Privacy Policy

English Era Studio ("we", "us", "our") operates the website englisherastudio.com and provides interactive English learning services. For questions about this policy, contact us at our contact form .

We collect the following categories of personal data:

• Account data: email address, display name, avatar, date of birth (optional), and sex (optional) when you register or update your profile.
• Learning data: courses you enrol in, lessons completed, words saved, and practice session results.
• Usage data: pages visited, features used, session timestamps, and browser timezone (used to calculate daily practice streaks in your local time) — collected via server logs and analytics.
• Payment data: billing information processed securely by our payment provider; we do not store card details ourselves.
• Communications: messages you send us via email or contact forms.

We use your personal data to:

• Create and manage your account and provide the learning platform.
• Personalise your learning experience and track your progress.
• Process payments and send billing receipts.
• Send transactional emails (password resets, account notifications).
• Send promotional emails about new courses or features — only with your consent.
• Analyse usage patterns to improve the platform (always in aggregated or anonymised form where possible).
• Comply with legal obligations.

Under the GDPR we process your data on the following lawful bases:

• Contract: processing necessary to deliver the service you signed up for.
• Legitimate interests: improving the platform, fraud prevention, and security.
• Consent: marketing emails and non-essential cookies (you may withdraw at any time).
• Legal obligation: complying with applicable law.

We share data with trusted third-party processors only as necessary:

• Supabase — database and file storage (EU region).
• Vercel — hosting and edge network.
• ElevenLabs — text-to-speech audio generation (word text only, no personal data).
• Stripe (or equivalent) — payment processing.

We do not sell your personal data to third parties.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain it longer (e.g. financial records for 7 years).

If you are in the EEA, UK, or another jurisdiction with equivalent data-protection laws, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local supervisory authority.

To exercise any right, email us at our contact form . We will respond within 30 days.

We use cookies and similar technologies to operate the site and, with your consent, to analyse usage. See our Cookie Policy for full details.

We apply industry-standard security measures including encrypted connections (TLS), row-level security on our database, and access controls. No system is perfectly secure; please also protect your account with a strong password.

We may update this policy from time to time. We will notify you of material changes by email or a prominent notice on the site. The "Last updated" date at the top reflects the most recent revision.

Questions or requests? Reach us at our contact form .