep it and what you can do about it. It also describes the cookies and browser storage we use. Our Terms of Service cover how you may use Fluentra.
Who we are
Fluentra is an English learning service at fluentra.pro and app.fluentra.pro. It is run by Ani Muradyan. You can reach us about privacy at info.fluentra@gmail.com.
What we collect and why
| Data | What it includes | Why |
|---|---|---|
| Account | Your email address, and your password if you set one. Your password is managed by our account provider, Supabase, and we don't see it. If you sign in with Google, see Signing in. If a tutor invited you, the invite link is recorded. | To create your account and sign you in |
| Profile | Your native language and the language you're learning, your role (learner or tutor), your last sign-in and the tutor you're linked to. Tutors also add a workspace name, focus and levels. | To set up the app and show lessons in your language |
| Courses and progress | Courses you've started, lessons and homework completed, your place in a lesson, points, streaks and goals, and access requests. Homework can include what you write. | To keep your place and show your progress |
| Practice results | For each Practice question in a course lesson, whether your first try was right. If it wasn't, and you picked an option or typed a short answer of letters only, that answer is kept too (at most 160 characters). Longer typed answers aren't kept. For Speaking Check, the outcome: the verdict, whether you answered the task, whether the recording was unclear, how many corrections you got and the areas to improve. | To show your progress and to write learning reviews (see Learning reviews) |
| My Words | The words you save, their translations and where you saved them from, and any texts you save. | To build your word list and practice |
| Activity | A record of learning activity, such as signing in or completing a lesson. | To show progress to you and to your tutor, if you have one |
| Plans and purchases | If you buy or start a trial: your plan or course, its price, currency and billing region, its status and its start, renewal, trial and end dates, and the payment provider's IDs (Stripe or Lemon Squeezy) for your subscription, order and customer record. We never receive your card details. | To open what you paid for, show your plan, and answer questions about it |
| Your region | A country estimated from your IP address. We keep it with a checkout or purchase and with your email settings, and don't keep the IP address. | To show the price and trial for your region, and to decide whether an offer applies |
| Trusted devices | A scrambled version of a random ID your browser keeps, a rough device label such as the browser and system, and when it was first and last used. | To limit an account to two devices, so it isn't shared |
| Reminders | If you turn them on: your browser's push details and device type, your time zone, your settings and which words were sent. | To send practice reminders |
| Telegram | If you connect it: your Telegram chat ID and username. | To send quizzes and reply to you in Telegram |
We don't ask for your age or phone number when you sign up.
Signing in
Email and password. Accounts are managed by Supabase. We may ask you to confirm your email address by following a link we send you. Password-reset emails come from Supabase.
Continue with Google. Where it's offered, you can sign in with Google instead. We ask Google only for your email address and your basic profile: your name and profile picture. We don't get your Google password, and we can't see your Google account's emails, contacts or files. Supabase keeps what Google shares with your account. We use your email address to sign you in and contact you; your name can be shown to Fluentra's administrators when they manage course access.
If you sign in with Google using the email address of an account that already exists, Google sign-in is added to that account, so your words, progress and plan stay where they are. Because Google has just confirmed that the address is yours, we then remove any earlier password on the account and sign out its other sessions. You can keep using Google, or set a new password with a reset link. We keep a record of when Google sign-in was added and whether a password was removed.
If you work with a tutor
A tutor you're linked to can see your email address, activity, progress and scores. A tutor can add a student's name and email before that person has an account. Tutors can also upload lesson files, which we store with our hosting provider. These files may be reachable by anyone who has the link, so please don't put private information in them.
Speaking and AI features
You can record yourself in speaking tasks and play the recording back in your browser. Nothing is sent unless you ask for feedback.
When you tap Check my answer, your recording goes to a speech-to-text service (Groq, or ElevenLabs in Aviation English), and the transcript goes to an AI model (Google Gemini) with the task you were answering, to write your feedback. In beginner lessons it is also told which language to write the feedback in. We don't send your name, email or account ID with them, and we don't keep the audio or the transcript. We keep a record that a check happened and when, so we can limit how many checks are used, and the outcome described under Practice results. The feedback is generated by AI and can be wrong.
