Privacy Policy

1. Who we are

Tefluent (“we,” “our,” “us”) operates tefluent.com, an independent French exam-prep platform for people pursuing Canadian permanent residency. Our contact email is hello@tefluent.com.

2. What data we collect

• Account data: When you sign up via Supabase Auth (email/password or OAuth), we store your email address, hashed password, and any profile name you provide.
• Learning progress: Lesson completions, mock-exam scores, drill results, and study-plan activity are stored in your account to track your progress over time.
• Mock-exam responses and voice recordings: Your written answers are saved with your results. When you record a spoken answer in a mock, the audio is stored privately so you can replay it later (e.g. after switching devices). Recordings are kept in a private Cloudflare R2 bucket and are accessible only to you, through short-lived expiring links. We never make them public and do not use them for advertising or model training. AI grading of your writing or speech runs on your own device in the browser, so that content is not sent to us for grading.
• Newsletter signups: If you subscribe via our footer form, we store your email address and the source of the signup.
• Usage data: Standard server logs (IP address, browser/device type, pages visited, timestamps) collected automatically by Vercel and Cloudflare infrastructure.
• Cookies: A session cookie set by Supabase Auth to keep you logged in. No advertising or tracking cookies are used.

3. How we use your data

• To provide and improve the Tefluent study platform.
• To display your progress, scores, and study analytics to you.
• To send occasional product updates or French-PR tips if you subscribed (you can unsubscribe at any time by emailing us).
• To diagnose bugs and improve performance using aggregated, anonymised usage data.

We do not sell your data. We do not use your data for advertising.

4. Third-party services

We use the following sub-processors to operate the platform:

• Supabase (database and authentication): stores your account and progress data in secure, encrypted databases hosted on AWS.
• Vercel (hosting and edge network): serves the web application and processes server-side requests. Vercel may retain server logs briefly.
• Cloudflare (DNS, CDN, and R2 storage): routes traffic, provides DDoS protection, and stores your mock-exam voice recordings in a private bucket accessible only via expiring links.

Each of these providers has their own privacy policy and data-processing agreements. We have not integrated any advertising networks, analytics suites (e.g., Google Analytics), or social tracking pixels.

5. Data retention

Your account data and progress records are retained as long as your account is active. If you delete your account, we soft-delete your records and permanently purge them within 30 days. Server logs are retained for a maximum of 90 days.

6. Your rights

Depending on your jurisdiction (including Canada's PIPEDA and provincial laws), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Withdraw consent where processing is consent-based (e.g., newsletter).

To exercise any of these rights, email us at hello@tefluent.com. We will respond within 30 days.

7. Security

All data in transit is encrypted via TLS. Database data is encrypted at rest by Supabase. We enforce row-level security (RLS) policies so that users can only access their own records. We review our security practices regularly.

8. Changes to this policy

If we make material changes to this policy, we will update the “last updated” date at the top of this page and, where appropriate, notify you by email. Continued use of Tefluent after changes are posted constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email hello@tefluent.com.