Outwordly

Effective date: September 3, 2026

Outwordly helps you learn a language by trying to express your own thoughts, unlocking the language you need, and recalling it from memory. This Privacy Policy explains what information we use, why we use it, and the choices you have.

1. Who is responsible for your information?

The controller responsible for your personal information is:

Byron Bay Group LLC
hello@outwordly.app
30 N Gould St Ste R, Sheridan, WY 82801

In this policy, “Outwordly,” “we,” “us,” and “our” mean Byron Bay Group LLC.

2. Where this policy applies

This policy applies to the Outwordly website, the Outwordly Chrome extension, your Outwordly account, language-practice features, support, feedback, subscriptions, and related services.

3. Information we use

Account and sign-in information

When you sign in with Google through Supabase Auth, we receive the account information needed to identify your Outwordly account, such as your name, email address, provider account identifier, and Outwordly user ID.

We use this information to authenticate you, restore your account, keep your data associated with the right person, and send replies to support requests.

Your learning profile

We store the choices you make during onboarding and in settings, including your native or strongest language, learning language, proficiency level, active practice days, and reminder preferences.

Your practice content

To provide the Write → Learn → Recall experience, we may store:

unfinished drafts and active-session progress;
writing you submit, including text inside brackets and the meaning you provide for missing expressions;
corrections, corrected versions, explanations, examples, and saved expressions;
session dates, duration, language, proficiency level, and completion state;
recall transcripts and expression-by-expression recall results; and
practice history and progress.

This content can include personal information because it may describe your life, opinions, relationships, work, interests, or experiences. Please do not include information that you do not want processed by the service.

Recall audio

When you use Recall, the extension temporarily records audio in the current session so it can be transcribed and evaluated. The audio is kept in the extension only while the session is open and is deleted from the extension when the session finishes. Outwordly does not store recall audio in Supabase Storage.

To provide transcription and recall evaluation, the recording is sent through our backend to our transcription and evaluation provider. The resulting transcript and recall results may be saved with the completed session. Provider handling and retention are also governed by that provider’s terms and privacy documentation.

You control whether to start a recording. You can also use any written alternative the product makes available instead of recording.

Subscription and billing information

If you subscribe, Stripe processes your payment details. Outwordly receives billing and subscription information needed to provide access and manage your membership, such as Stripe customer, checkout, price, cohort, subscription, payment-status, cancellation, and billing-period identifiers.

Outwordly does not receive or store your full card number or card security code. Stripe’s privacy policy and terms apply to Stripe’s processing of payment information.

Support and feedback

If you contact us, we may store your account email address, subject, message, status, date, and the technical details you choose to include. Support diagnostics may include your app version, browser, platform, current screen, and an error summary.

If you submit product feedback, we may store the feedback type, title, description, technical context, and an optional screenshot. Feedback screenshots are stored in our Supabase-backed service. We may publish a suggestion in the feedback area after removing or avoiding personal identifiers.

Installation, security, and technical information

The extension creates an installation identifier. Our backend uses a one-way hash of that identifier, together with account information, to enforce the introductory-trial rules and help prevent repeated trials through account switching or abusive behavior.

The extension also stores information locally in Chrome storage, such as cached account and learning data, active-session recovery data, pending sync work, authentication handoff state, session tokens, notification scheduling data, and current-session recall audio. Local copies may remain after you sign out unless they are removed by the extension, Chrome, or you clear the extension’s data.

Our hosting and security providers may also process ordinary technical information needed to deliver and protect the service, such as request time, IP address, browser or device information, and error or security records.

4. What the extension does not collect

Outwordly is designed for its own practice interface. It does not intentionally collect your browsing history, the URLs you visit, cookies, passwords, or the contents of ordinary web pages. It does not use your browsing activity for advertising.

The extension’s Chrome permissions support its interface, local storage, Google sign-in, reminders, alarms, and side-panel behavior. It does not use those permissions to sell your information or build an advertising profile about you.

5. Why we use your information

Depending on the situation, we use your information to:

provide language practice, corrections, unlocked expressions, transcription, and recall evaluation;
save and restore your profile, unfinished sessions, completed sessions, and learning progress;
authenticate your account and prevent unauthorized access;
provide free-trial access, enforce trial limits, verify subscriptions, display available plans, and manage cancellation or resumption;
process support requests, feedback, bug reports, and screenshots;
keep the service reliable, secure, and resistant to fraud or abuse;
understand failures and improve the product using technical and aggregated information; and
comply with legal obligations and protect the rights, safety, and property of Outwordly, our users, and our providers.

We do not sell your personal information. We do not use your practice content or Google account data for third-party advertising. We send only the information reasonably needed for the feature you request to the providers described below.

