Loading…
Last updated: August 17, 2026
When you create an account, we collect your email address and a nickname/avatar you choose. When you practice, we store your question attempts, answers, scores, favorites, mistake notes, vocabulary entries, quest and reward activity, question reports, your beta feedback, and your submitted writing and speaking recordings. If you request AI or expert feedback, we also store the text sent for review and the feedback you receive. We also record your optional marketing-email choice and changes to that choice.
We enforce task-specific word, character, recording, frequency, and cost limits to prevent accidental oversized submissions and abuse. We may retain request identifiers, token counts, model information, estimated or actual provider cost, and error status for security, billing integrity, and service monitoring.
Optional country and timezone settings support flags, privacy-thresholded country averages, and local-time achievements. Private profiles are excluded from country statistics. Time achievements use server time converted to the stored timezone rather than trusting the device clock.
Audio may include your voice and any background sound captured by your microphone. Individual recording controls and the optional hands-free Complete Interview mode both require an intentional learner start. We do not claim ownership of your voice, use recordings as public profile content, or sell recordings as a contact database.
Custom avatar source files are cropped, resized, and compressed in your browser; only the compact 400 × 400 WebP is uploaded. We keep an audit record and may retain each compact avatar version after it is replaced or no longer displayed so authorized administrators can investigate prohibited uploads, impersonation, abuse, and safety reports.
If you book a private lesson, Calendly collects the booking details you enter and provides us with the appointment name, contact details, scheduled time, time zone, booking answers, and cancellation or rescheduling status. English Rhino keeps the appointment information needed to manage the lesson and support your booking.
If you use the public Contact form, we store your name, email address, subject, and plain-text message in a protected administrator inbox. We also keep a one-way hash derived from the network address for short-term rate limiting; the raw address is not stored with the message.
We collect limited first-party usage information to understand how the site is found and which study areas are useful. This can include the referring website's hostname, campaign labels included in a link, landing and visited page paths, active session duration, viewport size, and broad device, browser, and operating-system categories. We do not use this system to record mouse movements, keystrokes, form contents, answers, recordings, or raw IP addresses. Administrators can view this information only inside protected account-management tools.
Token purchases are processed by Stripe. We never see or store your full card number - Stripe handles that directly. We keep a record of what you purchased and when, for your own purchase history and for support purposes.
To run your account, track your practice progress, show your scores and history, process token purchases, and - if you opt into AI feedback - send your submitted text or a speaking recording or selected vocabulary item to OpenAI to create a transcript, feedback, or requested vocabulary practice. Promotional emails are sent only when you have opted in, and you can revoke that choice at any time.
Administrators may configure task-specific evaluation instructions and example input/output pairs. Those examples should be created or lawfully supplied for this purpose; learner submissions are not automatically turned into training examples. If this practice changes, we will update this policy before applying it.
Reusable generated practice material is stored in a moderated shared pool only after review. It contains general educational prompts or exercises, not personal submissions, recordings, private messages, or individualized feedback.
When you use the Study Assistant or Speaking Partner, English Rhino stores the chat messages or conversation transcript with your account so you can review what you paid for. These records are not public, but they are not private from English Rhino: authorized administrators may review them for quality assurance, safety, abuse prevention, support, cost monitoring, and improvement of prompts or educational behavior. Do not include confidential or highly sensitive information. English Rhino does not automatically publish these records or turn them into public question-bank content. Realtime Speaking Partner call audio is not stored by this feature; the generated transcript may contain recognition errors.
Messages sent through the account support inbox are private between the learner and authorized English Rhino administrators. They are stored with the account so both sides can review the conversation.
We use browser storage to remember useful device-specific choices, including text size, answer-reveal preference, and unfinished writing drafts. Temporary session storage also assigns a random session identifier so page visits can be grouped during one browser session. This information remains on that browser unless you clear it. It is not a tracking cookie and is not used for advertising. The first-party usage tracker respects supported Global Privacy Control and Do Not Track browser signals.
Your chosen nickname, avatar, and test scores may be shown publicly on the leaderboard. Your email address and real name (if provided) are never shown publicly.
Supabase (database and authentication), Vercel (hosting and privacy-oriented aggregate analytics), Google Analytics when enabled by English Rhino (aggregate traffic and acquisition measurement that is disabled for supported Global Privacy Control or Do Not Track signals), Stripe (payments), Cloudflare Turnstile (automated abuse protection when enabled), Calendly (private-lesson scheduling), Resend (contact-message email delivery), and OpenAI when AI feedback is enabled. Each handles relevant data under its own privacy and security practices.
You can update your nickname and avatar and review your submissions from your account page. Deleting one submission hides it immediately; it is permanently purged after a 30-day recovery period. You can also permanently delete your account and every piece of data tied to it - scores, purchase history, feedback, badges - directly from your account page, under the profile editor. This action removes the active account and is irreversible. Limited payment, fraud-prevention, moderation, legal, or backup records may remain where reasonably necessary or legally required. If you'd rather we do it for you, contact us at v@englishrhino.com.
Writing responses are stored with your account in Supabase Postgres. Audio responses are stored in a private Supabase Storage bucket and accessed through limited-duration links. Active submissions remain available in your account until you delete them or close the account. When you delete a submission, it is hidden immediately and scheduled for permanent deletion after a 30-day recovery period. Operational backups may take additional time to expire.
Compact custom-avatar versions are handled differently from ordinary submissions. Replaced avatars remain in protected storage with moderation metadata and are not shown to other learners unless currently selected. After account deletion, a restricted, pseudonymized moderation copy may remain where reasonably necessary to enforce site rules, respond to a safety or legal complaint, or prevent repeat abuse.
First-party session and page-visit records are retained for up to 180 days and then removed automatically. They are also deleted when the associated account is deleted. Anonymous sessions that never become associated with an account contain no name or email address.
Study Assistant messages and Speaking Partner transcripts are retained for the period shown in the service and configured by English Rhino, currently 180 days, unless you clear them or delete your account sooner. Operational records needed for payment integrity, fraud prevention, or legal compliance may be retained separately where reasonably necessary.
We may update this policy as the product evolves. We'll update the date at the top when we do.
Questions about your data? Reach us at v@englishrhino.com.