The short version

We collect your email address so you can have an account, and we store the islands you build and the practice results you produce so they reach your other devices. There is no advertising, no analytics, no tracking, and no third party is given your data to use for their own purposes. We do not sell anything about you, because we sell subscriptions instead.

What we hold

• Your email address. It is your account name, and it is where the trial reminder and any password reset go.
• Your password, hashed. Stored as a PBKDF2-SHA-256 derivation with a random per-account salt and 25,000 iterations — never as text. We cannot read it, and a password reset replaces it rather than recovering it.
• Your content. The islands and conversations you build or edit, and your practice history — scores, dates, and which drill. This is the thing that syncs between your devices, and it is the reason an account exists at all.
• Your devices. A name you can recognise (“Android phone”) and a token that keeps that device signed in. You can sign any of them out from Settings, which deletes the record.
• Which languages you have. Whether each is a trial, a subscription, or a comp, and when it ends.

What we do not hold

• Card details. Payment happens on Stripe's own pages and the card never reaches us. We keep only the customer and subscription identifiers Stripe gives us, so we know what you are entitled to.
• Analytics, advertising or tracking. No analytics script runs on this site or in the app. There are no advertising identifiers, no third-party cookies, and no profile of you anywhere.
• Your voice. The app never records audio. Text-to-speech is played by your own device; nothing is uploaded, and the app asks for no microphone permission.
• Your location, contacts, photos, or files. None are requested.

Who else sees it

Three services, each for one job, and none of them for their own purposes:

• Cloudflare — hosting, the database your account lives in, and the service that sends our email. Data is stored in the United States.
• Stripe — payment. They receive your email address and what you bought, and they handle the card entirely.
• Anthropic — only if you use “Build with AI”. The description you type is sent to generate the draft. Nothing else about your account goes with it, and this happens only when you press the button.

The app specifically

The Android app talks to the same account as the website and holds nothing extra. Your islands and history are kept on the phone so drills work offline, and synced when you have a connection. Your sign-in token is stored in the Android keystore and is excluded from Google backups, so restoring a backup onto a different phone does not hand it a signed-in session.

The daily reminder, if you switch it on, is scheduled entirely on your phone. It is not a push notification: no token is registered, nothing about you is sent anywhere, and it works with the phone offline.

The app takes no payment. Subscriptions are managed on this website, and the app contains no purchase of any kind.

How long we keep it

Your account and content stay until you ask us to delete them. Practice history is capped at the most recent 500 sessions. Deleted islands leave a tombstone — a record that a thing was deleted, with no content in it — for 90 days, so the deletion reaches your other devices instead of the island coming back. Password reset links expire and are stored only as a hash, so a copy of that table is a list of spent numbers rather than working links.

Getting rid of it

Email hello@language-island.com from the address on the account and ask for it to be deleted. We remove the account, your content, your practice history, your devices, your entitlements and your reset tokens. It is a real deletion, not a flag. Stripe keeps its own payment records for as long as the law requires them to, which is not something we control.

You can also ask for a copy of what we hold, or ask us to correct it, at the same address. In the app itself, Settings → Erase everything on this phone clears the local copy without touching the account.

Children

Language Island is not aimed at children and we do not knowingly collect anything from anyone under 13. If you believe a child has an account, write to us and we will delete it.

Changes

If this changes in a way that affects what we collect or who sees it, the date at the top changes and anyone with an account is emailed. Quiet edits to a privacy policy are how it stops meaning anything.

Contact

Shoreline Consulting Group, LLC — hello@language-island.com