Frequently Asked Questions

We collect: account info (name, email, password hash), learning data (videos watched, exercises completed, vocabulary, progress), usage analytics (features used, time spent), and device info (browser, OS, IP address). We never sell your data. See our Privacy Policy for full details on data collection, storage, and usage.

Yes. SubLearn is designed to honor privacy rights such as access, correction, export, and deletion requests. If you need help with a privacy-related request, contact support and describe the data action you want us to take.

If you need account or data deletion, contact support so we can confirm the request and explain the impact on progress, vocabulary, and account access before removal is processed.

We use essential cookies for authentication and security, plus optional cookies for preferences and analytics. You can review Cookie settings from the consent banner or footer controls. Essential cookies cannot be disabled because the core product depends on them.

We share data with service providers only (AWS, Stripe, SendGrid) to operate SubLearn. These partners are contractually obligated to protect your data and can't use it for other purposes. We never sell your data to advertisers or third parties. AI conversations are processed under data processing agreements with strict privacy protections.

Security measures include: encrypted passwords (bcrypt hashing), HTTPS encryption for all traffic, two-factor authentication (optional), session expiration (auto logout after inactivity), login history tracking, and anomaly detection (unusual login alerts). We recommend enabling 2FA and using a strong, unique password.

Passwords must be at least 8 characters and include a mix of letters (upper/lower), numbers, and symbols. We recommend using a password manager to generate and store strong passwords. Avoid common words, personal info, or reusing passwords from other sites. Change passwords regularly from Settings → Security.

Yes. Go to Settings → Security → Login History to see recent logins with date/time, device, browser, location, and IP address. If you see unfamiliar activity, immediately change your password, enable 2FA, and log out all devices from the same page. Contact support if you suspect unauthorized access.