Legal bases where data-protection law requires them

Contract: creating and securing your account, saving your profile and practice, providing the service, and managing a paid membership;
Legitimate interests: preventing repeated trials and abuse, securing the service, troubleshooting, supporting users, and improving reliability;
Legal obligation: keeping billing, tax, accounting, and other records required by law; and
Consent or your requested action: using optional microphone-based Recall and any other feature for which the law requires consent.

6. AI processing

Outwordly uses OpenAI services to generate writing feedback, transcribe recall audio, and evaluate recall. The text or audio needed for the requested operation may be sent to OpenAI through our backend, along with limited learning context such as the languages and proficiency level involved.

The AI output may be incomplete or incorrect. We use it to provide a learning aid, not as a substitute for a teacher, professional translation, or any other professional service.

We do not authorize AI providers to use your practice content for unrelated advertising. Provider retention and processing are governed by the applicable provider terms, settings, and agreements. Outwordly’s API requests ask OpenAI not to store response state where that option is available, but this does not override provider security, abuse-monitoring, or legal-retention practices.

7. When we share information

We share information only as needed to operate, secure, and support Outwordly:

Supabase: authentication, database storage, and feedback-screenshot storage;
OpenAI: writing feedback, transcription, and recall evaluation;
Stripe: checkout, subscriptions, billing status, and customer billing management;
Google: authentication and the sign-in flow you request;
Hosting and infrastructure providers: delivery, storage, monitoring, and security for the website and backend; and
Authorities or advisers: when required by law, to enforce our terms, investigate abuse, or protect people and property.

We may transfer information as part of a merger, acquisition, financing, reorganization, or sale of all or part of the service. If that happens, we will require the recipient to handle information consistently with this policy where the law requires it.

We do not sell or rent your information, and we do not share it with advertisers.

8. International processing

Outwordly and its providers may process information in countries other than the country where you live, including the United States. Where applicable law requires safeguards for an international transfer, we will use an approved transfer mechanism or another lawful safeguard.

9. How long we keep information

Profile, practice content, saved expressions, and completed-session history: while your account is active and for as long as reasonably needed to provide the service, resolve disputes, prevent abuse, meet legal duties, or maintain secure backups.
Active-session data: while it is needed to resume or complete the session. After a session is completed, the active-session record is removed.
Recall audio: temporarily in the extension during the current session; deleted from the extension when the session finishes and not stored in Supabase Storage by Outwordly.
Authentication and local cache data: until it expires, you sign out, the extension removes it, or you clear the extension’s data.
Billing records: for as long as needed to provide the membership, handle accounting, resolve disputes, and comply with tax or legal obligations.
Support and feedback: for as long as needed to respond, improve the service, maintain an audit trail, and address legal or security matters.
Security and technical records: for as long as reasonably needed to keep the service safe and reliable.

When information is no longer needed, we delete it, anonymize it, or securely isolate it, subject to legal and backup-retention requirements.

10. Your choices and rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information. You may also have the right to object to or restrict certain processing, withdraw consent where processing relies on consent, and complain to a data-protection authority.

To make a request, email hello@outwordly.app with the subject “Privacy request.” We may ask for information needed to verify that you control the relevant account. We will respond within the time required by applicable law.

For an export request, we will provide the account profile, completed sessions, saved expressions, and other available Outwordly learning data in a commonly used format such as JSON or CSV. For a deletion request, we will remove the Outwordly profile, practice sessions, saved expressions, active session, and membership data where legally allowed. Stripe and other providers may retain records they are legally required to keep. We may also need you to sign out and clear the extension’s local storage because local browser data cannot always be removed remotely.

You can also:

sign out of the extension;
stop using the microphone and delete an unfinished session from the extension where the product provides that control; and
manage or cancel a paid membership through the Stripe billing portal.

Signing out does not automatically delete information already saved to your Outwordly account. Email us if you want to request deletion of account data.

California and similar state privacy rights

Where applicable, you may have rights to know what personal information we collect, request access or deletion, correct inaccurate information, obtain a portable copy, and avoid discrimination for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising. We do not use sensitive information for purposes beyond providing, securing, and supporting Outwordly.

11. Children

Outwordly is not directed to children under 13. You must not use Outwordly if you are under 13, or under a higher minimum age required where you live. If you believe a child has provided personal information to us, contact hello@outwordly.app.

12. Security

We use reasonable technical and organizational measures intended to protect your information, including HTTPS in production, authenticated access, database access controls, and keeping provider secrets on the backend. No service can guarantee absolute security. Please choose carefully what you include in writing, brackets, support messages, screenshots, and recordings.

13. Changes to this policy

We may update this policy when Outwordly changes or when the law requires it. We will update the effective date and, where appropriate, provide additional notice. Your continued use of Outwordly after an update means the updated policy applies from its effective date.

14. Contact

For privacy questions or requests, contact: