1. Information we collect
Account information
We collect your email address, account identifiers, email-verification status, and account creation and update dates. First 1000 Words uses one-time email links for authentication rather than storing a password you create.
Subscription information
We store identifiers that connect your account to your Stripe customer and subscription records, along with subscription status and the current billing-period end date. Stripe processes your payment details; First 1000 Words does not store your full card number.
Learning information
We store your selected language, onboarding choices, selected vocabulary packs, learned words, review history, and review schedule. This allows the service to restore your progress and personalize spaced-repetition sessions.
Session and technical information
When you sign in, we process session tokens, expiration times, IP addresses, and browser user-agent information. We also receive ordinary server request information needed to operate, troubleshoot, and secure the service.
2. How we use information
We use this information to:
- Create and authenticate your account.
- Confirm subscription eligibility and provide paid features.
- Save learning progress and schedule vocabulary reviews.
- Send sign-in, verification, account-deletion, and service emails.
- Prevent abuse, protect accounts, troubleshoot errors, and maintain the service.
- Meet legal, accounting, and regulatory obligations.
3. Service providers
We share information with service providers only as needed for them to perform services on our behalf:
- Stripe processes subscription checkout, recurring payments, and billing management.
- Resend delivers authentication and account-related emails.
- Cloudflare R2 hosts media used by the learning service.
- Hosting and infrastructure providers run the application and database.
These providers may process information in countries other than your own and handle it under their own privacy terms and contractual obligations.
4. Cookies
We use essential cookies to keep you securely signed in and maintain your session. These cookies are necessary for account features to work. We do not currently use advertising cookies.
5. Legal reasons for processing
Depending on where you live, we process information because it is necessary to provide the service you requested, to meet legal obligations, and for legitimate interests such as security, fraud prevention, support, and service improvement. Where consent is required, we will ask for it.
6. Retention
We keep account and learning information while your account is active and as needed to provide the service. After deletion, we remove or de-identify information unless we must retain limited records for legal, security, fraud-prevention, dispute, or financial-reporting purposes. Backup copies may remain temporarily until routine deletion cycles complete.
7. Your choices and rights
You can update your email, manage your subscription, and request account deletion from Account settings. Depending on your location, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may withdraw consent where processing relies on consent.
To make a privacy request, email help@codefish.no from the address connected to your account. We may need to verify your identity before completing a request.
8. Security
We use reasonable technical and organizational safeguards designed to protect your information. No online service can guarantee absolute security, so please protect access to your email account and avoid forwarding sign-in links.
9. Children
First 1000 Words is not directed to children who are below the minimum age required to consent to online services in their location. If you believe a child provided personal information without appropriate permission, contact us so we can investigate and delete it where required.
10. Changes to this policy
We may update this policy as the service or applicable requirements change. We will post the revised policy here, update the effective date, and provide additional notice for material changes when reasonably possible.
11. Contact
Questions or requests about privacy can be sent to help@codefish.no.