Privacy Policy
How we handle your personal data and your rights under the EU General Data Protection Regulation (GDPR).
Last updated: 9 June 2026
This Privacy Policy explains what personal data Finnishly ("we", "the service", available at finnishly.xyz) collects, why, how it is used and protected, and the rights you have. We aim to collect as little data as possible and never sell it.
1. Data controller
The controller responsible for your personal data is:
- Joyanta Dey
- Location: Finland
- Contact: joyanta.fi
2. What data we collect
Account data
- Your name (as you provide it)
- Your email address
- An optional avatar (an emoji or image you select)
- A securely hashed password if you register with email (we never store your password in readable form)
If you sign in with Google
When you choose "Sign in with Google", Google shares your basic profile information (name and email address) with us so we can create or identify your account. We do not receive your Google password.
Learning data
- Your progress: words studied, mastery levels, streaks, XP and points
- Practice activity: answers submitted, scores and timestamps
- Lesson progress
Technical data
- A session cookie that keeps you logged in (essential for the service to work)
- Standard server logs that may temporarily include your IP address and browser type, used for security and to keep the service running
3. Why we use your data and the legal basis
- To provide the service (create your account, save progress, show your dashboard) — legal basis: performance of a contract.
- To keep the service secure and working (logs, abuse prevention) — legal basis: legitimate interest.
- Essential cookies to maintain your login session — these are strictly necessary and do not require consent.
We do not use advertising or tracking cookies, and we do not profile you for marketing.
4. Audio (text-to-speech)
To pronounce Finnish words and texts, the app may send the relevant text to a third-party text-to-speech service (Google) to generate audio. Only the word or sentence being played is sent; your account identity is not attached to these requests.
5. Who we share data with
We do not sell your personal data. We share data only with service providers needed to operate Finnishly:
- Google — for "Sign in with Google" and text-to-speech audio.
- Our hosting provider — which stores the database and serves the website.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.
6. How long we keep your data
We keep your account and learning data for as long as your account exists. When you delete your account, your personal data is permanently removed (see section 8). Server logs are kept only for a short period for security purposes.
7. Your rights under the GDPR
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data (you can edit your name and avatar in your profile)
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability — receive your data in a usable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us via joyanta.fi. You also have the right to lodge a complaint with the Finnish supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
8. Deleting your account
You can permanently delete your account and all associated learning data at any time from Profile → Delete account inside the app. This action is immediate and cannot be undone. If you signed in with email, you can also contact us to request deletion.
9. Children
Finnishly is intended for general language learners. It is not directed at children under the age of 15. If you believe a child has provided us personal data, contact us and we will remove it.
10. Security
We use industry-standard measures to protect your data, including hashed passwords and encrypted (HTTPS) connections. No method of transmission or storage is completely secure, but we take reasonable steps to keep your data safe.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the latest version. Significant changes will be communicated within the app.
12. Contact
Questions about this policy or your data? Contact us via joyanta.fi.