Privacy Policy

1. Who we are

Tefluent (“we,” “our,” “us”) operates tefluent.com, an independent French exam-prep platform for people pursuing Canadian permanent residency. Our contact email is hello@tefluent.com.

2. What data we collect

• Account data: When you sign up via Supabase Auth (email/password or OAuth), we store your email address, hashed password, and any profile name you provide.
• Learning progress: Lesson completions, mock-exam scores, drill results, and study-plan activity are stored in your account to track your progress over time.
• Mock-exam responses and voice recordings: Your written answers are saved with your results. When you record a spoken answer in a mock, the audio is stored privately so you can replay it later (e.g. after switching devices). Recordings are kept in a private Cloudflare R2 bucket and are accessible only to you, through short-lived expiring links. We never make them public and do not use them for advertising or model training. AI grading of your writing or speech runs on your own device in the browser, so that content is not sent to us for grading.
• Newsletter signups: If you subscribe via our footer form, we store your email address and the source of the signup.
• Usage data: Standard server logs (IP address, browser/device type, pages visited, timestamps) collected automatically by Vercel and Cloudflare infrastructure.
• Cookies: A session cookie (Supabase Auth) keeps you logged in, and a small cookie remembers your language preference. With your consent, we set product-analytics cookies (PostHog) and marketing cookies (Google Analytics, Google Ads, and the Meta pixel) that let us measure how well our own ads work. These load only after you accept in the cookie banner; you can decline, or change your choice at any time. We never sell your data.

3. How we use your data

• To provide and improve the Tefluent study platform.
• To display your progress, scores, and study analytics to you.
• To send occasional product updates or French-PR tips if you subscribed (you can unsubscribe at any time by emailing us).
• To diagnose bugs and improve performance using aggregated, anonymised usage data.

We do not sell your data. With your consent, we use marketing cookies only to measure the performance of our own advertising and to reach people who have already visited Tefluent. We do not show third-party ads on the platform.

4. Third-party services

We use the following sub-processors to operate the platform:

• Supabase (database and authentication): stores your account and progress data in secure, encrypted databases hosted on AWS.
• Vercel (hosting and edge network): serves the web application and processes server-side requests. Vercel may retain server logs briefly.
• Cloudflare (DNS, CDN, and R2 storage): routes traffic, provides DDoS protection, and stores your mock-exam voice recordings in a private bucket accessible only via expiring links.
• PostHog (product analytics): privacy-friendly usage analytics to help us improve the platform. It loads only after you accept in the cookie banner.
• Google (Google Analytics 4 and Google Ads): With your consent, measures website traffic and the performance of our ad campaigns. Loads only after you accept marketing cookies in the banner.
• Meta (Facebook pixel): With your consent, measures the performance of our ads on Facebook and Instagram and lets us reach past visitors. Loads only after you accept marketing cookies in the banner.
• Sentry (error monitoring): collects technical error reports so we can diagnose and fix bugs.
• Brevo (email): sends account and transactional emails, such as your welcome message.

Each of these providers has their own privacy policy and data-processing terms. Marketing services (Google Ads, the Meta pixel) load only with your consent and are used solely to measure and improve our own advertising; we never sell your data.

5. Data retention

Your account data and progress records are retained as long as your account is active. If you delete your account, we soft-delete your records and permanently purge them within 30 days. Server logs are retained for a maximum of 90 days.

6. Your rights

Depending on your jurisdiction (including Canada's PIPEDA and provincial laws), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Withdraw consent where processing is consent-based (e.g., newsletter).

To exercise any of these rights, email us at hello@tefluent.com. We will respond within 30 days.

7. Security

All data in transit is encrypted via TLS. Database data is encrypted at rest by Supabase. We enforce row-level security (RLS) policies so that users can only access their own records. We review our security practices regularly.

8. Changes to this policy

If we make material changes to this policy, we will update the “last updated” date at the top of this page and, where appropriate, notify you by email. Continued use of Tefluent after changes are posted constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email hello@tefluent.com.