Privacy Policy

Last updated: March 20, 2026

1. Introduction

english.cash ("we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our AI-powered English learning platform.

2. Information We Collect

Account Information

Name, email address, password (hashed with bcrypt), preferred language, CEFR level, and learning interests.

Learning Data

  • Writing submissions: Essays and descriptions you write, along with AI feedback and scores
  • Voice recordings: Audio recorded during speaking practice, processed by Deepgram for transcription
  • Chat messages: Conversations with Cashi (AI tutor), stored for learning context and session history
  • Exercise results: Listening, reading, grammar, and vocabulary scores and progress
  • Study time: Time spent actively using the platform

Technical Data

IP address, browser type, device information, and page views collected through Google Analytics (GA4).

Payment Data

Payment processing is handled entirely by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription status.

3. How We Use Your Information

  • Provide AI-powered feedback on your writing, speaking, and exercises
  • Personalize content based on your CEFR level and chosen interests
  • Track your progress, streaks, and achievements
  • Send transactional emails (verification, subscription, progress reports)
  • Improve the Service through aggregate, anonymized analytics

4. Third-Party Services

ServicePurposeData Shared
Anthropic (Claude AI)AI feedback, tutoring, content generationYour text inputs, anonymized
DeepgramSpeech-to-text transcriptionVoice recordings
StripePayment processingEmail, payment method
ResendEmail deliveryEmail address, name
Google AnalyticsUsage analyticsAnonymized browsing data
VercelHostingServer logs
NeonDatabase hostingAll stored data (encrypted)
CloudinaryProfile photo storageUploaded images

5. Data Retention

We retain your account data and learning history for as long as your account is active. Writing submissions, chat messages, and exercise results are kept to provide your progress history. You may request deletion of your account and all associated data by contacting support@english.cash. Upon account deletion, your data will be permanently removed within 30 days.

6. Data Security

We implement security measures including: password hashing (bcrypt), SSL/TLS encryption for all connections, secure database hosting (Neon PostgreSQL with SSL), Stripe webhook signature verification, and security headers (HSTS, X-Frame-Options, CSP).

7. Your Rights

You have the right to: access your personal data, correct inaccurate data, request deletion of your data, export your data, withdraw consent for data processing, and object to automated decision-making. To exercise these rights, contact support@english.cash.

8. Cookies

We use essential cookies for authentication (NextAuth session) and analytics cookies (Google Analytics). You can disable analytics cookies in your browser settings without affecting the Service.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us to have it removed.

10. International Data Transfers

Your data may be processed in the United States (Vercel, Neon, Anthropic, Stripe) and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

12. Contact

For privacy-related questions or requests, contact: support@english.cash

Data Controller: Eskalate LLC
112 Capitol Trail, Suite A66
Newark, DE 19711, United States