Loading…
Last updated: September 8, 2026
When you create an account, we collect your email address and a nickname/avatar you choose. When you practice, we store your question attempts, answers, scores, favorites, mistake notes, vocabulary entries, quest and reward activity, question reports, your beta feedback, and your submitted writing and speaking recordings. If you request AI or expert feedback, we also store the text sent for review and the feedback you receive. We also record your optional marketing-email choice and changes to that choice.
We enforce task-specific word, character, recording, frequency, and cost limits to prevent accidental oversized submissions and abuse. We may retain request identifiers, token counts, model information, estimated or actual provider cost, and error status for security, billing integrity, and service monitoring.
When you use the optional translator, the text and chosen languages are sent to the administrator-selected translation provider, OpenAI or Google Cloud Translation, to produce your translation. If provider fallback is enabled and the first provider fails, the text may be sent to the other provider. English Rhino stores character counts, request status and timestamps for allowances and service costs for 90 days, with expired records removed by daily cleanup; these usage records do not contain the source text or translation. We also keep limited service-error counters for failed translation, flashcard refreshes, purchase delivery and repeated page loads. These counters contain a broad feature category, time and count, with no private study or message content, and are deleted after 90 days. Page-error reporting respects supported Global Privacy Control and Do Not Track signals.
Optional country and timezone settings support flags, privacy-thresholded country averages, and local-time achievements. Private profiles are excluded from country statistics. Time achievements use server time converted to the stored timezone rather than trusting the device clock.
Audio may include your voice and any background sound captured by your microphone. Individual recording controls and the optional hands-free Complete Interview mode both require an intentional learner start. We do not claim ownership of your voice, use recordings as public profile content, or sell recordings as a contact database.
Custom avatar source files are cropped, resized, and compressed in your browser; only the compact 400 × 400 WebP is uploaded. We keep an audit record and may retain each compact avatar version after it is replaced or no longer displayed so authorized administrators can investigate prohibited uploads, impersonation, abuse, and safety reports.
If you buy or book a private lesson through English Rhino, we keep the lesson option, paid balance and order record, scheduled time, time zone, meeting provider and join link, booking status, cancellation or rescheduling details, and the notification history needed to deliver and support the lesson. Optional per-lesson feedback is private. If you separately submit an overall public review, it remains unpublished until moderation and you may update it later.
Completed Lesson Studio and Notebook Book generations are saved to your account so you can return to the paid result. Their source reference, selected format, generated content, Token cost and creation time are retained with the result.
If you begin a lesson purchase while signed out, we use the email and optional name you provide to create the disclosed free account, record policy acceptance, send a secure password-setting link, and connect the purchase to that account. This service message is not marketing consent.
A booked lesson can have a private workspace containing teacher or learner files, assignments, notes, and lesson-specific messages. Files are stored privately and opened through time-limited links. Workspace metadata includes who shared an item, when it was shared, and which lesson it belongs to.
To show accurate lesson availability, the teacher may connect selected Google calendars. English Rhino uses busy start and end times to remove conflicts; students see only whether a lesson time is open. Confirmed lessons add the booking details and the Google Meet or Zoom option you selected to the teaching calendar. Cancellations and reschedules update those lesson records and video links.
If you use the public Contact form, we store your name, email address, subject, and plain-text message in a protected administrator inbox. We also keep a one-way hash derived from the network address for short-term rate limiting; the raw address is not stored with the message.
We collect limited first-party usage information to understand how the site is found and which study areas are useful. This can include the referring website's hostname, campaign labels included in a link, landing and visited page paths, active session duration, viewport size, and broad device, browser, and operating-system categories. We do not use this system to record mouse movements, keystrokes, form contents, answers, recordings, or raw IP addresses. Administrators can view this information only inside protected account-management tools.
Token purchases are processed by Stripe. We never see or store your full card number - Stripe handles that directly. We keep a record of what you purchased and when, for your own purchase history and for support purposes.
To run your account, track your practice progress, show your scores and history, process token purchases, and - if you opt into AI feedback - send your submitted text or a speaking recording or selected vocabulary item to OpenAI to create a transcript, feedback, or requested vocabulary practice. Promotional emails are sent only when you have opted in, and you can revoke that choice at any time.
