Privacy
Updated 21 October 2026
This is a previous version. It applied until 30 October 2026. The current version: Privacy.
We keep only what the app can’t work without. No ads, and we don’t sell data.
What we keep
| Account | Your email. With Google sign-in, also your name and profile photo. |
| Without an account | You can learn without an account. Then there is no email: your progress is tied to a random id kept in this browser. |
| Learning | Languages, levels, interests, texts and audio, your word list, exercise results, topics you type in. |
| Your own texts | Texts and links you paste in to read. |
| Voice | Recordings are sent for speech recognition and are not kept. What stays is the recognised text and the score. |
| Questions and chats with AI | What you write or say to the AI (questions in «Ask AI», chats and scenes with characters, picture descriptions) and its answers, with the time. We use them to improve the answers and to stop misuse. |
| Reminders | If you turn them on: the address for browser notifications, your time zone and the time you chose. |
| Letters with news | Whether you agreed to them, and when and where you answered. With your consent, also your language, level, sign-up date, last visit and finished course stages, to send you what fits. |
| Plus subscription | If you subscribe: its status, the paid period, the amount and currency, and the subscription and customer ids at the payment provider. Card details never reach us. |
| Messages to us | What you send us through «Write to us». |
| Technical | IP address and browser at sign-in and when you start without an account, counters for the daily limits. |
| Analytics | Which screens are opened and what is tapped, device type, session recordings. Typed text is hidden in recordings. |
Why
- So you can sign in and pick up where you left off on any device.
- To pick texts and audio for your level and interests.
- To send sign-in codes, and reminders if they are on.
- To send letters with news and learning tips, only if you agreed. You can turn them off in Settings or by the «unsubscribe» link in any letter.
- To take payment for Plus and turn the subscription on and renew it.
- To find what’s broken in the app and fix it.
Who else gets data
- OpenAI writes texts and audio, answers questions, reads text aloud and recognises speech. It gets your level, interests, topics, questions, pasted texts and voice recordings. It doesn’t get your email or name, and doesn’t train models on this data.
- Brevo sends the emails with codes and, if you agreed, letters with news. It gets your email, interface and studied language, level, sign-up date, last visit, number of finished course stages and your answer about letters.
- Paddle takes payment for Plus with non-Russian cards and is the Merchant of Record for those orders. It gets your email and account id; your card details, country and postcode you enter with Paddle directly. Paddle handles its payment data under its own policy.
- Lava.top takes payment for Plus with Russian cards. It gets your email; your card details you enter with Lava.top directly.
- Google passes us your email, name and photo if you sign in with Google.
- Cloudflare checks that a person, not a script, starts the app or asks for a sign-in code. It gets your IP address and browser data.
- Amplitude collects analytics and session recordings. It gets your account id, email, language and level.
- Our hosting provider, where the app and the database run, and your browser’s notification service.
Nobody else, unless the law requires it.
The shared library
Texts Okuma writes for you on a random topic may go into the shared library, without your name or email. Texts on a topic you chose and texts you pasted in never do.
Deletion
- Data is kept while your account exists. You can delete it in Settings, see deleting your account for details.
- After deletion, learning data stays only anonymised, with no link to you. Your contact at Brevo is deleted too, and a Plus subscription is cancelled. Paddle and Lava.top keep their payment records for as long as the law requires.
- Without an account, all your data is deleted after 7 days without a visit. To delete it at once: «Reset progress» in Settings. If you create an account, everything you did moves into it. If you sign in to an account you already had, the progress made without it is deleted.
- Questions and chats with AI are kept for 90 days, then deleted.
- Database backups are kept for no longer than 30 days.
- Your browser stores a sign-in token and a device id for analytics. Cloudflare may set its own technical cookie during the check. There are no advertising cookies.
Contact
To find out what we keep about you, correct it or delete it: «Write to us» in Settings, or shternyan@gmail.com.
Okuma is not for children under 13. If this policy changes, we’ll update this page and its date.