Privacy Policy

1. Who is responsible

Dmytro Havrylenko is the controller of the personal data described here. Address: Ballycullane, New Ross, Co.Wexford, Y34CK28, Ireland. Data protection contact: main.office@similect.com. Telephone: +353874997913.

2. What we collect

We never receive or store your card number. Payments are handled entirely by the payment provider.

We do not buy personal data, we do not sell it, and we do not run advertising.

3. Why we are allowed to use it

• To perform our contract with you: your account, your content, your subscription, your progress and history.
• Our legitimate interest: keeping the service secure, preventing abuse, fixing faults, and understanding in aggregate how the service is used.
• Your consent: analytics events described below, and letters about new material and features. Neither happens until you agree, and both stop when you withdraw.
• Our legitimate interest in telling our own customers about our own similar things: after you buy a subscription we may write to you for a year, having offered you the choice not to receive it at the moment of purchase and in every message since.
• Legal obligation: tax and accounting records for payments, and responding to lawful requests.

4. Cookies and local storage

We use a small number of first-party cookies and browser storage entries. There are no advertising or third-party tracking cookies of any kind — no Google Analytics, no advertising pixels, no social trackers. The Cookie Policy lists every entry, what it does and how long it lasts.

You can change or withdraw your choice at any time from the cookie settings in Settings.

The mobile app uses no cookies. It keeps on your phone the sign-in token (in the system's protected storage), your preferences and copies of videos and images it has already shown; with your consent also the analytics session, the events not sent yet and the diagnostic journal described below. The Cookie Policy lists them. Signing out removes the token; clearing the app's data in the phone's settings or uninstalling the app removes everything.

5. Analytics

Our analytics are first-party: events are recorded by our own servers and are not shared with any analytics company. An event records what happened (a material was opened or finished, a word was tapped), the material and language it concerned, your profile, a session identifier, your device type, operating system, browser, screen size, app version and the country derived from your IP address. The IP address itself is not stored with the event.

We use this to see which material works, to build recommendations and to find bugs. If you are not signed in, no analytics events are recorded at all.

The mobile app keeps a short technical journal of its own work on your device, if you allowed analytics: the screens you open, the addresses of requests to our server without their parameters, how long they took and how they ended, errors, and how much memory the app used. It never records what you write, what you read, passwords or sign-in tokens. Only the last five launches are kept, and the journal never leaves the device by itself.

If the app closed because of an error, at the next launch it offers to send us the journal of that session together with your device model and the versions of the system and the app. It is sent only if you press Send, and we use it only to find and fix the error.

6. Messages we send you

Some messages come with the account and cannot be switched off: a payment succeeded or failed, a sign-in from a new device, a decision on something you reported, the deletion of your profile. They are part of the service, not marketing.

Everything else you choose. News about new material and features are sent only if you agreed in the banner or in the notification settings; every letter carries a one-click unsubscribe, and the settings hold a switch for each channel — email, mobile and browser.

There is one exception, and it is narrow: if you have bought a subscription, we may write to you about our own similar things for a year afterwards without asking again. You are offered the choice not to receive them at the moment of payment, and every letter carries the same unsubscribe as any other. Say no once — at the till, in a letter or in the settings — and it stops, whichever of the two grounds it was being sent on.

We keep a record of what was sent and what came of it, so we can answer whether a message reached you, and so that an address that bounced is not written to again.

7. Artificial intelligence processing

The service uses external language and speech models to segment texts, translate sentences and subtitles, explain words, transcribe audio, synthesise speech and generate images and exercises.

This means the text of material — including material you publish — is sent to those providers for processing. Your account details are not sent with it. Do not publish personal or confidential information you would not want processed this way.

The providers currently used are Google (Gemini), OpenAI and DeepSeek, acting as processors on our instructions.

8. Who else sees your data

We share personal data only with service providers acting on our behalf, and only as far as their job requires:

• hosting and infrastructure providers running our servers and databases;
• Wasabi, which stores files — content, images, audio and video;
• Stripe, Apple and Google, which process payments and subscriptions. For subscriptions bought on the website, Link (a Stripe service) is the merchant of record and receives your name, email, billing address and payment details directly, under its own privacy policy;
• Google, Facebook and Apple, when you choose to sign in with them;
• our email delivery provider, for confirmation codes and service messages;
• the model providers named above.

We may also disclose data where the law requires it, or where it is necessary to establish or defend legal claims.

Anything you publish — your profile, content, comments and likes — is public by design and visible to anyone.

9. Transfers outside your country

Some of these providers are located outside the European Economic Area, including in the United States. Where data is transferred there, it is done under the safeguards the law provides for such transfers, such as the European Commission's standard contractual clauses or an adequacy decision.

10. How long we keep it

• Account data: while your account exists.
• After you delete your profile: it is hidden immediately and permanently erased after 30 days, during which you can restore it. After that the erasure is irreversible.
• Analytics events: 12 months, after which they are archived in aggregate form.
• Server and security logs (each request to the service: the address requested, the time, the response, your IP address, the type of browser and device, the country derived from the IP address, the site you came from and, if you are signed in, your profile): up to 30 days. On our monitoring server we keep only the name and version of the browser, never the full user-agent string, and only the domain of the site you came from. We use these logs to keep the service secure, block abuse, look into incidents and faults, understand the load on the service in aggregate and look into problems you report to us, never to build a profile of you or for advertising.
• Crash reports you sent from the app: up to 30 days.
• Payment records: as long as tax and accounting law requires, usually several years.
• Reports and moderation decisions: as long as needed to handle repeat cases and appeals.
• Backups: copies may persist for a limited period after deletion before they are overwritten.

11. Your rights

Depending on where you live, you have the right to:

• know what data we hold about you and get a copy of it;
• correct data that is wrong;
• have your data deleted;
• receive your data in a portable format;
• object to processing based on our legitimate interest;
• withdraw consent at any time, without affecting what was done before;
• complain to your data protection authority.

Most of this you can do yourself: Settings has a privacy section where you can download your data, change your analytics choice and delete your profile. For anything else write to main.office@similect.com — we answer within one month.

12. Children

The service is not intended for children under 16. We do not knowingly collect data from them; if we learn that we have, we delete the account. If you believe a child has created an account, write to main.office@similect.com.

13. Security

Traffic is encrypted in transit, access to production data is limited to the people who need it, and sign-in tokens are limited in lifetime and can be revoked from Settings. No service can promise perfect security, but we treat a breach that affects you as something you must be told about, and will notify you and the authorities where the law requires.

14. Changes

We may update this policy. Material changes are shown in the app before they take effect. The current version and date are at the top of this page.