Local First
Study data is stored in your Mac's sandbox by default and works offline. You decide what to export and delete.
Privacy & Security
Your data stays on your Mac.
This is a design constraint, not a toggle. Below, item by item: what we collect, what we don't, and how you stay in control.
Three Guiding Principles
Every specific practice traces back to these three.
Minimum Necessary
Only features that genuinely need a network make requests, and those requests carry only what the current task requires.
Explainable
Every network action is documented, can be turned off at any time, and degrades gracefully rather than breaking.
Data Categories and Handling
Listed by data type: where it is stored, whether it is uploaded, and how long it is kept.
| Data | Where it is stored | Uploaded | Notes |
|---|---|---|---|
| Study records | Local sandbox | An encrypted copy is uploaded only when cloud sync is on | |
| Articles and subtitles | Local sandbox | Backed up with sync; can be turned off separately | |
| Account credentials | System keychain | The app itself never sees your plaintext password | |
| Cloud request content | Not retained | Used only for that generation, never for training | |
| Battle matchmaking data | Server session | Nickname and tier only; no history kept after disconnect | |
| Crash and diagnostic data | Manual export only | Never uploaded automatically; you send it yourself |
What You Control
Every switch lives in Settings, and turning one off comes with a clear note on what changes.
Turn off cloud calls
Local models only, and the app runs fully offline.
Turn off cloud sync
Progress stays on your Mac and can be exported as an archive at any time.
Leave the leaderboards
You can still battle; you just won't appear in public rankings.
Erase all data in one click
Wipes all study data on your Mac and deletes the cloud copy too.
Common privacy questions
Yes. The free edition needs no account for vocabulary, reading, and basic practice. Signing in is only for optional progress sync and cloud model calls.
Yes. Transfer uses TLS, the server stores it encrypted, and the key is tied to your account. Copies are purged within 30 days of account deletion.
No. Neither our own services nor third-party model providers use your study content for training.
Go to Settings › Account › Delete Account and Data, or submit a request on the contact page. We complete it within 7 business days and confirm by email.
Safety first
Keep control in your own hands.
Download and start. No sign-in needed to begin learning.