Privacy Policy

Last updated: July 9, 2026

This Privacy Policy explains how Verbanu (“we,” “us”) collects, uses, and protects your information when you use verbanu.com and app.verbanu.com (the “Service”).

1. Who we are

Verbanu is operated by the individual behind the Service. For privacy-related requests, contact support@verbanu.com.

2. What we collect

Account information

• Email address and password (password stored as a secure hash by Supabase Auth)
• Account creation and last-seen timestamps

App data (Premium users)

• Classrooms, vocabulary lists, player settings, learned words, and listening statistics
• Saved session presets and active playback state
• This data is stored in Supabase (PostgreSQL) and synced across your devices

Free tier sessions

• Word lists and settings for free sessions are stored only in your browser (sessionStorage) and are not sent to our servers unless you create an account

Usage and analytics

• Engagement events such as session start, play start/end, word uploads, and classroom actions
• Marketing attribution (UTM parameters from your first visit)
• Referrer and landing page path
• Periodic heartbeat while signed in (to update last-seen time)

Billing information

• Payment card and billing details are processed by Paddle; we store subscription status, Paddle customer/subscription IDs, and billing period dates — not full card numbers

Cookies

• Authentication session cookies (Supabase)
• Dark mode preference (vocab-dark-mode)
• WordPress cookies if you interact with this marketing site

3. Why we collect it

We use your information to:

• Provide, maintain, and sync the Service across your devices
• Process subscriptions and manage billing
• Understand how the product is used and improve features
• Attribute signups to marketing campaigns
• Respond to support requests and enforce our Terms

4. Legal basis (GDPR)

If you are in the European Economic Area or UK, we process your data based on:

• Contract — to provide the Service you signed up for
• Legitimate interests — product analytics, security, and fraud prevention
• Consent — where required (e.g. non-essential cookies, if applicable)
• Legal obligation — where we must retain records for tax or law

5. Data processors

We use trusted third parties to run the Service:

• Supabase — authentication and database hosting
• Paddle — payment processing and subscription management
• Hetzner — application hosting

These providers process data on our behalf under their own privacy policies and data processing terms.

6. Retention

• Account and classroom data is kept until you delete it or close your account
• Engagement events are automatically purged after approximately 90 days
• Billing records may be retained as required by tax and accounting laws

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Export your app data (available from the account page in the app)
• Delete your cloud data (account page → Delete all cloud data)
• Correct inaccurate information
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Lodge a complaint with your local data protection authority

To exercise these rights, email support@verbanu.com. For subscription changes, use the Paddle customer portal in your app account page.

8. Security

We use HTTPS, server-side validation, and access controls to protect your data. Premium cloud writes require an active subscription verified on the server. No method of transmission over the Internet is 100% secure, but we take reasonable steps to safeguard your information.

9. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Your data may be processed in countries outside your own (including the EU and United States) where our processors operate. We rely on appropriate safeguards such as standard contractual clauses where required.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest version. Material changes will be posted on this page.

12. Contact

Privacy questions or requests: support@verbanu.com