Privacy Policy
Last updated: September 27, 2026
Flumi is a language-learning site. This policy explains what we collect, why, and what you can control. We have tried to keep it specific rather than exhaustive — where we say we do not collect something, we mean it.
What we collect
If you browse without an account
You can read every grammar lesson and complete every exercise without signing in. If you accept analytics cookies, we record which lessons and exercises you view and how they go — see the table below. If you decline, we do not store analytics cookies on your device.
If you create an account
Accounts are handled by Kinde, our authentication provider. They process your email address and any profile details you provide in order to sign you in. We store your learning progress against your account: which exercises you have attempted and passed, your scores, your saved vocabulary and your study sessions.
If you use Learn from Content
When you submit a link or text to study from, that content is processed to extract vocabulary and generate exercises. This involves sending the content to third-party processing services. Do not submit content you are not comfortable sharing with those services.
If you use voice input
When you tap the microphone in the AI tutor, your microphone audio is streamed to a third-party speech-recognition service and turned into text. Recording only happens while you hold a session open, and we do not keep the audio. The text appears in the message box for you to read and edit — it becomes a tutor message only when you choose to send it.
If you send feedback
When you use “Send feedback” in your account, we store your message and its category against your account, together with the page you were on, your browser and window size, your app and learning languages, and the app version, so we can reproduce and fix what you report. Only the Flumi team reads it.
Analytics
With your consent, we use Google Analytics to understand whether learners finish setup, which learning activities are useful, and where a feature is difficult to use, so we can improve it. Analytics storage is off until you accept, and Google Consent Mode keeps that storage denied if you decline.
These are the only fields our analytics events carry:
- For each page you view, the language that page is about, or on your dashboard the language you are learning (for example
French) - The content language and CEFR level (for example
en,a1) - Which lesson or exercise, by internal identifier
- The exercise format, and where you navigated from
- How many questions you got right, out of how many, and how long you spent
- Whether a new account was created, whether setup completed, and which learning path you chose — never your account details
- Whether you started or finished a lesson, which one, your final score and how long it took — never your answers
- Your daily plan's total, completed and remaining item counts — never the words in the plan
- Which single next step your dashboard suggested (for example reviewing due words) — never the words or mistakes behind it
- Which guided-path step type or time budget you selected, whether you opened its tutor, streak or feature panels, and whether the selected path finished — never the words, mistakes or tutor question
- Whether you started or completed a due or voluntary study session, how many words it contained, whether it was resumed, and how many server schedule updates succeeded
- Whether you viewed the Mistake Notebook or started targeted practice, where you started it from, the language and broad mistake type, and item counts — never the mistake, prompt, word or answer
- Whether you analyzed a video or text, how many words were found, and how long processing took — never the URL, title, transcript, pasted text or extracted words
- Whether an on-demand translation or sentence check completed, or a server-enforced allowance was reached, and the remaining allowance count — never the word, sentence, result, retry key or share link
- For subscriptions and paid features: which feature or plan screen you used, whether secure checkout started, the billing period when known, a remaining quota count, and the type of tutor context — never payment details or tutor messages
- For goals or referrals when available: numeric goal progress and streak length, or the surface where you shared — never a referral or invitation code
- Whether an error page was shown
- Whether you marked a lesson or exercise helpful or reported a problem with it, and which category of problem you picked (for example
typo) — never the note you wrote - Which sign-in reminder was shown or used, whether you chose account creation or sign-in, and whether the saved action completed — never your account details
We never send your answers, imported content, tutor messages, referral codes, the notes you write when reporting a problem, your marketing choice, your name, your email address, payment details, or any other personal detail to analytics. We do not use analytics for advertising, and we do not run advertising or remarketing tags of any kind.
Service email
If you have an account we send you email about that account: a welcome message when you register, and your results when you finish a placement test. These are part of the service, so they are not something you opt into — but we stop sending to any address that bounces or reports us as spam.
Marketing email
Study reminders when reviews are waiting for you, a weekly summary of your learning, and occasional announcements about Flumi are optional. We send them only if you have explicitly opted in — by ticking the box during setup, or by turning on Email preferences in your profile. Creating an account, finishing setup, or using the site does not opt you in, and the box is never ticked for you.
You can withdraw that consent at any time, and withdrawing is as easy as giving it: turn the switch off in your profile, or use the unsubscribe link in any marketing email — that link works without signing in. Withdrawing stops the marketing email only; service email continues.
Who sends it, and what we keep
We use Resend to deliver our email. Resend processes your email address on our behalf for that purpose, and also stores the list of people who have opted into marketing so we can send announcements to it.
We keep a record of the lifecycle email we have sent you, and of suppression signals — bounces, spam complaints and unsubscribes. We need those to avoid emailing the same thing twice, to stop emailing an address that is not working, and to show that an unsubscribe was honoured.
Cookies
| Purpose | Set by | Needs consent |
|---|---|---|
| Keeping you signed in | Kinde | No — strictly necessary |
| Remembering your consent choice | Flumi | No — strictly necessary |
| Analytics | Google Analytics | Yes |
Declining analytics does not sign you out and does not affect any lesson or exercise.
Your analytics choice
Your rights
If you are in the UK or the European Economic Area, you have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive a copy in a portable format. You can withdraw your analytics consent at any time using the buttons above, and your marketing-email consent at any time from your profile or an unsubscribe link — withdrawing either is as easy as giving it.
You also have the right to complain to your local data protection authority.
Contact
For any privacy question, or to exercise any of the rights above, email [email protected].
Changes
If we change how we use your data, we will update this page and the date at the top. Material changes to analytics will re-ask for your consent.