Privacy Policy

Who we are

Timirti (timirti.com) is a language-learning platform for the Habesha diaspora. The service is operated by the individual identified in our Site Notice. References to “we”, “us”, or “Timirti” in this policy refer to that operator.

We take your privacy seriously. We do not sell your data, run advertising networks, or use tracking cookies. The only personal data we collect is what is strictly necessary to provide the service.

Data we collect

Account data

When you create an account, we collect your email address and a hashed version of your password. We never see your password in plain text. Raw passwords are never stored or logged anywhere.

Learning progress

When you are signed in, we store your learning progress, which sound families you have completed and your quiz scores, so you can resume where you left off across devices.

Usage data

If you click “Accept all” on the cookie banner, we load Google Analytics 4 to collect anonymised usage statistics, pages visited, session duration, and general geographic region (country level). No IP addresses are stored. If you choose “Essential only”, no analytics tracking occurs.

Cookies

We use essential authentication cookies and, with your consent, Google Analytics cookies. See our Cookie Policy for details.

How we use your data

• To create and authenticate your account.
• To save and sync your learning progress across sessions.
• To send the account confirmation email required at sign-up.
• To respond to support requests if you contact us.

We do not use your data for marketing, profiling, or any purpose beyond the above.

Legal basis (GDPR)

For users in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): account data and progress data are necessary to operate the service you signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR): keeping basic server logs for security and abuse prevention.

Data processor, Supabase

Account authentication and data storage are provided by Supabase, Inc. (San Francisco, CA, USA). Supabase acts as a data processor on our behalf and processes your data only according to our instructions. Supabase is certified under the EU–US Data Privacy Framework and provides appropriate safeguards for international data transfers.

You can read Supabase's privacy policy at supabase.com/privacy.

Data retention

We keep your account and progress data for as long as your account is active. If you delete your account, all associated personal data is permanently and immediately erased (GDPR Article 17).

Your rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix inaccurate data.
• Erasure: request deletion of your account and all associated data.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interests.

To exercise any of these rights, email us using the address in our Site Notice. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

Children

Timirti is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to this policy

If we make material changes, we will update the date at the top of this page. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

Contact

Questions about this policy? See the contact details in our Site Notice.