Privacy · Ara Reo

Short version: we keep what we need to make Ara Reo work, nothing else. We don't sell your data, we don't run analytics that track you across the web, and we never store the audio of you practising.

What we collect

Your email: to sign you in and send you sign-in links.
Your display name: only what you provide on the account page.
Your reo level: the answer you give on the intro screen ("just starting", "some kupu", "conversational", or "confident"). This shapes which kupu we put in front of you.
Optional answers: age band, gender, region, ethnicity, and what's drawing you to te reo. Every one of these is optional and skippable; we only record what you choose to share. Used in aggregate to understand who Ara Reo is reaching.
Practice activity: which kupu you've practised, your self-rating, and (if available) the pronunciation score. We do not store the audio recording itself; it plays back and is discarded once we have a score.
Hashed device fingerprints: the SHA-256 of your IP and user-agent at session issue time, used for security.

Anonymised analytics (rolled-up usage stats, not linked to your identity) are off by default. You can turn them on or off any time from your account page.

What we don't collect

Your audio recordings.
Your full IP address (only a hash).
Cross-site advertising or analytics identifiers.

Who sees data about you

You, on this site.
Mailgun, when we send you a sign-in email.
Te Hiku Media, when we send your audio to Papa Reo for pronunciation scoring. They have their own privacy policy at papareo.io/privacy.
Google, only if you sign in that way. The login flow returns your email and name to us.

Your rights

You can export everything we have on you from the account page. You can also delete your account from there. We soft-delete profile data and revoke every session immediately. Audit records are retained for support and security investigations.

Contact

Questions or requests? You can get in touch.