Administrators may configure task-specific evaluation instructions and example input/output pairs. Those examples should be created or lawfully supplied for this purpose; learner submissions are not automatically turned into training examples. If this practice changes, we will update this policy before applying it.
Reusable generated practice material is stored in a moderated shared pool only after review. It contains general educational prompts or exercises, not personal submissions, recordings, private messages, or individualized feedback.
When you use the Study Assistant or Speaking Partner, English Rhino stores the chat messages or conversation transcript with your account so you can review what you paid for. These records are not public, but they are not private from English Rhino: authorized administrators may review them for quality assurance, safety, abuse prevention, support, cost monitoring, and improvement of prompts or educational behavior. Do not include confidential or highly sensitive information. English Rhino does not automatically publish these records or turn them into public question-bank content. Realtime Speaking Partner call audio is not stored by this feature; the generated transcript may contain recognition errors.
Messages sent through the account support inbox are private between the learner and authorized English Rhino administrators. They are stored with the account so both sides can review the conversation.
Account, purchase, lesson, support, and other service emails may be sent when they are needed to provide the service you requested. Promotional email is separate and is sent only while your marketing choice is enabled. Every promotional email includes a personal unsubscribe link; using it updates your choice without requiring you to sign in. We retain basic delivery status so we can avoid duplicate sends and investigate failed delivery.
We use browser storage to remember useful device-specific choices, including text size, answer-reveal preference, and unfinished writing drafts. Temporary session storage also assigns a random session identifier so page visits can be grouped during one browser session. This information remains on that browser unless you clear it. It is not a tracking cookie and is not used for advertising. The first-party usage tracker respects supported Global Privacy Control and Do Not Track browser signals.
Your chosen nickname, avatar, and test scores may be shown publicly on the leaderboard. Your email address and real name (if provided) are never shown publicly.
Supabase (database and authentication), Vercel (hosting and privacy-oriented aggregate analytics), Google Analytics when enabled by English Rhino (aggregate traffic and acquisition measurement that is disabled for supported Global Privacy Control or Do Not Track signals), Stripe (payments), Cloudflare Turnstile (automated abuse protection when enabled), Google Calendar (teacher availability, confirmed lesson events, and event reminders), Zoom (lesson meeting links when selected), Resend (contact and lesson email delivery), and OpenAI when AI feedback is enabled. Each handles relevant data under its own privacy and security practices.
You can update your nickname and avatar and review your submissions from your account page. Deleting one submission hides it immediately; it is permanently purged after a 30-day recovery period. You can also permanently delete your account and every piece of data tied to it - scores, purchase history, feedback, badges - directly from your account page, under the profile editor. This action removes the active account and is irreversible. Limited payment, fraud-prevention, moderation, legal, or backup records may remain where reasonably necessary or legally required. If you'd rather we do it for you, contact us at v@englishrhino.com.
Writing responses are stored with your account in Supabase Postgres. Audio responses are stored in a private Supabase Storage bucket and accessed through limited-duration links. Active submissions remain available in your account until you delete them or close the account. When you delete a submission, it is hidden immediately and scheduled for permanent deletion after a 30-day recovery period. Operational backups may take additional time to expire.
Compact custom-avatar versions are handled differently from ordinary submissions. Replaced avatars remain in protected storage with moderation metadata and are not shown to other learners unless currently selected. After account deletion, a restricted, pseudonymized moderation copy may remain where reasonably necessary to enforce site rules, respond to a safety or legal complaint, or prevent repeat abuse.
First-party session and page-visit records are retained for up to 180 days and then removed automatically. They are also deleted when the associated account is deleted. Anonymous sessions that never become associated with an account contain no name or email address.
Study Assistant messages and Speaking Partner transcripts are retained for the period shown in the service and configured by English Rhino, currently 180 days, unless you clear them or delete your account sooner. Operational records needed for payment integrity, fraud prevention, or legal compliance may be retained separately where reasonably necessary.
We may update this policy as the product evolves. We'll update the date at the top when we do.
Questions about your data? Reach us at v@englishrhino.com.