Other features that use outside services:
- Tutor lesson tools: the text a tutor enters goes to OpenAI to generate lesson material, and the result is saved for that tutor.
- Telegram: if you connect it, your messages, first name, some of your saved words and your language go to Anthropic (Claude) so the bot can reply. Voice messages go to a speech-to-text service, and spoken replies are made with ElevenLabs. Telegram also handles these messages under its own terms.
- Word lookups: when you look up or translate a word, that word is sent to translation and dictionary services (Google Cloud Translation, with MyMemory as a backup, and dictionaryapi.dev and Wiktionary for definitions). The add-word box sends what you type to Datamuse for suggestions.
Course and lesson audio is made with AI voices in advance, so it doesn't involve your data.
Learning reviews
We're testing short learning reviews: a weekly review and a review when you finish a module. At the moment only a small group of test accounts receive them, and we may change or stop them.
A review is built from the progress and practice results described above. We keep each review as it was written, so an old one doesn't change later. Its sentences come from a template, and may be reworded by an AI model (Google Gemini) to read more naturally. The model is given only the figures and template sentences, never your name, email, account ID or answers. Emails about reviews follow your learning reminders setting.
Plans and payments
Stripe processes payments for General English Full Access. When you check out, we send it your account email, your account ID and the plan you chose, so your subscription can be linked to your account. You give it your card and billing details directly, under its own terms and privacy policy. It tells us when a subscription starts, changes or ends.
Lemon Squeezy is the seller of record for courses sold on their own. When you check out, we send it your account email, your account ID and the plan or course you chose, so your purchase can be linked to your account. You give it your card and billing details directly, under its own terms and privacy policy, and it sends your receipts and handles tax. It tells us when a subscription or purchase starts, changes or ends.
PostHog also receives events about plans and checkouts, such as a plan chosen or a purchase completed, with the amount and region. These never include your card details.
Emails we send
We send email through a provider, Resend, using your account's email address. We read the address when we send and don't keep a copy of the messages. We do keep a record of what was sent to you and when, what became of it (sent, delivered, bounced or failed), and whether you opened a link in it, so that we don't send the same thing twice.
- Essential emails: your account and its security (for example, when Google sign-in is added), changes to your course access, and the state of your plan. You can't turn these off, because you need them to use Fluentra. Receipts and payment emails come from the payment provider, Stripe or Lemon Squeezy.
- Learning reminders: your next lesson, words to practise, course milestones and learning reviews, based on your activity in Fluentra. They're on unless you turn them off. We send them at a reasonable hour in your timezone, and no more than one every few days.
- Product updates: new courses, features and important news. We send these only if you've turned them on.
- Offers: discounts and invitations. We send these only if you've said yes.
You can change these under Email preferences in your Profile, and every optional email has an unsubscribe link. Unsubscribing from one kind doesn't affect the others. To decide when a reminder is relevant and whether an offer applies to you, we use your activity, your plan, your timezone and the country your connection appears to be in.
We count when you follow a link in an email, using a link that passes through our own server. We don't put tracking pixels in our emails.
The English Level Test
The test gives you an Estimated CEFR level from A1 to C1 to help you choose where to start. It is not a certificate or an official qualification.
What it stores
| Data | Why |
|---|---|
| The questions you were shown | To run the test, and to show you different questions if you take it again |
| Your answers, stored only as the number of the option you selected, whether it was right, and how long you took | To work out your result, and to check later whether each question is the right difficulty |
| Your result: estimated level, section results, confidence and the recommended course | To show you your result, and to save it if you have an account |
| Test details: when you started and finished, the test version, website or app, where you opened it from, and whether listening was included | To run the test and understand how it is used |
The test does not use your microphone. We do not record learner audio during the test, and we do not store learner transcripts from it.
If you're not signed in
You can take the test without an account, and we don't ask for your name or email. Your result is linked to a random key kept in your browser, and we store only a scrambled version of that key (a SHA-256 hash). We use your IP address briefly, in memory, to limit how many tests can be started from one address, and we don't save it with your test.
