This is a general template, not legal advice. Please have it reviewed by a qualified lawyer before relying on it — especially before charging money or for full GDPR compliance.

Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains what information Sabiá ("we", "us", "our") collects, why we collect it, and what choices you have. Sabiá is a web app for learning European and Brazilian Portuguese vocabulary using flashcards and spaced repetition, available at https://sabiavocab.com.

Sabiá is operated by Agent Launch LLC, 2055 Limestone Rd, Ste 200-C, Wilmington, DE 19808, USA. If you have any questions about this policy or your data, email us at support@sabiavocab.com.

The short version

• We collect the minimum we need to run the app: your email, an optional first name, and the words and study progress you create.
• We do not sell your personal data.
• We do not run third-party advertising or cross-site tracking.
• We do not collect payment information (the app is currently free).
• You can ask us to access, correct, export, or delete your data at any time.

What we collect

We collect the following information:

• Account email and password. You need an email address to create an account. Your password is hashed by our authentication provider, which means we never see or store your actual password.
• First name (optional). You can add a first name. We use it only to display you on the leaderboard if you choose to join it (see "Leaderboard" below).
• Your vocabulary and study data. This includes the words you add and your study progress and statistics — for example, the number of words you have learned, daily goals you have hit, your review history, and your last-active timestamps.
• Basic technical and log data. Like most websites, our hosting providers automatically record basic technical information (such as IP address and browser type) as part of serving and securing the site.

What we do NOT collect

• We do not collect payment or card information, because there are currently no payments or subscriptions.
• We do not run third-party advertising.
• We do not sell your personal data to anyone.

How we use your information

We use your information to:

• Create and secure your account and let you sign in.
• Save your words and study progress so you can come back to them.
• Run features like spaced repetition, daily goals, and statistics.
• Show you on the leaderboard, but only if you opt in.
• Send you transactional emails (see "Emails" below).
• Keep the service working, fix problems, and protect against abuse.

Legal bases for processing (for EU/EEA users)

If you are in the EU or EEA, we process your data on these legal bases:

• Contract: to provide the account and service you signed up for.
• Consent: for optional features like joining the leaderboard. You can withdraw consent at any time.
• Legitimate interests: to keep the service secure, working, and free from abuse.

Cookies and local storage

The app stores some data in your browser to work properly:

• Authentication tokens so you stay signed in.
• A local cache of your words in your browser's localStorage, so the app loads faster and works smoothly.

We do not use third-party advertising cookies or cross-site tracking cookies.

Leaderboard

The leaderboard is optional. It is turned on by a toggle in Settings.

• If you opt in, your first name and some stats (the days you hit your goal and the number of words you have learned) become visible to other signed-in users.
• You can turn the leaderboard off at any time in Settings. Turning it off removes your name and stats from the shared board.

Emails

We currently send only transactional emails — for example, password resets, invites, and optional notices about your account. We do not send marketing emails.

Who processes data on our behalf (sub-processors)

We use a small number of trusted third parties to run the service. They process data on our behalf:

• Supabase — database, authentication, and hosting of your user data. This data is stored on servers in the European Union (Ireland).
• Vercel — website hosting and content delivery (CDN).
• Resend — sending transactional emails such as password resets and invites.
• Cloudflare — the “I’m human” bot-protection check (CAPTCHA) shown on sign-in and sign-up.
• Google Fonts — serving the web font used in the app’s interface.

International data transfers

Your account data (database and authentication) is stored in the European Union (Ireland). Some of our providers — for example, our email provider and our content delivery network — are based in or operate from the United States, so limited data (such as your email address when we send you a message) may be transferred to and processed in the U.S. or other countries. We rely on our providers' standard safeguards, such as Standard Contractual Clauses, for any such transfers.

How long we keep your data

We keep your account data for as long as your account is active. We delete it when you ask us to, or when your account is removed.

Your rights

Depending on where you live (including under the GDPR for EU/EEA users and the CCPA for California users), you have rights over your personal data, including the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or out of date.
• Delete your data (including your account and all associated data).
• Export a copy of your data.
• Object to certain processing.

To exercise any of these rights — including deleting your account and all associated data — please email us at support@sabiavocab.com. Self-serve account deletion inside the app is not yet available, so for now we handle these requests by email. We do not sell personal data, so there is no "do not sell" process needed for CCPA.

Security

We protect your data using measures such as row-level security and encryption in transit. No method of transmission or storage is ever 100% secure, so we cannot guarantee absolute security, but we work to keep your data safe.

Children

Sabiá is not directed to children under 16. You must be at least 16 years old to use the service (or have guardian consent where required by law). If you believe a child under 16 has given us personal data, please contact us so we can remove it.

Dictionary content

Definitions and translations in the app are adapted from Wiktionary and used under the Creative Commons Attribution-ShareAlike 4.0 (CC BY-SA 4.0) license.

Changes to this policy

We may update this Privacy Policy from time to time. When we make important changes, we will update the "Last updated" date at the top. Please check back now and then.

Contact

If you have any questions about this policy or your data, email us at support@sabiavocab.com.

← Back to Sabiá