Privacy Policy

ThaiCards is operated by ALEX SEARS, CPA, LLC, a Texas limited liability company, which is the data controller for the purposes of this policy. See also our Terms of Service.

What we collect

• Without an account: a randomly generated device identifier stored in your browser, your study activity (which words you review and how you grade them), general app interactions, and standard technical data such as browser type and a hashed IP address used for analytics, rate limiting, and abuse prevention.
• With an account: your email address, an optional display name, and a securely hashed password. If you sign in with Google, we receive your email and name from Google; we never see your Google password.
• Content you choose to save: saved or custom vocabulary and any practice content you explicitly save are stored with your anonymous profile or account so they remain available in the app. Unsaved practice content is not retained by ThaiCards.
• If you subscribe: payments are processed by Stripe (on the web), Google Play Billing (in the Android app), or Apple (in the iPhone and iPad app). We store a subscription reference, a purchase token, and license status so we can keep your Premium access in sync. We never see or store your card number.
• If you use speech practice: live microphone audio is transmitted securely to Google Cloud Speech-to-Text to return a transcript. ThaiCards does not retain the audio. Any transcript or practice content is kept only when the feature explicitly lets you save it.

What we use it for

• Saving your study progress and syncing it across your devices when you sign in.
• Operating the service: spaced-repetition scheduling, audio generation, translations, and abuse prevention.
• Sending transactional email you request, such as password reset links. We do not send marketing email.

What we do not do

• We do not sell or share your personal data with advertisers or data brokers.
• We do not use third-party advertising or cross-app tracking.
• We do not collect precise location, contacts, or photos. We do not retain microphone audio; optional speech-practice audio is processed only to provide live speech recognition.

Third parties we rely on

• Stripe for payment processing.
• Google for optional sign-in, text-to-speech audio generation, translation processing, and Google Cloud Speech-to-Text for optional live speech recognition.
• Resend for transactional email delivery.
• OpenAI and Anthropic for generating example sentences, translations, romanization, and AI tutor replies; the text you are studying may be sent for that purpose, never your account details or password.
• Google Play for subscription billing and purchase verification in the Android app, and Apple for the same on iPhone and iPad.
• YouTube for the embedded video player in LyricLens; YouTube may show its own ads and applies its own privacy policy while a video plays.
• Cloudflare for delivering the site and blocking abuse.

Retention and deletion

Your data is kept while your account is active. You can permanently delete your account and all study data at any time, either from Settings in the app or at flashcards.alexsears.org/delete-account.html. Deletion is immediate and irreversible. Anonymous device data can be cleared by clearing your browser storage.

Song captions in LyricLens

When you open a video in LyricLens, we fetch the caption track that the video platform already publishes for it, then add romanization and translation so you can study it. The corrected result is our own processed output, not a copy of the original captions, and we keep it so that returning to the same song is fast and consistent. We do not publish a browsable library of song lyrics, and we do not claim any rights in the underlying songs. Rights holders can ask us to remove specific content using the contact address below.

Children

The service is a general-audience language-learning tool and is not directed at children under 13.

Where your data is handled

We operate from the United States, and the providers listed above process data in the United States and other countries. If you use the service from outside the United States, your information is transferred there. Where that transfer is from the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses, or the equivalent UK addendum, as the safeguard for it.

Your rights in the EEA and the UK

If the GDPR or UK GDPR applies to you, you have the right to access your data, correct it, delete it, export it, restrict or object to how we use it, and to withdraw consent at any time. Our legal bases for processing are:

• Performance of a contract for running your account, syncing your progress, and handling your subscription.
• Legitimate interests for keeping the service secure, preventing abuse, and fixing faults.
• Consent for anything optional you switch on, such as speech practice using your microphone.
• Legal obligation for keeping records we are required to keep, such as tax records for payments.

You can exercise all of these yourself by deleting your account, or by emailing us. You also have the right to complain to your local data protection authority.

Your rights in California

If the CCPA and CPRA apply to you, you have the right to know what personal information we collect and why, to request a copy of it, to have it deleted, and to correct it. You also have the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by California law, and we have not done so in the past twelve months. We do not use or disclose sensitive personal information for purposes beyond providing the service.

Contact

Questions, privacy requests, or copyright concerns:
ALEX SEARS, CPA, LLC
[email protected]

Terms of Service · Back to the app