Privacy policy

Last updated: 18 October 2026

Who we are

Breathe Arabic (breathearabic.com) is run by Michael J., a sole trader in the United Kingdom ("I", "me"). I am the data controller for the personal data described here. You can reach me at support@breathearabic.com.

What I collect and why

Your email address (and your name, if you sign in with Google), to create your account and sign you in. Legal basis: performing our contract with you.
Your study progress: which words you've studied, your answers, and when each word is next due. This is the point of the app, so it syncs between your devices. Legal basis: contract.
Your membership status: whether you're on the free plan, a paying member or have a gifted membership, and until when. Legal basis: contract.
Payment details are collected by Polar, not by me (see below). I receive a customer reference, your subscription status and renewal dates, but never your card number.

I don't use advertising, analytics or tracking cookies, and I don't sell or share your data for marketing.

Signing in with Google

If you choose "Continue with Google", Google shares three things with Breathe Arabic, and only with your permission on Google's consent screen:

your email address, used as your account login and to contact you about your account or membership;
your name, used to greet you and to identify your account;
your profile picture link, which Google includes with your name. The app doesn't display or use it.

Breathe Arabic does not ask for, and cannot see, your Gmail, contacts, Google Drive or any other Google data. Information received from Google is used only to sign you in and run your account. It is never sold, never used for advertising, and never shared with anyone except the service providers listed below that run the app (Supabase stores it). Breathe Arabic's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Breathe Arabic's access at any time from your Google Account (myaccount.google.com/connections), and ask me to delete your account and everything stored about you by emailing support@breathearabic.com.

Who processes it for me

Supabase stores your account, progress and membership, and sends sign-in emails.
Polar (Polar Software Inc.) takes payments as the merchant of record. That means Polar is the seller of your subscription, handles VAT, and processes your payment details under its own privacy policy.
Netlify hosts the app's web pages and may keep standard server logs, such as IP addresses, for security.
Google, if you choose "Continue with Google", confirms your identity. The app also loads its fonts from Google Fonts, which means your browser sends your IP address to Google when the fonts load.

Some of these companies are based outside the UK, notably in the United States. Where that's the case, transfers are covered by the UK's adequacy rules or standard contractual clauses that those companies provide.

Storage on your device

The app saves your settings, a copy of the word list and any answers not yet synced in your browser's local storage, so it works offline. It also stores your sign-in session there. These are needed for the app to work and aren't used for tracking. Signing out removes your copy of the word list and progress from that device.

How long I keep it

I keep your account and progress while your account exists. If you ask me to delete your account, I'll delete it within 30 days, and weekly backups roll off within a further 4 weeks. Payment records are kept by Polar for as long as tax law requires.

Your rights

Under UK data protection law you can ask for a copy of your data, have it corrected or deleted, object to how it's used, or ask for it in a portable format. Email support@breathearabic.com and I'll reply within one month. If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The app is not intended for children under 13, and paid membership requires you to be 18 or to have a parent's permission.

Changes

If I change this policy in a way that matters, I'll update the date above and let members know by email.