Privacy Policy

Last updated: February 2026

Dikduk ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Biblical Hebrew grammar learning application.

1. Information We Collect

Information You Provide

If you choose to create an account, we collect:

  • Email address — used for authentication and account recovery
  • Display name (optional) — used to personalise your experience

Information Generated Through Use

When you use Dikduk, we collect:

  • Learning progress — which lessons you've completed and your scores
  • Exercise results — your answers to exercises (for tracking areas needing improvement)
  • Streak data — your daily learning activity for streak tracking

Guest Users

If you use Dikduk without an account, your progress is stored only in your browser's local storage and is not transmitted to our servers.

Analytics (Optional)

With your consent, we may collect anonymous usage data through Vercel Analytics, including:

  • Pages visited
  • Referrer information
  • Device type and browser
  • Country/region (approximate)

This data is anonymous and cannot be used to identify you personally.

2. How We Use Your Information

We use your information to:

  • Provide the learning service and save your progress
  • Sync your progress across devices (if you have an account)
  • Track learning streaks to help motivate your learning
  • Improve the application based on anonymous usage patterns

We do not:

  • Sell your personal information
  • Use your information for advertising
  • Share your information with third parties for marketing purposes

3. Data Processors

We use the following third-party services to provide Dikduk:

  • Supabase (United States) — database and authentication services
  • Vercel (United States) — hosting and optional analytics

Both services maintain appropriate data protection safeguards and data processing agreements.

4. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Your profile, progress, and all associated data are permanently deleted
  • This deletion is immediate and cannot be undone

5. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (via Settings → Delete Account)
  • Portability — request your data in a portable format
  • Withdraw consent — you can withdraw consent for analytics at any time

To exercise these rights, please contact us at the address below.

6. Cookies

Dikduk uses cookies as follows:

  • Essential cookies — used for authentication when you are logged in. These are necessary for the service to function and cannot be disabled.
  • Analytics cookies — used by Vercel Analytics to collect anonymous usage data. These are only loaded with your explicit consent.

You can manage your cookie preferences at any time using the cookie banner or by clearing your browser's storage.

7. International Data Transfers

Your data may be processed in the United States by our service providers (Supabase and Vercel). Both providers maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses.

8. Children's Privacy

Dikduk is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website.

10. Contact Us

For any questions about this Privacy Policy or your personal data, please contact us at:

Email: privacy@dikduk.co.uk

11. Supervisory Authority

If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.