Legal

Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains what personal data French Bites ("we", "us") collects when you use this website and app (the "Service"), why we collect it, who we share it with, and the choices and rights you have — in line with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Is this the same as the Cookie Policy? Not quite. Our Cookie Policy covers cookies and browser storage specifically. This Privacy Policy is broader — it covers all personal data we process, including account data and learning progress, whether or not a cookie is involved. Read both together for the full picture.

1. Who is responsible for your data

French Bites is a self-serve French verb conjugation learning app. For any privacy question or request, contact us at privacy@frenchbites.app.

2. What we collect

Account data (only if you create an account)

• Email address and password (if you sign up with email — your password is handled by our authentication provider, Supabase, and we never see or store it in plain text).
• Email address, name, and profile picture (if you choose "Continue with Google" — provided to us by Google, only with your permission at sign-in).

Learning data

• Quiz progress, mastered verbs, favorites, and streaks. If you're signed in, this is stored against your account (in our database) so it syncs across devices. If you're not signed in, it's stored only in your browser's local storage on this device.

Analytics data (only if you accept "Analytics" cookies)

• If you opt in via the cookie banner, we use Google Analytics 4 to see which pages and features are used, how long, session/retention patterns, and coarse (country/city-level) location derived from your IP address.
• We do not enable Google Signals, ads personalization, or demographics/interest reporting (age, gender, etc.) — these are switched off both in code (Consent Mode explicitly denies all advertising-related storage) and in our Google Analytics account settings.

Technical data

• Standard web server logs collected by our hosting provider (e.g. IP address, browser type, pages visited) for security and reliability — not used to personally identify you for marketing.
• Cookies and local storage — see our Cookie Policy.

We do not collect payment information (the app is free and has no purchases), precise (GPS-level) location, or any special category of data (health, biometric, etc.), and we do not collect age, gender, or interest-based profiles of our users.

3. Why we process your data

• To provide the Service — create your account, save and sync your learning progress, remember your preferences.
• To keep the Service secure and working — detect abuse, debug errors, maintain uptime.
• With your consent — for any optional cookie category (e.g. analytics), only if you opt in via the cookie banner.

We do not use your data for advertising, and we do not sell your personal data.

4. Who we share data with

We use a small number of service providers ("processors") to run French Bites. They only process data on our behalf:

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. International data transfers

Our service providers may process data on servers located outside your country, including in the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) offered by those providers for transfers of EU/UK personal data.

6. How long we keep your data

Account and learning data are kept for as long as your account is active. If you delete your account (or ask us to), we delete your account data and associated learning progress within a reasonable time, except where we must keep limited records to comply with the law. Data stored only in your browser's local storage stays on your device until you clear your browser data.

7. Your rights

Depending on where you live, you may have the right to:

• Know what personal data we hold about you, and get a copy of it (access / portability).
• Correct inaccurate data (rectification).
• Delete your data or your account (erasure).
• Object to, or ask us to restrict, certain processing.
• Withdraw consent at any time (e.g. by changing your cookie choice).
• (EU/UK) Lodge a complaint with your local data protection authority.
• (California) Know, delete, and correct your personal information, and not be discriminated against for exercising these rights. We do not sell personal information, so there is nothing to opt out of in that respect.

To exercise any of these rights, email privacy@frenchbites.app. We'll respond within a reasonable time frame (typically within 30 days).

8. Children's privacy

The age at which someone can legally consent to their own data processing varies by country — EU law sets a default of 16, but lets individual member states lower it to as young as 13; the US (COPPA) uses 13. Rather than trying to detect which country you're in, we apply a single, more protective rule everywhere: 16.

How this works in practice

• Browsing without an account — Search, Quiz, and Scenario all work without signing in, at any age, with progress saved only on your own device. No personal data is collected.
• Creating an account, age 16+ — you sign up with your own email as normal.
• Creating an account, under 16 — a parent or guardian creates and manages the account on the learner's behalf, using the parent's/guardian's own email. We don't ask for a separate "child" email or date of birth — the account is simply registered by, and belongs to, the consenting adult.

At sign-up, we ask you to confirm — via a checkbox — that you are 16 or older, or that a parent/guardian is creating the account on their own behalf for a younger learner. This is a self-declaration, not an identity check; we do not collect or store a birth date. If a paid plan is introduced in the future, the same registered email and payment method are reused for billing (see our Terms of Service) — so for an under-16 account, the parent who registered is, by construction, also the one paying, and confirms this again at checkout.

If we learn that a child under 13 has provided us with personal data directly (i.e. without a parent/guardian registering on their behalf), we will delete that data promptly. Parents or guardians who believe their child has otherwise provided personal data to us, or who want to review or delete data tied to an account they created, can contact privacy@frenchbites.app.

9. Security

We use industry-standard measures (such as encrypted connections and a reputable authentication provider) to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do. Continued use of the Service after changes means you accept the updated policy.

11. Contact

Questions about this policy or your data? Email privacy@frenchbites.app.