Privacy Policy

1. Introduction

AanThai (“we”, “us”, or “our”) operates the AanThai mobile and web application (the “Service”). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service. By using AanThai, you agree to the practices described in this policy.

2. Data We Collect

We collect the following information:

• Account data — your name, email address, and profile information provided when you sign up via Clerk authentication.
• Reading progress — which stories you have read, your position within stories, completed status, and bookmarks.
• Vocabulary review data — words you have saved for review and your SRS (spaced repetition) performance.
• Subscription data — your current plan tier. Payment processing is handled by Stripe and we do not store card details.
• Usage data — app interactions and feature usage for improving the Service.

3. How We Use Your Data

• Provide and personalise the Service (reading progress, vocabulary review scheduling)
• Process subscription payments and manage your account
• Send transactional emails (account confirmation, password reset)
• Improve and debug the Service
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted on infrastructure within the EU. Authentication is managed by Clerk. We use HTTPS for all data transmission. Access to your data is restricted to authorised systems and personnel. While we implement industry-standard safeguards, no method of transmission over the Internet is 100% secure.

5. Third-Party Services

We use the following third-party services:

• Clerk — authentication and identity management (clerk.com/privacy)
• Supabase — database and storage (supabase.com/privacy)
• Stripe — payment processing (stripe.com/privacy)

Dictionary data is sourced from Wiktionary (CC BY-SA) and LEXiTRON by NECTEC.

6. Your Rights (PDPA & GDPR)

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format

To exercise any of these rights, contact us at info@aanthai.app.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Cookies

We use only essential cookies required for authentication (managed by Clerk) and session management. We do not use tracking or advertising cookies.

9. Children's Privacy

AanThai is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the new policy.

11. Contact

If you have any questions about this Privacy Policy, please contact us at info@aanthai.app.