Privacy Policy for Sonje

Effective date: [EFFECTIVE_DATE]
Developer: [DEVELOPER_NAME]
Contact: [CONTACT_EMAIL]
App: Sonje (com.sonje.app)

This policy applies to the Sonje Android app and the online features described below.

1. Summary

Sonje is an offline-first memory app. Your cards, notes, audio, images and study history are stored on your device by default. Online features (teacher libraries, student access and Google Sign-In) are optional.

• We do not sell your personal data.
• We do not show ads.
• We do not use your learning content for advertising.
• We do not collect your precise location, contacts, SMS, health data or payment card details.

2. Data stored on your device

Sonje stores the following locally on your phone or tablet:

• cards, words, phrases, notes and custom card types;
• audio recordings and images you add;
• review history, scheduling data and app settings;
• libraries you download for offline study.

This local data is not sent to us unless you choose to use an online feature (for example, publishing a teacher library). You can delete it by deleting items in the app, clearing the app's storage, or uninstalling Sonje.

If you have Android backup enabled, your device may include app data in a backup stored in your Google account. That backup is controlled by your device and Google account settings, not by Sonje.

3. Optional account and profile

You can use the core app without an account. If you choose to use the online library, you sign in with Google. Through Google Sign-In and Supabase authentication, we receive:

• your Google account identifier and Supabase user ID;
• your email address;
• your name and profile photo, if provided by Google;
• the role you choose (teacher or student);
• the display name, phone number, profile photo and student code you add to your profile.

We use this information to authenticate you, create and display your profile, connect teachers and students, manage access codes, and provide the online library.

Google Sign-In is provided by Google. Google's handling of your Google account data is governed by Google's privacy policy.

4. Teacher library content

If you use teacher features, we collect and store the content you choose to publish:

• library title, description, subject and price;
• cover image;
• cards, text, notes, audio and images;
• access codes, download counts and the names/photos of students who redeem your codes.

This content is stored in our Supabase database and, for media files, in Cloudinary. Published library details may be visible to signed-in users in the online library; the full content is available to students who have access. Do not upload personal or sensitive information about other people unless you have the right to do so.

5. Student activity

If you use student features, we store your access-code redemptions, the libraries you download and related download counts. If you report a library or block a teacher, we also store that report or block record and the related library or teacher ID so we can review it and enforce our rules. Downloaded libraries are cached on your device for offline study. We do not receive your local review history or scheduling data.

6. Crash reporting (Sentry)

When crash reporting is enabled in a Sonje build, we use Sentry to collect crash and error diagnostics, such as the crash stack trace, device model, operating-system version, app version and a random installation or session identifier. We use this information to find and fix bugs.

We do not intentionally send your cards, notes, audio, images or study history to Sentry. If crash reporting is disabled in the build, Sentry is not initialized.

7. Third-party services

We use the following service providers:

When you tap a WhatsApp link, you leave Sonje and open WhatsApp. WhatsApp's own privacy policy applies to that conversation. Sonje does not receive your WhatsApp messages.

Our website is hosted on Cloudflare Pages. Cloudflare processes technical request data (such as IP address, browser type and requested URL) to deliver the site and protect it from abuse.

Text-to-speech uses the TTS engine installed on your device. Your device or TTS provider may process text according to its own settings and policy.

8. How we share information

We do not sell or rent personal data. We share data only:

• with the service providers listed above, who process it on our behalf to run the app;
• when required by law, legal process or a valid government request;
• to protect the rights, safety and security of Sonje, our users or others;
• in connection with a merger, acquisition or transfer of the app, subject to this policy.

We do not share your data with advertisers.

9. Data retention

• Account, profile and teacher-library data is kept while your account is active and for as long as needed to provide the service.
• When you request account deletion, we aim to delete your account and associated online content within 30 days, unless we are required by law to keep it longer.
• Crash reports are retained according to Sentry's retention settings.
• Local data remains on your device until you delete it, clear the app's storage or uninstall Sonje.

10. Security

We use HTTPS/TLS for network connections and rely on Supabase access controls and row-level security for online data. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

11. Your choices and rights

Depending on where you live, you may have the right to access, correct, export, delete or restrict the use of your personal data, or to object to certain processing. To make a request, contact us at [CONTACT_EMAIL].

To delete your account and associated online data, you can use "Delete account" in the app's overflow menu (⋮), or contact us from the email address linked to your account. We will verify the request before deleting the data. You can also delete local data directly in the app or by uninstalling Sonje.

12. Children

Sonje is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children below that age through the online features. If you believe a child has provided personal data, contact us and we will delete it.

13. International transfers

Our service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers.

14. Changes to this policy

We may update this policy from time to time. We will post the new version at this URL and update the effective date. Continued use of the app after a change means you accept the updated policy.

15. Contact

Questions or requests about this policy:

[DEVELOPER_NAME]
Email: [CONTACT_EMAIL]
Address (optional): [ADDRESS]