besedaOpen the course

Privacy policy

Last updated 28 September 2026

What Beseda keeps about you, why, and what you can do about it.

Who is responsible for your data

Beseda is operated from the United Kingdom and is the controller of your personal data. To contact us about your data, use the form on the Support page.

What we collect

  • Progress on your device. Lessons finished, XP, streak, the review schedule for each word and your settings are saved in your browser.
  • Your account. To use the course you create an account with your email address and a password, or with Google. A password is stored only in scrambled (hashed) form by our sign-in provider, so nobody can read it, us included. With Google, Google tells us your email address and name. If you send a support message without an account, we create an anonymous one (a random ID) to hold it, and delete that ID after 30 days.
  • Your answers. What you typed or picked in each exercise, which exercise it was and whether it was right, and the lessons you finish.
  • What you send us. Problem reports and support messages, including any email address you put in them.
  • Emails we send you. Only a link to reset your password, when you ask for one.
  • Technical data. Our hosting provider processes your IP address and browser details to deliver the site and keep it secure. We count page views with Vercel Web Analytics, which uses no cookies and does not follow you across other sites.

We do not show ads, we do not sell your data, and we do not use tracking cookies.

Why we use it

To provide the service you ask for (saving and syncing your progress, signing you in), and for our legitimate interests in improving the lessons (answers show us which questions confuse people), keeping the service secure and understanding how many people use it. We use what you send us to reply to you.

Who processes it for us

  • Supabase: our database and sign-in service, hosted in the European Union (Ireland). It also sends password reset emails.
  • Google: only if you choose Continue with Google, to sign you in.
  • Vercel: hosting and page-view counts. Vercel may process data in the United States and elsewhere, under standard contractual safeguards.

Lesson audio is recorded in advance, and our fonts are served from our own site, so neither sends your data anywhere.

How long we keep it

Data on your device stays until you reset it in Settings or clear your browser. Account data (progress, answers, reports and messages) is kept for as long as the account exists. Delete your account in Settings and it is removed from our database straight away, with everything saved to it. Support messages sent without an account are kept until we have dealt with them; ask us to delete one.

Cookies and local storage

Beseda sets no advertising or tracking cookies. It uses your browser's local storage for your progress, your settings and your sign-in session.

Your rights

You can delete your account and all its data yourself at any time: Settings, then Delete account. You can also ask for a copy of your data, ask us to correct it, object to or restrict how we use it, and ask for it in a portable format. Use the form on the Support page. You can also complain to the Information Commissioner's Office (ico.org.uk).

Children

Beseda is for people aged 16 or over. We do not knowingly collect data from children under 16; if you think a child has used it, contact us and we will delete their data.

Changes

If we change this policy we will update this page and the date at the top.