DRAFT — not yet legal advice. This policy is scaffolding and must be reviewed by qualified counsel before launch. Verba is used by minors, so COPPA (US) and GDPR-K (EU) requirements apply.

Privacy Policy

Last updated: (set at launch)

Who we are

Verba is an English-learning platform that helps students prepare for TOEFL and IELTS.

Information we collect

Account: name, email, password (hashed), exam target, interests, native language, and date of birth (for age verification).
Learning data: your answers, written responses, speaking transcripts/recordings, scores, XP, streaks, and mistakes.
Payment: handled by Stripe; we store only a payment reference, never card numbers.

Third-party processors

To provide the service we share limited data with:

Anthropic (Claude) — grades your writing/speaking and generates lesson content. Receives your essay/speech text (no name or email attached).
MiniMax — text-to-speech for listening audio and word pronunciation. Receives lesson text (not your personal data).
Microsoft Azure AI Speech (if enabled) — pronunciation/fluency scoring. Receives your speech audio.
Google — optional sign-in; and, in Chrome, browser speech recognition processes your voice for transcription.
Stripe — payment processing.
Supabase (AWS) — database hosting.

Children & parental consent

Verba is intended for teenage learners. If you are under the age of consent in your country (13 in the US under COPPA; 13–16 in the EU under GDPR-K), a parent or guardian must consent to your use of Verba. We collect a date of birth at sign-up to apply the right protections, and parents may request access to, or deletion of, their child's data.

Your rights

You (or your parent/guardian) can request access to, export of, or deletion of your data. Contact: (set a real privacy contact email at launch).

Data retention

We keep learning data while your account is active and delete it on request or account closure (set a concrete retention window with counsel).