Privacy Policy

Klar is the provider of the Service. If you need to contact us about privacy, email: contact@rimlys.org.

If you are in the EEA/UK, you may have rights under the GDPR (see “Your rights” below).

• Account information: email address, user ID, and profile information you choose to provide (e.g., display name, avatar).
• Learning and usage data: vocabulary progress, streak, daily completion, review history, and feature usage necessary to provide the learning experience.
• User content: text you submit for translation, writing, or AI features (where applicable).
• Device and technical data: approximate device information and app diagnostics (e.g., error logs) to maintain reliability and security.
• Payment information: we do not store full card details. Payments are processed by our payment providers (see “Payments” below). We store subscription status and related identifiers needed to determine Pro access.

• Provide and operate the Service (authentication, learning progress, subscriptions).
• Improve performance, fix bugs, and maintain security.
• Provide customer support and respond to requests.
• Comply with legal obligations and enforce our terms.

• Contract: to provide the Service you request (account, learning features, subscription access).
• Legitimate interests: to secure, maintain, and improve the Service (fraud prevention, debugging, reliability).
• Consent: where required for specific features or communications.
• Legal obligation: where we must keep certain records (e.g., accounting, compliance).

Klar offers paid subscriptions (“Pro”). Payments are handled by third-party providers:

• Web: Stripe (Checkout + Billing Portal).
• iOS/Android: RevenueCat (which works with Apple App Store / Google Play billing).

We store a record of your subscription status (e.g., plan, renewal/expiration dates, cancellation state) to determine your Pro access across devices. Payment card details are processed by the providers and are not stored by Klar.

We use service providers to host data, process payments, and operate the Service. Depending on your usage, this may include:

• Supabase (authentication, database, storage).
• Stripe (web payments).
• RevenueCat (mobile subscription management).
• Cloud hosting providers (for running our backend services).
• AI providers (only when you use AI features such as nuance/context/translation).

These providers process data on our behalf under contractual terms designed to protect your information.

We may use cookies and local storage to keep you signed in, remember preferences, and protect the Service. If we add analytics/marketing cookies in the future, we will update this policy and (where required) ask for consent.

We keep personal data only as long as necessary to provide the Service, comply with legal obligations, and resolve disputes. You may request deletion of your account (see “Your rights”).

We implement reasonable technical and organizational measures to protect data. No system is 100% secure, but we work to reduce risk (e.g., access controls, encryption in transit, least-privilege policies).

Your data may be processed in countries other than where you live (for example, where our service providers operate). Where required, we use appropriate safeguards for international transfers.

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise rights, contact: privacy@klar.rimlys.org.

Klar is not intended for children under 13 (or the minimum age required by your jurisdiction) without parental consent. If you believe a child has provided personal data, contact us to request deletion.

We may update this Privacy Policy from time to time. We will post updates on this page and revise the effective date above.