Privacy Policy

1. Who is responsible for your data

The Service is operated by Evgenii Shtannikov, who is the data controller for the personal data described in this policy.

For privacy questions or requests, email e.shtannikov@gmail.com.

2. Data we collect

Telegram account and authentication data

When you use a bot or open a Mini App from Telegram, we receive the data Telegram makes available to the Service. This may include your Telegram user ID, first and last name, username, chat and message identifiers, and signed Mini App authentication data. We do not receive your phone number unless you deliberately send it to the bot.

Learning content and progress

We store the words and phrases you add, their definitions, learning status, review schedule, quiz rounds and results, usage limits, and related timestamps. This lets the Service remember your vocabulary, personalize practice, and show progress.

Technical data

Our hosting and infrastructure providers may process technical information needed to deliver and secure the Service, such as IP address, browser or device information, request time, requested URL, and diagnostic or security logs.

Public trial

The public trial quiz does not read Telegram authentication data, call the learning API, or save quiz answers or results to the Pomněnka database. Standard hosting logs may still be generated when you visit the page.

3. Why we use your data

We use personal data to:

• authenticate you through Telegram;
• provide vocabulary and quiz features;
• save and personalize your learning progress;
• respond to commands and send requested feedback;
• apply usage limits and prevent duplicate or abusive requests;
• maintain, troubleshoot, and secure the Service; and
• comply with legal obligations and enforce our rights.

Where the GDPR or similar law applies, we process data as necessary to provide the Service you request, for our legitimate interests in operating and securing the Service, and where necessary to comply with law.

4. Who receives your data

We use the following service providers:

• Telegram provides the bot and Mini App platform and delivers your account data, commands, and messages. See the Telegram Privacy Policy.
• Vercel hosts the web application and processes requests and operational logs. See the Vercel Privacy Policy.
• Supabase provides the database infrastructure used to store account, vocabulary, and progress data. See the Supabase Privacy Policy.
• OpenAIgenerates and evaluates quiz content. Data sent through the OpenAI API is not used to train OpenAI models by default. OpenAI may retain API abuse-monitoring data for up to 30 days unless a longer period is required by law. See OpenAI's Privacy Policy and API data controls.

Providers process data under their own terms and privacy notices or on our instructions, as applicable. We may also disclose data when required by law, to protect users or the Service, or as part of a business transfer subject to appropriate safeguards.

We do not sell personal data, share it for cross-context behavioral advertising, or use it to serve ads.

5. International data transfers

Some providers may process data outside your country, including outside the European Economic Area. Where required, we rely on recognized safeguards such as adequacy decisions or standard contractual clauses.

6. How long we keep data

• Account, vocabulary, quiz, and progress data are kept while needed to provide the Service, until you ask us to delete them, or as required for legal or security purposes.
• Our providers may retain operational and security logs according to their own retention schedules and legal obligations.

Deleting a phrase inside a Mini App removes it from your active lists but is not an account-deletion request. To request deletion of all your Service data, contact us using the email above and include your Telegram username or numeric user ID so we can identify the correct account.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data, and to object to certain processing. You may also have the right to lodge a complaint with your local data-protection authority. Contact us to exercise these rights. We may need to verify your identity before completing a request.

You can stop future collection by no longer using the Service and blocking the Pomněnka bot in Telegram. This does not automatically delete data already stored by the Service.

8. Automated processing and AI

The Service uses AI to create and evaluate exercises. AI output may be inaccurate and should not be treated as professional advice. We do not use AI to make decisions that produce legal or similarly significant effects about you.

9. Cookies and analytics

We use Vercel Web Analytics to collect aggregate page-view statistics for our public website, trial, and Mini App. This includes visited pages, referring websites, approximate location, and browser and device information. Vercel Web Analytics does not use cookies. We remove query parameters and URL fragments before sending page URLs. We do not send Telegram account identifiers, authentication data, vocabulary, or exercise answers as analytics events. See the Vercel Web Analytics privacy documentation for more information.

We do not use advertising cookies. Telegram and our infrastructure providers may use technical storage or process device and request data as described in their own privacy notices.

10. Security

We use reasonable technical and organizational measures designed to protect personal data, including validation of Telegram-signed authentication data, restricted server-side database access, and encrypted network connections. No service can guarantee absolute security.

11. Children

The Service is not directed to children who are not old enough to consent to data processing under the law where they live. If you believe a child has provided personal data without the required permission, contact us so we can review and delete it where appropriate.

12. Changes to this policy

We may update this policy when the Service or legal requirements change. We will publish the new version here and update the effective date. If a change materially affects how we use personal data, we will provide additional notice where required.