LEARNING WITH TRUST

Privacy policy.

Pablo · Updated 7 November 2026

Who we are and how to contact us

Spanish with Pablo provides an offline Spanish-learning app. For privacy questions, access or deletion requests, contact support@learnwithpablo.com. This policy covers the React Native iOS and Android app and its optional Firebase services.

Learning without an account

You can open lessons and practice immediately. We do not create an anonymous Firebase Authentication account for an installation. Guest favorites, completed practice sessions and preferences are saved locally on your device. Guest progress is not uploaded to Firestore. Uninstalling the app or clearing its storage can remove this information; device backups may retain a copy.

Optional accounts and synchronized progress

If you register, Firebase Authentication processes your email address, sign-in provider, account identifier and authentication/security information. This version offers passwordless email sign-in. A six-digit code is delivered using Resend and verified by Firebase Cloud Functions before signing you in or creating an account. Resend processes your email address and delivery information. Codes expire after 10 minutes and can be used once. The service uses protected code records, request limits and security information to reduce abuse. We do not ask you to create a password. Apple and Google sign-in are not offered in this version.

After registration, your existing local progress is merged into your account. Verified accounts synchronize favorites and completed practice results with Cloud Firestore. Results include exercise type and source, score, review count, completion time and duration. Progress remains available offline, with queued changes sent when connected. Signing out keeps your account’s local history separate from guest progress.

Our Firestore progress database is hosted in Europe. Authentication, analytics, messaging and their subprocessors may process information in other countries; a European Firestore database does not mean every Firebase service is Europe-only.

Usage analytics

Firebase Analytics measures first app launches, app sessions, engagement, screens viewed, practice starts/completions, registration prompts, sign-ups, verification, reminder opens and review-prompt requests. It also processes app-instance identifiers, device/OS/app information and coarse region information. After sign-in, an internal account ID can associate analytics with the registered account. First launches can include reinstalls and are not the same as app-store download totals.

Analytics is enabled by default in this validation build. You can turn it off in Inicio → Ajustes → Notificaciones → Analytics. This stops future app analytics collection; it does not automatically erase events already processed. We do not send email addresses, passwords, raw search text, notification tokens or exercise sentence text in our custom analytics events. Advertising ID collection, advertising storage and ad personalization are disabled. The app has no advertising or in-app purchases.

Optional notifications and permissions

Notifications are optional, including for guests. When you enable them, the app requests the operating system’s notification permission. Firebase Cloud Messaging processes an installation/registration token and technical delivery information; this does not require an Authentication account. We do not save guest notification tokens in Firestore.

You can choose motivational practice reminders, inactivity reminders and new-lesson announcements. Some reminders are scheduled locally on your phone. Topic-based announcements can be sent through Firebase. A reminder can open a particular theme, conjugation or grammar practice. You can disable categories, turn all notifications off in the app or change permission in your device settings. Turning them off in the app cancels local reminders and removes this device’s messaging subscription/token when connectivity permits.

The app does not need access to your contacts, location, camera or microphone. Backup import/export uses your device’s document picker and share sheet, where you choose the file and destination. Store review prompts are provided by Apple or Google; the app does not receive your star rating or review text.

Service providers and security

We use Google Firebase for Authentication, Firestore, Analytics, Cloud Messaging, App Check and Cloud Functions, and Resend to deliver sign-in and account-deletion codes. Apple and Google provide app-store services. These services process data to deliver the features described above. We do not sell personal data. External YouTube, Spotify, PayPal and other links open services governed by their own policies.

Connections use encrypted transport. Firestore rules restrict account data to its owner and require a verified account for progress writes. We limit document fields and sizes. App Check validates supported app requests; it does not eliminate fraudulent registrations. No system can guarantee absolute security.

Retention, deletion and your choices

Local guest data remains until you remove the app, clear its storage or replace it using a backup. Registered progress remains until you delete the account. Sign out is not deletion. You may export a copy from Copia de seguridad.

To delete your account, open Inicio → Ajustes → Mi progreso → Eliminar cuenta y datos and follow the confirmation steps, including an email verification code when requested. An internet connection is required. The app deletes Firestore session history and favorites before deleting the Authentication account, and removes that account’s local progress from this phone. If deletion is interrupted, syncing is stopped and you can retry.

A minimal marker containing only the retired account ID and a deletion flag is retained to prevent other devices with old credentials from restoring deleted progress. It contains no email, favorites or lesson history. Copies on other devices are cleared when those devices reconnect and receive the deletion state; copies that remain offline and backups you exported are outside this deletion process. Service-provider operational backups and security logs follow their retention processes. Previously collected analytics may remain under Google Analytics retention controls; contact us if you want associated analytics data deleted.

You can also request account or data deletion without the app by emailing support@learnwithpablo.com from the account’s email address, with the subject Pablo — delete account. We may ask you to verify account ownership; never send a password or sign-in code. State whether you want the entire account or specific data deleted. You may also contact us to request access or correction, or to exercise applicable privacy rights.

Children and changes

Family-friendly learning content does not require a child to register. A parent or guardian should supervise a child’s use of account and online features. Contact us if you believe a child has provided personal information without appropriate authorization so we can review and remove it.

This policy may change when features or data practices change. The date above identifies this version. We will provide any further notice or choices required for a material change.

This website and support requests

The companion website at learnwithpablo.com provides app information, a sample flashcard activity, support and privacy information. The flashcard activity runs in your browser and is not linked to app progress. The website does not create an app account or load Firebase Analytics. Vercel hosts the website and may process technical request information such as IP addresses and browser information to deliver and protect the service.

If you contact support, your email provider and our support mailbox process the address, message and any attachments you send. We use them to answer your request and resolve the issue. Avoid sending passwords, sign-in codes or unnecessary personal information. Contact support to request removal of support correspondence, subject to any necessary security or legal retention.

The mobile app’s email-code flow uses Cloudflare Turnstile through an embedded web page to help distinguish legitimate requests from automated abuse. Cloudflare processes network and browser/device signals for this check. The app sends the resulting short-lived token to our server for verification before requesting a sign-in email; the Turnstile page does not receive your email address or learning history. See Cloudflare’s privacy policy.