Privacy Policy

Last updated: 20 April 2026

This Privacy Policy explains how Cultra Lab Limited Partnership("we", "us"), a Limited Partnership registered in Thailand at 1st Floor, PKCD Building, 9, 8 Muang Naka Rd, Phuket 83000, Thailand, collects and uses your information when you use thaiandenglish.com or the Phuut Thai application (the "Service"). We take privacy seriously and try to keep what we store to the minimum needed to make the app work.

1. What we collect

• Email address, if you create an account. Used only to send magic-link sign-in emails and occasional transactional notices (e.g. receipts, trial-ending reminders).
• Learning progress: the sentences and words you've seen, spaced-repetition card states, review counts, game scores.
• Profile preferences: your chosen mode, gender (for Thai pronouns), level, whether kid mode is on, and optional nickname.
• Subscription status (if applicable): trial or active status, billing period end date. Actual payment card details are handled by Paddle and never touch our servers.
• Basic technical info: browser, timestamp of each request — stored transiently by our hosting and CDN providers (GitHub Pages, IONOS, Supabase) for security and reliability.

We do not collect contacts, location, microphone audio, or any biometric data. We do not run advertising trackers.

2. How we use it

• To operate the Service and sync your progress across devices.
• To personalise content to your level and pronoun preferences.
• To process payments (via Paddle) and honor your subscription.
• To send essential emails: magic-link logins, receipts, security notices, optional product updates.
• To improve the app using aggregated, non-personal usage data.

3. Where your data lives

• Supabase (PostgreSQL, Singapore region) — user accounts and progress, protected by row-level security.
• Paddle — payment processing and subscription management (they are our Merchant of Record).
• Your browser — a copy of your progress is cached locally for offline use; clearing your browser storage clears it.

4. Who we share with

We do not sell your data. We share it only with service providers we need to run the app: Supabase (hosting and auth), Paddle (payments), and email delivery providers for transactional email. Each is bound by their own privacy commitments. We never share with advertisers.

5. Cookies & local storage

We use the browser's localStorage to remember your progress and preferences, and Supabase's auth cookie to keep you signed in. We do not use tracking or advertising cookies.

6. Data retention

Your progress and profile are kept as long as your account is active. If you delete your account, we delete the associated data within 30 days, except where we are legally required to retain it (e.g. invoices for tax records, retained by Paddle for up to 7 years).

7. Your rights

You can access, correct, export, or delete your data at any time from your account page, or by emailing hello@thaiandenglish.com. If you are a resident of a jurisdiction with specific data-subject rights (EU, UK, etc.), we honor those requests without additional verification requirements beyond confirming you control the account.

8. Children

The Service is not directed at children under 13. If you are between 13 and 18, we ask that you have parental or guardian consent. Kid mode, when selected, hides adult-context examples.

9. International transfers

Data may be transferred to and processed in Singapore (Supabase), the United Kingdom (Paddle), the United States (email providers), and other jurisdictions. We use providers with appropriate safeguards.

10. Changes

If we make material changes to this Policy we will notify you by email or in-app banner at least 14 days before the changes take effect.

11. Contact

© Cultra Lab Limited Partnership. All rights reserved.