Privacy Policy
Your privacy matters. Here's how we protect your data.
Last updated: February 18, 2026
At NativePal, we believe that Everyone Can Learn — and everyone deserves to learn in a safe, private environment. This Privacy Policy explains how we collect, use, and protect your information when you use our language learning platform.
1Information We Collect
Account Information
When you create an account, we collect your email address and name. This information is used to identify you and provide personalized learning experiences.
Learning Data
We collect data about your learning progress, including lesson completions, assessment scores, practice session recordings, and time spent on activities. This helps us personalize your curriculum and track your improvement.
Voice Recordings
During speaking practice sessions, we temporarily process voice recordings to provide pronunciation feedback. Audio is processed in real-time and is not permanently stored unless you explicitly opt-in to help improve our AI models.
Usage Analytics
We collect anonymized usage data to improve our platform, including pages visited, features used, and technical information about your device and browser.
2How We Use Your Information
Personalized Learning
Your learning data powers our AI to create customized lesson plans, identify areas for improvement, and adjust difficulty levels to optimize your progress.
Communication
We use your email to send important updates about your subscription, learning reminders (if enabled), and occasional product announcements. You can unsubscribe from non-essential emails at any time.
Platform Improvement
Aggregated, anonymized data helps us understand how learners use NativePal, enabling us to improve our curriculum, AI tutors, and overall user experience.
3Data Protection & Security
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your sensitive information is protected by industry-standard security measures.
Access Controls
We implement strict access controls and authentication measures. Only authorized personnel can access user data, and all access is logged and audited.
Third-Party Services
We use trusted third-party services (Supabase for authentication, Stripe for payments, Vercel for hosting) that comply with SOC 2 and GDPR standards.
4Your Rights
Access & Portability
You can request a copy of all personal data we hold about you. We will provide this in a machine-readable format within 30 days of your request.
Correction & Deletion
You can update your account information at any time. You may also request complete deletion of your account and all associated data.
Consent Withdrawal
You can withdraw consent for optional data processing (like voice recording for AI improvement) at any time without affecting your access to core features.
GDPR & CCPA Compliance
We comply with GDPR (for EU users) and CCPA (for California users). This includes rights to know, delete, and opt-out of data sales (we do not sell your data).
5Data Retention
Active Accounts
We retain your data while your account is active to provide our services. Learning progress and certificates are preserved to maintain your achievement history.
Account Deletion
Upon account deletion request, we remove personal data within 30 days. Some anonymized, aggregated data may be retained for analytics purposes.
Legal Requirements
We may retain certain data longer if required by law (e.g., financial records for tax purposes).
6Cookies & Tracking
Essential Cookies
We use essential cookies for authentication and security. These cannot be disabled as they are necessary for the platform to function.
Analytics
We use privacy-focused analytics to understand platform usage. No personal data is shared with advertising networks.
No Ad Tracking
NativePal does not use advertising trackers, sell your data to advertisers, or share your information with ad networks.
7Children's Privacy
Age Requirements
NativePal is designed for users 13 and older. We do not knowingly collect personal information from children under 13 without parental consent.
Educational Institution Use
Schools and educational institutions using NativePal are responsible for obtaining necessary parental consents under COPPA and applicable laws.
8Contact Us
Privacy Questions
For any privacy-related questions or to exercise your data rights, contact us at privacy@nativepal.ai. We aim to respond within 48 hours.
Data Protection Officer
Our Data Protection Officer can be reached at dpo@nativepal.ai for formal GDPR-related inquiries.
By using NativePal, you agree to this Privacy Policy.
We may update this policy from time to time. Significant changes will be communicated via email.