Privacy policy

Last updated: November 13, 2026

This policy covers the ShortLesson website and the ShortLesson apps for iOS and Android. It explains what we collect, why we need it and how you can get it deleted.

Who we are

ShortLesson is run by Oleksandr Kolesnyk, an individual developer based in Ukraine. In this policy, "we" means him. For anything about your data, write to [email protected].

What we collect

  • Account data: your name, email address and a hash of your password. We never store the password itself. If you sign in with Google or Apple, we store the account identifier that service gives us.
  • Learning data: which lessons you finished, your quiz answers, your practice solutions and your progress.
  • Questions to the AI tutor: the text you send and the answers you get.
  • Voice answers: when you answer an interview question out loud, we store the recording and its text transcript.
  • Subscription status: whether you have an active plan, its period and when it renews or ends.
  • Messages you send us through the contact form or by email.
  • Technical data: error reports from the app and the website, and the standard request logs any web server keeps (IP address, browser, time).

Why we use it

  • To create your account and keep you signed in.
  • To save your progress and show it on any device.
  • To check practice tasks and answer your questions to the AI tutor.
  • To transcribe and grade your voice answers.
  • To give you access to paid lessons when your subscription is active.
  • To fix bugs and keep the service safe from abuse.
  • To answer you when you write to us.

Who processes it for us

We keep the service on our own server. Your account, progress and voice recordings live there, and the recordings sit in private file storage on that same server. A few outside services do specific jobs:

  • Groq runs the AI tutor and turns voice recordings into text. Google Gemini is a backup for the AI tutor when Groq is unavailable. They receive only the text of your question or the audio being transcribed.
  • Apple App Store and Google Play handle payments. RevenueCat tells us the status of your subscription. We never see your card details.
  • Google and Apple handle sign in if you choose those buttons.
  • Cloudflare delivers the website and protects it from bots and attacks.
  • GlitchTip collects error reports. We host it ourselves.
  • An email delivery service sends the messages from our contact form to our inbox.

What we do not do

  • We do not show ads.
  • We do not track you across other apps or websites.
  • We do not sell or rent your data to anyone.

How long we keep it

We keep your data while your account exists. When you delete your account, we remove your profile, progress, AI questions and voice recordings within 30 days. Backups are overwritten on a 30 day cycle, so copies in them disappear within another 30 days. We may keep records we are required to keep by law.

Deleting your account

In the app, open Profile and tap Delete account. You can also email [email protected] from the address you signed up with, and we will delete the account for you. Deleting the account does not cancel a store subscription. Cancel it in your App Store or Google Play settings.

Your rights

You can ask us for a copy of your data, ask us to correct it or delete it, and object to how we use it. Write to [email protected] and we will answer within 30 days. If you think we handle your data wrongly, you can also complain to the data protection authority in your country.

Children

ShortLesson is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, write to us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of the page. For important changes we will also tell you in the app or by email.

Questions

Write to [email protected]. We usually answer within two working days.