Privacy

What is stored, where it lives, who can see it, and how to delete it. Written to be read, not to be survived.

Last updated 10 September 2026.

The short version

There is no advertising, no analytics, no tracking pixels, and no third party buying anything. Alefya does not sell, rent or share personal information. Most people can use the entire app without an account, in which case nothing about them leaves their own device.

If you never sign in

Everything — flashcards, study plan, reading progress, settings — is stored in your browser's own local storage on that one device. It is not transmitted anywhere. Clearing your browser data erases it, which is why the app offers a Backup & Restore panel that hands you the whole thing as text you can keep.

If you do sign in

Accounts exist so your progress follows you between devices. Sign-in is handled by Supabase, which stores your email address and a hashed password. We never see your password.

StoredWhat it is
Email addressYour login, and how a password reset reaches you.
Study progressFlashcards, review schedule, study plan, which texts you have read, settings.
FriendsA display name, and aggregate counts (cards known, minutes studied, streak) shown to people you have added. Only if you use the Friends feature.
Push subscriptionAn anonymous endpoint your browser issues, so a study reminder can reach your lock screen. Only if you turn reminders on.

That is the whole list. No location, no contacts, no device fingerprinting, no advertising identifiers.

Your own API keys

Two features let you paste in a key you obtained yourself. Both are optional, and in both cases the key stays in your browser and is sent only to the company that issued it — it never reaches any server of ours, and it is deliberately excluded from cloud sync.

Ask a TutorYour Anthropic API key. Your question goes directly from your browser to api.anthropic.com. You are billed by Anthropic; we see none of it.
Bible (English)Your Crossway ESV key. Passages are fetched directly from api.esv.org and cached in your browser for your own reading. The ESV text is copyrighted and is never stored by us.

What the app talks to

SupabaseAccounts and progress sync. Only if signed in.
AnthropicTutor questions, using your key. Only if you added one.
CrosswayESV passages, using your key. Only if you added one.
YouTubeEmbedded videos, through youtube-nocookie.com — the privacy-enhanced player. Nothing is downloaded or re-hosted.
GitHub PagesServes the site itself.

Children

Alefya is not directed at children under 13 and does not knowingly collect their information.

Deleting your account

Email support@alefya.me from your account address and everything associated with it is deleted — progress, profile, friend links, push subscription. No retention period, no "anonymised copy" kept for analytics. You can also export everything first from the Backup panel in the app, or simply sign out, which leaves your data on your own device and untouched in the cloud.

Changes

If this page changes materially, the date at the top changes and the app says so.

Contact

support@alefya.me