Privacy Policy

1. Who We Are

Line by Line (“we”, “us”, “our”) is a language-learning platform that helps users master English by typing out stories, with translations in their native language. Our service is accessible at linebyline.app. For privacy-related questions, contact us at linebyline.help@gmail.com.

2. Information We Collect

We collect the following categories of information:

• Account information: Your email address and (optionally) a display name when you create an account, whether via Google OAuth or email/password.
• Profile data: Avatar URL and any display preferences you set.
• Usage data: Stories you've started or completed, typing progress, and in-app activity such as which stories you practice and how often.
• Payment information: If you subscribe to a paid plan, your payment is processed by Stripe. We do not store your card number or banking details — Stripe handles all payment data directly.
• Technical data: Browser type, device type, IP address, and analytics events collected via Vercel Analytics to help us improve the service.

3. How We Use Your Information

• To create and manage your account and authenticate you securely.
• To deliver the core product experience (story access, progress tracking, streaks).
• To process payments and manage your subscription status.
• To send transactional emails (e.g. password reset, receipt) — we do not send marketing emails without your explicit consent.
• To analyze aggregate usage patterns and improve the platform.
• To comply with legal obligations.

4. Information Shared With Third Parties

We do not sell your personal data. We share information only with the following service providers as necessary to operate the platform:

• Supabase — our database and authentication provider. Stores your account data and usage records in a secure, hosted PostgreSQL database.
• Stripe — our payment processor. Receives your payment details directly and provides us with a subscription status. Stripe's privacy policy is available at stripe.com/privacy.
• Vercel — our hosting and analytics provider. Collects anonymized usage data to help us understand traffic patterns. No personally identifiable information is shared.
• Google — if you sign in with Google, Google authenticates you and shares your email address and profile picture with us.

All third-party providers are contractually required to handle your data in accordance with applicable privacy laws.

5. Method of Disclosure

Data is transmitted to our third-party providers over encrypted HTTPS connections. We may also disclose your information if required by law, court order, or to protect the rights and safety of Line by Line or its users.

6. Security

We take reasonable technical and organizational measures to protect your data. These include: encrypted data transmission (TLS/HTTPS), authentication handled by Supabase (industry-standard bcrypt password hashing and OAuth 2.0), access controls limiting who can view your data, and payment data handled entirely by PCI-DSS-compliant Stripe. No system is 100% secure, but we work to minimize risk.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. billing records for tax purposes).

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, email us at linebyline.help@gmail.com and we will respond within 30 days.

9. Cookies

We use essential cookies to maintain your login session. Vercel Analytics may set analytics cookies. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this policy occasionally. If we make material changes, we'll notify you by email or via a notice on the site. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at linebyline.help@gmail.com.