Privacy Policy

What we store

We keep the data Coral needs to function:

• Your account.Your email address and whether it has been verified, your language settings, and your account status (for example, whether you're in the free trial or the beta). If you choose “Sign in with Google” or “Sign in with Apple,” we also store the name (and, for Google, the profile image) that provider gives us. Apple may give us a private relay address instead of your real email.
• Sign-in records. The login sessions that keep you signed in, each stored with the IP address and device/browser it was created from (standard security records), plus your credentials: a securely hashed password, or the sign-in tokens from Google or Apple if you use them.
• Data from using the app. The material you create in the app (decks, flashcards, extracted vocabulary, conversation transcripts, listening sessions, Focus plans, and links to any source content you import), along with your review history and a lightweight activity log, which power spaced repetition scheduling and your progress stats.
• Feedback you send us. Anything you submit through the in-app feedback form, and any AI messages you rate or report.

What we don't collect

We don't embed any third-party advertising or analytics trackers. We don't collect your location, contacts, or payment information. Support is entirely optional and handled through an external link (Ko-fi) that we don't process on your behalf, so we never see your card or billing details.

Service providers

Coralcan't generate conversations, read text aloud, or send you a sign-in email on its own. To provide those features, some of your data is processed by a small set of service providers acting on our behalf, who may only use it to perform their function. In almost every case we forward only the content itself (the text, audio, or image involved) without attaching your name, email, or account ID:

• Google (Gemini AI).What we send: the text you write or create in AI-powered features, such as conversation messages, study and game answers, translation requests, card text, and Focus plans. Used to generate the AI's response.
• ElevenLabs and Google Cloud (text-to-speech). What we send: the text you ask the app to read aloud. Used to generate the audio.
• ElevenLabs (speech recognition). What we send: your voice audio, when you speak during a conversation. Used to transcribe it into text.
• Apple and Google (on-device speech recognition). In other voice features, the app uses your phone's built-in speech recognizer. Depending on your device and settings, Apple or Google may process that audio under their own policies.
• Apple and Google (sign-in). If you sign in with Apple or Google, they confirm your identity and share your name and email with us, as described above.
• Resend (email). What we send: your email address. Used to deliver account emails such as verification and password resets. Here your address is the point, so it necessarily travels with the message.
• Hosting & infrastructure. Your data is stored and cached on the hosting, database, and cache providers (for example, Fly.io) that run Coral.

We don't sell your data

We do not sell, rent, or trade your personal information, and we don't share it with third parties for advertising or marketing. We share it only with the service providers above, to deliver the features you're using, or when the law requires us to (for example, a valid court order).

Exporting your data

Your data belongs to you. In the app, under Settings → Your Data, you can export your cards, vocabulary, and conversations as CSV files at any time.

Deleting your data

From the same Settings → Your Data screen you can permanently delete your account. Deletion is immediate and cannot be undone: it erases your account and its content (decks, cards, vocabulary, conversations, listening sessions, Focus plans, review history, and sign-in records) from our database.

You can also simply ask. Email us at shane@c4nr.comfrom your account address and we'll delete your account the same way as the in-app option.

To be fully honest about the limits, a few things remain:

• A small deletion record.We keep your email address with your account's status (for example, trial or beta) and when it was deleted. This stops the free trial from being restarted by deleting and signing up again. It contains none of your app content.
• Feedback you sent us. Feedback submitted through the app is kept, but is no longer linked to your account.
• Backups and logs. Copies of your data may remain in routine database backups and server logs until they are overwritten.
• Service providers.Content a provider already processed before deletion (for example, a past request to Google to generate a reply) is retained or discarded according to that provider's own policies. Temporary cached copies on our side expire automatically.

Data retention

We keep your data for as long as your account exists. When you delete an individual item in the app (like a deck or a card), it disappears for you right away but stays in our database until you delete your account. Login sessions and cached content expire automatically over time. When you delete your account, your data is removed as described above.

Children

Coralis not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.

Changes to this policy

If our practices change, we'll update this page and revise the “last updated” date above so it always reflects how we handle your information.

Contact

Questions about this policy or your data? Reach us at shane@c4nr.com.