Privacy policy

The short version

• We record both voices on the call — yours and your teacher’s. You are responsible for telling them and getting their agreement.
• The audio and its transcript are deleted after 30 days, automatically. The recap stays until you delete it.
• The audio is sent to OpenAI to be transcribed and written up. It is not used to train anyone’s models.
• We do not sell anything to anyone, and there is no advertising.
• Your teacher has no account here and cannot see any of it.

What we collect

Your account. Email address, password (stored hashed by our authentication provider, never in readable form), your name if you give one, and the two languages you pick: the one you are learning and the one you want explanations in.

Lesson audio. When you press record, the extension captures two separate tracks — your microphone and the audio playing in the lesson tab, which is your teacher’s voice. Both are uploaded to your account when the lesson ends. Nothing is uploaded while the lesson is still running, and nothing is recorded unless you press record.

What comes out of the lesson. The transcript, the written recap, the vocabulary list, corrections, the speaking measurements (how much of the hour you spoke, your pace, how long you paused), your flashcard review history, and any practice tests you take.

Payment. If you subscribe, Stripe handles the card. We never see or store card details — we keep only your Stripe customer reference, your plan, and how many recaps you have used.

Nothing else. No analytics or advertising trackers, no browsing history, no location. The extension can only reach this app and its database; it has no access to any other site you visit.

Your teacher

Their voice is on the recording, so their voice is personal data and it is not yours to give away. Recording another person without their agreement is unlawful in some places — several US states require everyone on a call to consent, and the UK and EU treat the recording as their personal data too. Preply and italki also have their own rules about recording lessons on their platforms.

The extension says this before it asks for your password, and again above the record button. Tell your teacher and get their agreement. If they ask us to delete a recording of them, write to us and we will, without needing your permission.

Who else sees it

Four companies process data on our behalf. Nobody else receives any of it.

• Supabase — the database, file storage and sign-in. The audio and everything written from it are stored here, in the EU.
• OpenAI — transcribes the audio and writes the recap. Sent through the API, which is not used to train their models.
• Vercel — runs the website and the code that does the work.
• Stripe — payments, for subscribers only.
• Resend — sends the few emails we send: sign-in links, password resets, and a note when a recap is ready.

We do not sell personal data, we do not share it for advertising, and we will not hand it to anyone else unless the law requires it.

How long we keep it

• Lesson audio and its transcript: 30 days. A job runs every day and removes anything older, including the short audio clips attached to individual vocabulary words. This is automatic and is not something you have to ask for.
• Everything written from the lesson — the recap, vocabulary, progress, flashcards, tests — is kept until you delete the lesson or your account.
• Your account is kept until you close it.
• Billing records are kept as long as tax law requires, which is normally seven years, and are held by Stripe.

What you can ask for

A copy of everything we hold about you; correction of anything wrong; deletion of a single lesson, or of your whole account and everything in it. Deleting a lesson deletes its audio, its transcript and its recap. Deleting your account deletes all of it.

Write to hello@kokulabs.net and we will do it within 30 days. If you are in the UK or EU you can also complain to your data protection authority, though we would rather you told us first.

Where it is processed

Data is stored in the EU. Transcription and recap generation happen in the United States, where OpenAI processes the audio under standard contractual clauses. Our legal basis for processing is the contract with you — you asked us to write up your lesson — and, for your teacher’s voice on the recording, your responsibility to have their consent.

Children

Lesson Journal is for adults. It is not intended for anyone under 16, and we do not knowingly create accounts for them. If a child has signed up, write to us and we will delete the account.

Changes

If this policy changes in a way that matters — a new processor, a different retention period, anything that widens what we collect — we will email account holders before it takes effect. The date at the top always says when it last changed.