If you're signed in
We store the same test data linked to your account, so you can see your latest result and earlier ones. If you took the test signed out and then sign up or sign in, your finished result is added to that account. Taking the test doesn't change your course progress.
How long we keep it
| Data | How long we keep it |
|---|---|
| Unfinished attempts | 30 days |
| Finished results not linked to an account | 12 months |
| Your individual answers (signed in or not) | 12 months |
| Results linked to an account | Until the account is deleted |
We remove expired test data periodically, so it can stay somewhat longer than shown.
Getting or deleting a result without an account
We can't find an anonymous result by your name or email, because we don't have them. The only link between you and the result is the key in your browser.
- To see it: open the test in the same browser, or sign up there to add the result to an account.
- To delete it: contact us with the key. It's stored in your browser under
fl_lt_result, and we can explain how to find it. Treat this key as private: anyone who has it can see that result. - If the key is gone: if you cleared your browser data or used another device, we can't tell which result is yours. The result expires as shown above.
Clearing your browser data removes the key from your device, but doesn't delete the result from our database.
Analytics
We use PostHog, hosted on its US servers, to understand how Fluentra is used and to find problems. We use no advertising trackers. You can turn analytics cookies and session recording off any time under Cookie settings, in the website footer or in your Profile.
Session recording. PostHog records how you use the website and the app, such as pages, clicks, taps and scrolling, so we can find problems. Everything you type is hidden, and so is the level test. In the app, your own words, texts and account details are hidden too. Your voice is never recorded this way. Tutor and admin accounts aren't recorded. If you're signed in, recordings are linked to your username and account ID.
Events. PostHog receives events such as lessons completed and tests finished, with levels, counts, durations, your device type and the source of the page visit. They also carry your role and app language as a label, such as "learner" and "es". If you're signed in, they're linked to a PostHog profile with your username (the part of your email address before the @), account ID, role and languages. We don't send it your full email address, the content of what you write, or your test answers, questions or answer options.
Location. Unless you turn this off, PostHog uses your IP address to estimate your country and city, and keeps that with your events.
Cookies. PostHog stores a random visitor ID and session ID in a cookie and in browser storage, so it can tell which pages belong to one visit and recognise your device on later visits, across fluentra.pro and app.fluentra.pro.
If you turn this off. PostHog runs in cookieless mode, so it stores nothing in your browser and can't recognise you from one day to the next. Every web request carries your IP address. PostHog uses it, with your browser type and a value that changes daily, to work out an anonymous count of visitors for that day. We've set PostHog not to keep your IP address with events, and in this mode not to use it to estimate your location.
PostHog keeps this data for the period set by its terms and our plan.
Cookies and browser storage
| Name | Type | What it does | How long |
|---|---|---|---|
sb-* | Browser storage | Keeps you signed in | Until you sign out |
fluentra_device_id | Browser storage | A random ID for this browser, so your trusted devices can be told apart. It isn't derived from your device | Until you clear your browser data |
fl_lt_active, fl_lt_attempts | Browser storage | Your place during a level test, and your last 10 attempt keys so a retake shows different questions | Until the test ends, or you clear your browser data |
fl_lt_result | Browser storage and a cookie on .fluentra.pro | The key to your latest finished level test result, so the app can add it to your account | Browser storage until it's added to an account or you clear it. Cookie 30 days |
fl_lt_pending_course, fluentra_pending_invite_code, fl_a1_demo, fluentra.pendingGoogleSignup | Browser storage | Something you chose before signing in, such as a course, a tutor invite, a lesson you tried or your language for a Google sign-up | Until used |
vocab_target_language, badges-*, other fluentra keys | Browser storage | Your language setting, badge state, and app preferences such as your courses view and whether you've seen the tour | Until you clear your browser data |
fl_consent | Cookie on .fluentra.pro | Your choice under Cookie settings | 1 year |
ph_* | Cookie and browser storage | PostHog's random visitor and session IDs | 1 year, or until you turn this off |
fluentra_app | Cookie | Marks that you're using the Android app | 1 year |
GAESA | Cookie | Set by our hosting provider's network, not by Fluentra | Set by the provider |
The app also stores files in your browser so it loads quickly. Pages load fonts from Google Fonts, and lessons can load photos from Pexels and videos from YouTube, which means those services see your IP address. We don't use advertising cookies.
