Privacy Policy

1. Scope

This policy covers the Chunks website at getchunks.app and the Chunks app for iOS. Both use the same account and the same data. Chunks is operated by Nikita Kovalchuk, who is the data controller for the purposes of the GDPR.

2. Information We Collect

Account information

• Email address, when you sign up with email
• Name and email address from your Google account, when you sign in with Google
• Name and email address from your Apple account, when you sign in with Apple. If you choose Apple's "Hide My Email", we receive a relay address rather than your real one
• A profile picture, only if one comes from the account you signed in with. We do not host it — it is loaded from Google or Apple
• If you start as a guest, an anonymous account with no email attached to it

Learning data

• Saved words and chunks, their translations, examples and decks
• Review history, levels, streaks and daily progress
• Sentences you write in Practice, and the feedback generated for them
• App settings, including your interface, learning and native languages
• Spreadsheets you choose to import, and the words parsed from them

Usage and device data

• Product analytics events — which screens you open and which actions you take, along with your device model, operating system version, app version, and an IP address from which an approximate location (country or region) may be derived
• Your email address is attached to your analytics profile so that a person can be recognised across their devices
• Diagnostic data when something goes wrong: crash reports, error messages and stack traces

Notification data

• If you turn on practice reminders, we store a push token for that installation, along with the platform, an installation identifier, your time zone and your interface language, so a reminder can arrive at the right local time

Chunks does not ask for access to your microphone, camera, contacts, photos or precise location.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Save and synchronize your learning progress across devices
• Provide AI-powered learning features and pronunciation audio
• Send the practice reminders you have turned on
• Understand how the app is used, so we can improve it
• Diagnose crashes and fix errors

Where the GDPR applies, we process account and learning data to perform our contract with you, and analytics and diagnostic data on the basis of our legitimate interest in keeping the service working and improving it. Push notifications are sent only with your consent, which you can withdraw at any time in Settings or in your device settings.

4. Third-Party Services

Chunks relies on the following third-party services to operate. Each is governed by its own privacy policy.

• Supabase — hosts our database and handles authentication. Your account and learning data live here.
• Vercel — hosts the website and the API the apps talk to.
• Google — sign-in with Google, and Google Cloud Text-to-Speech, which receives the word or phrase being pronounced in order to return the audio.
• Apple — sign-in with Apple, and distribution of the iOS app.
• Anthropic — generates translation feedback, explanations and example sentences. We send only the text required to generate a response, and do not intentionally send personal information.
• PostHog — product analytics. Receives the usage and device data described above, including your email address, and is hosted in the European Union.
• Sentry — crash and error reporting.
• Expo — delivers push notifications and over-the-air app updates. Receives the push token for your installation.
• Pexels — searched for deck cover images. Receives the search term you type when choosing a cover, and nothing else about you.

5. Data Storage, Location and Transfers

Your account and learning data are stored using Supabase infrastructure located in the European Union, and analytics are collected on PostHog's European Union infrastructure.

Some of the services listed above process data outside the European Economic Area, including in the United States — in particular Anthropic, Google Cloud Text-to-Speech, Sentry, Expo and Pexels. Those transfers rely on the safeguards offered by each provider, such as the European Commission's standard contractual clauses.

We implement reasonable technical and organizational measures to protect your information, including row-level security controls designed to ensure users can access only their own data.

6. Data Sharing and Public Decks

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes. We share information only where it is necessary to provide the service, through the providers listed above.

One thing you share yourself: if you mark a deck as public, that deck and every word in it become visible to other Chunks users, who may copy those words into their own libraries. Everything else in your library stays private to your account. Your email address is never shown to other users.

7. How Long We Keep Data

Account and learning data are kept for as long as your account exists, and are removed when you delete it. A guest account you abandon is kept until it is deleted along with its data.

Analytics and diagnostic data are kept according to the retention settings of PostHog and Sentry respectively, and are not linked to your account once it has been deleted.

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Receive a copy of your data in a portable format
• Object to certain types of processing
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us using the email below.

9. Deleting Your Account

You can delete your account yourself, without asking us. In the app, open Settings, tap your profile, and choose Delete account. This removes your account and your learning data — saved words, decks, review history and settings — and cannot be undone. Words that other users have already copied from a deck you made public stay in their libraries.

You can also email us at hello@getchunks.app and we will process the deletion within 30 days.

10. Children

Chunks is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, write to us and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Continued use of Chunks after updates become effective constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy, please contact: hello@getchunks.app