Privacy

CantoCan collects only the minimum needed to provide the service:

• Account information. Your email address and a password are securely handled by our authentication provider.
• Imported material. Text, PDFs, and files submitted by you are used to create learning materials, translations and progress tracking. Uploaded PDF files are processed and then discarded. Only the extracted text is kept.
• Learning data. Vocabulary lists, word statuses, and lesson progress are stored so your learning can be tracked over time.
• Allowance records. When you import material, CantoCan records how much of your plan allowance it used — for example, the number of PDF pages or sentences processed, and when. These records exist to enforce plan limits and to control costs. They do not record what you read, which words you looked at, or how you use the app.
• Subscription records. If you subscribe, CantoCan stores your plan, your subscription status, when the current period ends, and an identifier that links your account to your record at our payment processor. CantoCan also stores a record of the renewal terms you agreed to, including your email address, the price, and the exact wording shown to you at the time. This is required by consumer protection law.

Payments are processed by Stripe. When you subscribe you are taken to Stripe's own checkout page to enter your payment details, and you are returned to CantoCan afterwards. The same applies when you manage or cancel your subscription through Stripe's billing portal.

CantoCan never receives or stores your card number, expiry date, or security code. What CantoCan receives back from Stripe is limited to your subscription status, the plan you chose, the billing period, and the email address you used at checkout.

Stripe handles your payment information under its own privacy policy and retains its own records of your payments, including after you delete your CantoCan account, as payment processors are generally required to do for tax and accounting purposes. See the Stripe Privacy Policy.

• No analytics, tracking pixels, or advertising.
• No cookies beyond those required to keep you signed in.
• Personal data is never sold or shared for marketing.
• No profiling or automated decision-making based on how you use the app.

The allowance records described above are used only to enforce plan limits. They are not used to build a profile of you or to analyse your behaviour.

To run the application, CantoCan relies on external technical vendors under their standard terms of service:

• Infrastructure and hosting. Cloud hosting, database, and authentication providers store your data and serve the application.
• Artificial intelligence processing. Third-party AI services provide translation, grammar analysis, text-to-speech audio, and PDF text extraction based on the imported materials that you provide them.
• Payments. Stripe processes subscription payments and provides the billing portal where you manage or cancel your plan.
• Communications. An email delivery provider sends account emails such as confirmation links, password resets, and subscription confirmations.

Video lessons use embedded YouTube players. When a page containing a player loads, some basic data is shared with YouTube in order to display the video and determine whether it can be played — this happens on page load, not only when you press play.

This site uses YouTube API Services. By using these features you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

Lessons and learning data are kept until you delete them or ask for your account to be removed.

Records of subscription agreements are kept for as long as you have an account, and for four years after you delete it, then deleted automatically. This period reflects how long a legal claim about the agreement can be brought. Consumer protection law requires these records to be kept, so they are retained even if you delete your account — see below.

You can permanently delete your account at any time from the Account page. Doing so removes your email address and password, everything you imported, and all of your learning data. None of it can be recovered.

If you have an active subscription, it is cancelled at the same time and you will not be charged again.

One thing is deliberately not deleted: the record of any subscription you agreed to. Your account identifier is removed from that record, but the email address you used remains, because the record would be worthless as proof of what you agreed to without it. Nothing else about you is kept, and the record is used for no other purpose. Stripe separately keeps its own payment records, as described above.

You retain control over your data. You can delete the materials that you uploaded yourself, and you can change your password from the Account page.

To request a copy of your data, see the Contact section below. Requests are typically handled within 30 days.

If you are a California resident, you have the right to know what personal information is collected about you, to request its deletion, and not to be discriminated against for exercising those rights. CantoCan does not sell personal information and does not offer different prices or service levels based on whether you exercise these rights.

CantoCan is intended for users who are at least 13 years of age. Personal information from children under 13 is not knowingly collected. If discovered, it will be deleted promptly.

If this policy changes in a way that affects how your data is handled, the date at the top of this page will be updated.

For further questions or concerns, contact hello@cantocan.dev.