Privacy Policy

Last updated: May 31, 2026

This policy explains what data Onomeo collects, how we use it, and the choices you have. We aim to collect the minimum data needed to run a good English-learning product — and never more.

Quick version: we collect your email, your learning progress, and basic usage stats. We don't sell your data, ever. Payment is handled by Creem — we never see your card.

01 Who we are

Onomeo is a web-based language learning application (currently focused on English), operated by an independent developer. For all privacy-related questions, contact [email protected].

02 What we collect

Account info — your email address and display name (via Google Sign-In, if you choose that option)
Learning data — words you study, sentences you read, practice scores, daily progress
Usage data — pages visited, features used, session duration (anonymized and aggregated)
Device info — browser type, screen size, locale (for layout and language defaults)
Payment info — handled entirely by Creem, our Merchant of Record. We never see or store your card details. We only receive your subscription status (active, cancelled, etc.)

03 How we use your data

Personalize your learning (which words to review next, daily picks)
Improve the product (anonymized analytics on which features work)
Communicate with you (account-related emails only — receipts, security alerts, important changes)
Detect and prevent abuse (spam accounts, automated scraping)

We do not send marketing emails unless you explicitly opt in.

04 Third-party services

We share the minimum data needed with these providers:

Google — sign-in only (we receive your email and name; you can revoke access in your Google account at any time)
Creem — subscription billing (they have their own privacy policy)
PostHog — anonymized product analytics, EU-hosted
Sentry — error tracking to help us fix bugs, EU-hosted
Railway — web hosting
Cloudflare — DNS and CDN

We do not sell your data. Period. We do not share data with advertisers or data brokers.

05 Cookies

We use essential cookies for:

Session management (keeping you logged in)
Preference storage (theme, language, learning goals)

We do not use advertising cookies or third-party tracking cookies.

06 Your rights

You can, at any time:

Access all data we have about you
Correct any incorrect data
Delete your account and all associated learning data
Export your data in a portable format (JSON)
Object to specific uses of your data

For users in the EU (GDPR) or California (CCPA), these rights are guaranteed by law. We honor them globally — email [email protected] and we'll respond within 7 days.

07 Data retention

Active accounts: data retained for the duration of your subscription plus 90 days
Cancelled or deleted accounts: data permanently removed within 30 days of request
Backups: 30-day rolling window for disaster recovery, then overwritten
Anonymized aggregate analytics: may be retained indefinitely for product improvement

08 Security

We protect your data with:

HTTPS encryption for all traffic
Encrypted password storage (passwords are hashed, never stored in plain text)
Limited access — only the developer has access to production data, and only when necessary for support or debugging
Regular dependency updates and security audits

No system is 100% secure. If a data breach affects you, we'll notify you within 72 hours of discovery, as required by GDPR.

09 Children

Onomeo is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe we have, contact [email protected] and we will delete the data within 7 days.

10 International transfers

Your data may be processed in countries outside your own (notably the EU and US, where our hosting providers operate). We use providers with appropriate safeguards (GDPR-compliant or equivalent).

11 Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated to active users by email at least 14 days before they take effect. The "Last updated" date above always reflects the current version.

12 Contact us

Questions, complaints, or data requests? Email [email protected]. We aim to respond within 3 business days.