Privacy Policy
Last updated: 20 September 2026
The short version
- We collect what is needed to teach you Albanian and remember your progress — nothing else.
- There are no ads, no advertising identifiers and no analytics trackers in Flas.
- We never sell or rent your data, or your child's.
- Your voice is not recorded or stored by us.
- You can ask us to delete your account and everything in it, and we will.
1. Who we are
Flas is a mobile app for learning Albanian, operated by the Flas team ("Flas", "we", "us"). This policy explains what we collect through the app, why, and what you can do about it. If anything here is unclear, write to privacy@flas.io and we will answer in plain language.
2. What we collect
| What | Why |
|---|---|
| Your email address and password | To create your account and sign you back in. Passwords are stored only as a cryptographic hash by our authentication provider — we never see or store the password itself. |
| Your profile details — display name, age range, country, why you are learning, your level and your daily goal | To place you on the right part of the learning path and to shape the lessons you are shown. You choose these during setup and can change them later. |
| Child profiles you create — the child's first name or nickname, their learning track, level and daily goal | So each child has their own progress rather than sharing yours. See section 5. |
| Learning progress — lessons completed, attempts, accuracy, XP, streaks and days active | To unlock the next lesson, keep your streak, and show your progress. |
| Subscription status | To know whether your family's account has access. |
| Basic technical data — such as the device time zone and app language | To schedule reminders at the right local time and show the app in your language. |
We do not collect your contacts, your location, your photos, your files, or an advertising ID. Flas contains no advertising SDK and no third-party analytics SDK.
3. Your microphone and your voice
Speaking exercises ask you to say a phrase out loud. When you tap the microphone button, the app uses your device's own speech recognition service — Google on Android, Apple on iOS — to turn what you said into text, so it can be compared with the expected phrase.
- Flas does not record, upload or store your audio. We receive only the recognised text, and we keep only the resulting score.
- The recognition itself is performed by your device's operating system provider and is subject to their privacy policy. On some devices, that provider may process audio on their servers.
- The microphone is used only while a speaking exercise is active and you are holding the button. Denying the microphone permission simply disables those exercises; the rest of the app works.
4. Audio and lesson content
Most Albanian audio is bundled inside the app and plays offline. Where a phrase is not bundled, the app may request audio for that phrase from our speech service. Those requests contain the lesson text only — never your voice, your name or your account details.
5. Children
Flas is designed so that a parent or guardian, not a child, holds the account.
- A child profile is created by the adult who owns the account. We ask only for a first name or nickname and a learning level.
- Children have no email address and no password in Flas. A child signs in with a short family code plus their parent's email address. We do not ask a child for personal details.
- Children see no ads and no third-party content. There is nothing in the app for a child to buy.
- A child account cannot add other children, change a level, or see another learner's progress.
- The account holder can edit or delete a child profile at any time, which deletes that child's progress with it.
If you believe a child has given us personal information without a parent's involvement, write to privacy@flas.io and we will delete it.
6. Notifications
If you turn on practice reminders, they are scheduled and shown by your device itself. We do not send push messages from our servers, and we do not use notifications for marketing. Turning the permission off stops them entirely.
7. Where your data lives and who can see it
Your account and progress are stored with Supabase, our database and authentication provider, on servers in the European Union (Ireland). Supabase processes this data on our instructions as our processor.
Access rules are enforced by the database itself, not only by the app: your family's rows can be read only by your family's signed-in account. Our team accesses account data only when it is necessary to operate the service or to answer a support request from you.
We do not sell, rent or trade personal data. We share it only with the provider named above, or where the law requires it.
8. How long we keep it
We keep your account data for as long as your account exists. When you delete your account, we delete your profile, your children's profiles and all associated progress. Backups are overwritten on a rolling basis and any remaining copies disappear within 30 days.
9. Deleting your account
To delete your Flas account and all the data attached to it, send an email from the address on the account to delete@flas.io with the subject "Delete my account". We will confirm and complete the deletion within 30 days.
This removes your profile, every child profile on your account, all learning progress, and your subscription record. It cannot be undone.
10. Your rights
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, or delete it. If you are in the EU, the UK or another region with similar laws, you also have the right to receive a copy of your data in a portable form, to object to or restrict certain processing, and to complain to your national data protection authority.
The legal basis for processing your data is the contract between us — we cannot teach you Albanian and remember your progress without it — and, for optional things such as reminders, your consent.
Write to privacy@flas.io to exercise any of these rights.
11. Security
Data travels between the app and our servers over encrypted connections (HTTPS) and is stored encrypted at rest. Access to production data is limited to the people who operate the service. No system is perfect, and we will tell affected users promptly if a breach ever puts their data at risk.
12. Changes to this policy
If we change how we handle your data, we will update this page and change the date at the top. For a significant change we will tell you in the app before it takes effect.
13. Contact
Questions, requests or complaints: privacy@flas.io