Privacy Policy

Who we are

Timirti (timirti.com) is a language-learning platform for the Habesha diaspora. The service is operated by the individual identified in our Site Notice. References to “we”, “us”, or “Timirti” in this policy refer to that operator.

We take your privacy seriously. We do not sell your data, run advertising networks, or use tracking cookies. The only personal data we collect is what is strictly necessary to provide the service.

Data we collect

Account data

When you create an account, we collect your email address and a hashed version of your password. We never see your password in plain text. Raw passwords are never stored or logged anywhere.

Learning progress

When you are signed in, we store your learning progress, which sound families you have completed and your quiz scores, so you can resume where you left off across devices.

Onboarding preference

After you create an account, we ask an optional question: who are you learning for (yourself, a partner, a friend, a child, or someone else). This answer is stored on your profile and helps us understand our community. You can skip the question, and it does not affect your lessons.

AI-generated scenarios

If you use the scenario generator in your dashboard, we store the learning scenarios you create (language, level, topic, and the generated lesson content) so you can revisit them. This data is linked to your account.

Newsletter subscriptions

If you subscribe to our newsletter, we collect your email address and an optional language preference (Tigrinya or Amharic). You can unsubscribe at any time via the link in every email or on the unsubscribe page.

Teacher directory applications

If you apply to be listed as a teacher, we collect the information you provide in the application form: name, email, languages taught, teaching format, a short bio, hourly rate, booking URL, WhatsApp number, and location. Published teacher profiles are publicly visible on the directory. Your email address is never published — it is used only to contact you about your application.

Usage data

If you click “Accept all” on the cookie banner, we load Google Analytics 4 to collect anonymised usage statistics, pages visited, session duration, and general geographic region (country level). No IP addresses are stored. If you choose “Essential only”, no analytics tracking occurs.

Cookies

We use essential authentication cookies and, with your consent, Google Analytics cookies. See our Cookie Policy for details.

How we use your data

• To create and authenticate your account.
• To save and sync your learning progress across sessions.
• To send the account confirmation email required at sign-up.
• To send the weekly newsletter, if you subscribe.
• To review and publish teacher applications on the public directory.
• To respond to support requests if you contact us.

We do not use your data for marketing, profiling, or any purpose beyond the above.

Legal basis (GDPR)

For users in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): account data and progress data are necessary to operate the service you signed up for.
• Consent (Art. 6(1)(a) GDPR): newsletter subscriptions, analytics cookies, and teacher directory applications are processed based on your explicit consent. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): keeping basic server logs for security and abuse prevention.

Data processor, Supabase

Account authentication and data storage are provided by Supabase, Inc. (San Francisco, CA, USA). Supabase acts as a data processor on our behalf and processes your data only according to our instructions. Supabase is certified under the EU–US Data Privacy Framework and provides appropriate safeguards for international data transfers.

You can read Supabase's privacy policy at supabase.com/privacy.

Data retention

We keep your account and progress data for as long as your account is active. If you delete your account, all associated personal data is permanently and immediately erased (GDPR Article 17).

Newsletter subscriptions are retained until you unsubscribe. Teacher applications that are not published are deleted after 12 months; published profiles are removed on request or when archived.

Your rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix inaccurate data.
• Erasure: request deletion of your account and all associated data.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interests.

To exercise any of these rights, email us using the address in our Site Notice. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

Children

Timirti is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to this policy

If we make material changes, we will update the date at the top of this page. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

Contact

Questions about this policy? See the contact details in our Site Notice.