Privacy Policy

What we keep

We keep what the app needs in order to work, and this is all of it:

• Your account. The email address you signed up with and a hash of your password; the password itself is never stored. If you sign in with Apple or Google: the identifier they give us for you, the email address they share (Apple may share a relay address that forwards to you) and, if they share it, your name (Apple does so only the first time you use Sign in with Apple with Clicked). For Apple we also keep a token that lets us tell Apple to cut the link when you delete your account.
• About you. After you sign up, the app offers once to tell us your name, your gender (male or female) and your year of birth. All three are optional: you can leave any of them empty, and the app works the same. If Apple or Google shared your name, the app does not ask for it again, and you can change or clear it in Profile. We keep what you tell us — of your birth, only the year, not the day. The gender draws the avatar on your profile. Our staff can see them on your account page in our back office. We use them to understand who our readers are and what to make for them; we do not use them for advertising and we do not sell them. If we come to use them for anything else, we will change this page first.
• What you accepted. The version of this policy you accepted, by its name — eight letters and digits that stand for its text — and when you accepted it.
• Language and region. The language and the units (metric or imperial) you chose, so that lessons read the way you read.
• Your progress. Which courses you have started, and which lessons you have finished and when. The number of days in a row on the flame is worked out from this.
• Feedback on lessons. If you rate a lesson: how interesting it was, the stars you gave, and the words you wrote (up to 2000 characters).
• Messages to support. What you write to us from the app — a title, and messages of up to 4000 characters — and what you send to [email protected] by email.
• Your subscription. If you subscribe, the App Store tells us which product you bought, when it began and when it runs out, and the number of the transaction. We never see your card or any payment details: Apple takes the payment.
• Keeping you signed in. Session tokens, stored as hashes with the time they expire, so that you need not sign in at every launch. The codes we email you to confirm an address or to reset a password, stored as hashes with the time and the IP address they were asked from.
• What your phone keeps. Your choices (the language, the units, whether reminders are on) and your sign-in, the latter in the phone’s secure storage. A reminder to come back is scheduled by your phone alone: we run no push server and do not know a reminder exists.
• The servers. Like any online service, our servers and the network in front of them handle the IP address and technical details of each request while they answer it.

The app has no analytics, no advertising and no tracking in it, and it asks for no location, contacts, photos or microphone. This site sets no cookies of its own and has no analytics. We do not sell your data.

Why we keep it

• To run the app: to sign you in, to show the lessons in your language, and to remember where you are in a course.
• To unlock the courses you have paid for.
• To answer you when you write to us, and to make the lessons better from what you tell us about them.
• To keep the service safe: to limit how often codes and sign-in attempts can be made, and to see abuse.

Who else handles it

We do not sell your data and do not share it for advertising. These companies handle it for us, each for one job, under their own terms and privacy policies:

• Amazon Web Services — our servers, our database and the files they keep, in the United States. Amazon SES sends the emails that carry your codes.
• Cloudflare — the network in front of our servers and our domain, and the forwarding of mail sent to [email protected].
• Google — the mailbox that receives and answers that mail, and, if you choose it, Sign in with Google.
• Apple — Sign in with Apple, if you choose it, and the App Store, which sells your subscription and takes the payment.

Where it is kept

Our servers are in the United States. If you use Clicked from another country, your data travels there.

How long we keep it

For as long as your account exists. When you delete the account, what is tied to it is erased (see below). A few traces last a little longer, and we would rather say so:

• If you make an account and do not finish signing up — the page that asks for a tick in a box — we delete the account and everything tied to it within 24 hours, with the codes we sent to your address.
• Our database keeps automatic backups for seven days. What you delete leaves them when they expire.
• If you wrote to support from the app, the title of the conversation and your address stay in an internal log for up to a year.
• Mail you sent to [email protected] stays in our mailbox for as long as we need it to help you.

Deleting your account does not cancel your subscription: Apple bills it, so cancel it in your Apple account.

Your choices

• Delete your account. In the app, open Profile, tap your account (the line with your email address) and then Delete account, at the bottom. Your sessions, your Apple and Google links, your answers, your progress, your feedback, your conversations with support and the record of your subscription go with it, and the link made with Sign in with Apple is cut at Apple’s end.
• Correct it. In Profile, open your account to change or clear your name, your gender and your year of birth.
• See it or take a copy. Write to [email protected], say what you want, and we will answer.
• Reminders. Switch them off in Profile, or in your phone’s settings.
• Your subscription. Manage or cancel it in your Apple account.

If the law where you live gives you more rights over your data — in the European Union and the United Kingdom, or in Brazil under the LGPD — you have them, and you can use them by writing to [email protected]. You may also complain to your data protection authority.

Age

Clicked is for people aged 14 and over. Right after you sign up, the app asks for a tick in a box saying you are 14 or older and accept this policy, and offers, if you want, to take your year of birth; its list of years stops at the year that is 14 years before this one, and our servers refuse a later year.

If you are younger than 14, please do not create an account. If you are a parent or guardian and think a child has made one, write to [email protected] and we will delete it.

Security

Everything travels over HTTPS, passwords are stored only as hashes, and access to the servers is limited to the person who runs them. No system is perfectly safe; that is one reason we keep as little as we do.

Changes

If we change this policy, the new text goes on this page with its date.

Contact

Questions, requests and complaints: [email protected].