Server logs
Our server logs each API request's type, route, status and duration, and a short error code when something fails. These logs don't include the content of responses. Our hosting provider also keeps its own technical logs, which can include IP addresses, for a limited time under its own policy.
Who processes data for us
We don't sell your personal data. These providers handle it for the purposes shown:
| Provider | What for | Where we know it runs |
|---|---|---|
| Supabase | Database, accounts, sign-in (including Google sign-in) and password-reset email | United States (AWS us-west-1) |
| Sign-in, if you choose Continue with Google | Set by Google | |
| Replit | Hosting, logs and tutor file storage | Served through Google's network |
| Resend | Sending email from Fluentra. It receives your email address and the message. | United States |
| PostHog | Analytics | United States |
| Stripe | Payments for General English Full Access. It collects your card and billing details; we receive the status and dates of your subscription, never your card details | Set by the provider |
| Lemon Squeezy | Payments for courses sold on their own, as the seller of record. It collects your card and billing details; we receive the status and dates of your subscription or purchase, never your card details | Set by the provider |
| GitHub | Encrypted database backups | Set by GitHub |
| Groq, ElevenLabs and Google (Gemini) | Speaking feedback: speech-to-text and the feedback itself. Google Gemini may also reword learning reviews | Set by the provider |
| OpenAI | Tutor lesson tools, and a backup for speech-to-text | Set by the provider |
| Anthropic, ElevenLabs and Telegram | The Telegram bot, if you connect it | Set by the provider |
| Browser push services | Delivering reminders, if you turn them on (the reminder can include a word) | Set by your browser's maker |
| Google Cloud Translation, MyMemory, dictionaryapi.dev, Wiktionary and Datamuse | Looking up and suggesting words | Set by the provider |
Where your data is processed
Our providers run their services in the United States and other countries, so your data may be processed outside the country where you live, where data protection law may be different.
How long we keep other data
We keep your account and learning data, including your practice results, learning reviews and plan and purchase records, for as long as your account exists, unless you delete it yourself first, as you can with saved words. Stripe and Lemon Squeezy keep their own payment records under their own policies. We keep encrypted database backups for 90 days, so deleted data can stay in a backup until that backup expires.
Deleting your account
In the app, go to Profile → Delete account to send the request, or contact us at info.fluentra@gmail.com from the email address on the account. We then delete it. Please cancel any active subscription first, because deleting your account here doesn't cancel it with Stripe or Lemon Squeezy.
Deleting an account removes your course progress, homework, practice results, learning reviews, activity, email settings and history, reminders, Telegram connection, level test results and answers, plan and purchase records, trusted devices and Google sign-in record automatically. We remove your remaining records, such as points and game progress, as part of the same request, and we ask PostHog to remove your profile. Backups expire as described above. If a tutor added your email to their own lists, it can stay there until it is removed, and we can help with that if you ask.
Your choices and rights
You can change your languages in your profile, turn reminders and optional emails off, turn analytics off under Cookie settings and delete saved words at any time. To disconnect Telegram, contact us at info.fluentra@gmail.com. Depending on where you live, you may have rights to access, correct, delete or get a copy of your data, or to object to how we use it. To ask, contact us at info.fluentra@gmail.com. We may need to confirm that the request comes from the account's owner, usually by replying from its email address. You may also be able to complain to a data protection authority where you live.
Security
Fluentra is served over HTTPS. Access to the database is restricted: learner data is read through our server or under database rules that control which account can see what, and backups are encrypted. No service can promise perfect security, so please use a password you don't use anywhere else.
Children
Fluentra is intended for adults. We don't ask for age and don't knowingly collect data from children. If you believe a child has given us personal data, contact us at info.fluentra@gmail.com and we'll delete it.
Changes to this policy
If we change this policy, we'll update it here and change the date at the top.
Contact
For anything about your data or this policy, write to info.fluentra@gmail.com, from your account's email address if you have an account.