Privacy Policy for Vocabulary Trainer Shchebitka

This Privacy Policy explains how Shchebitka collects, uses, stores, and protects information when you use it through:

• the Vocabulary Trainer Shchebitka browser extension
• AI assistants and clients, including ChatGPT, Claude, and other supported platforms
• integrations such as Actions, tools, connectors, and MCP-compatible apps or servers
• the related Shchebitka services, APIs, and website

Shchebitka is designed to help users build and manage vocabulary for learning foreign languages. Shchebitka is operated by Olha Shesternyak as an individual developer. By using Shchebitka, you agree to this Privacy Policy.

This policy applies to information processed by Shchebitka when requests are sent to Shchebitka through the browser extension, AI assistants, client applications, Actions, tools, connectors, MCP integrations, or direct API usage.

It does not govern how third-party AI platforms, client applications, or service providers collect, store, or use data on their own systems. Those services are governed by their own terms and privacy policies.

3.1 Account and Authentication Information

When you register, sign in, or connect your account, we may collect:

• Email address
• First name and last name, when provided during account registration
• Authentication identifiers or account IDs

Authentication credentials such as passwords are handled by our authentication provider and are not stored directly by Shchebitka.

This information is used for account creation, authentication, account linking, and personalization.

3.2 Information Sent Through AI Integrations

When you use Shchebitka through an AI assistant, client integration, Action, tool, connector, or MCP-compatible app, we may receive:

• The specific request content needed to fulfill your action or tool call
• Structured parameters submitted by the integrating platform or client to our service
• Metadata needed to process the request, such as timestamps, request identifiers, and basic technical logs

We only process the data reasonably necessary to provide the requested functionality.

3.3 User-Generated Content

We may collect and store content you create or submit, including:

• Vocabulary lists
• Words, translations, transcription, definitions, and context
• Sample questions and sample answers
• Notes, examples, and other learning content
• Preferences related to your learning experience

3.4 Browser Extension Data

When you use the Vocabulary Trainer Shchebitka browser extension, we may process:

• Text you explicitly select on a webpage when you choose the extension action to add a word
• Limited surrounding page context needed to save the selected word or phrase with context
• Account and session-related data stored in browser extension local storage, such as sign-in session state, token-related session data, the selected active vocabulary, and recent extension action results

The browser extension sends relevant data only to Shchebitka services as needed to provide the requested functionality, including shchebitka.ai, auth.shchebitka.ai, and api.shchebitka.ai.

3.5 Data Returned Through MCP Tools and APIs

When Shchebitka returns data through MCP tools, APIs, or related integrations, the response may include only the data needed for the requested vocabulary action, such as:

• Vocabulary identifiers and vocabulary names
• Word identifiers, vocabulary identifiers, and deleted word identifier lists when a delete action is requested
• Words, translations, transcription, definitions, context, sample questions, and sample answers
• Language-related fields such as source language and translation language when available
• Result-summary fields such as total word counts and short confirmation messages

Shchebitka is designed not to return passwords, access tokens, or other authentication secrets in tool or API responses.

3.6 Usage Data

We may collect limited usage data such as:

• Interaction timestamps
• Feature usage, such as vocabulary creation, updates, and deletions
• Error and diagnostic logs

This data helps us operate, maintain, and improve Shchebitka.

We use the information we collect to:

• Create and manage user accounts
• Authenticate users and linked integrations securely
• Keep the browser extension signed in and restore the selected active vocabulary between sessions
• Process requests coming from AI assistants, tools, Actions, connectors, and MCP integrations
• Save user-selected words and nearby webpage context from the browser extension when you explicitly request that action
• Store and organize vocabulary data
• Personalize the learning experience
• Maintain service security, reliability, and fraud prevention
• Improve and optimize Shchebitka
• Communicate important service or account updates, if applicable

We do not sell, trade, or rent your personal information.

We may share data only in the following cases:

• With service providers necessary to operate the system, such as hosting and authentication providers
• With platform or integration providers when required for the relevant assistant or integration to function as designed
• If required by law, regulation, legal process, or enforceable governmental request
• To protect rights, safety, security, or to prevent fraud and abuse

• Your data is stored using reasonable industry-standard safeguards.
• Personal data is retained as long as necessary to provide the service, maintain your account, comply with legal obligations, or resolve disputes.
• Vocabulary and learning data is retained to maintain your progress unless you delete it or request deletion where applicable.
• You may request deletion of your account and associated data at any time, subject to any legal or operational retention requirements.

We implement reasonable technical and organizational safeguards, including:

• Secure authentication managed through a dedicated identity and access management system (Keycloak)
• Encrypted data transmission where applicable
• Access controls designed to limit unauthorized access
• Logging and monitoring for operational and security purposes

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Shchebitka may rely on third-party or self-hosted infrastructure components to operate effectively, including:

• AI assistant and client platforms, when you choose to use Shchebitka through them
• Hosting and infrastructure providers
• Keycloak for authentication and identity management
• Browser extension platform services provided by supported browsers where needed for extension functionality

Authentication credentials are managed by our authentication system and are not stored directly by Shchebitka.

When you use the browser extension, limited page content that you explicitly select, related context, and extension session data may be processed to authenticate you, retrieve vocabularies, and save words to your account.

When you use Shchebitka through a third-party AI assistant or client, information may also be processed by that provider or related platform components under their own policies.

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us using the details below.

Shchebitka is not intended for children under the age of 13, or the applicable minimum age in your jurisdiction. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Changes will be posted with an updated effective date. Continued use of Shchebitka after changes take effect constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or your data, please contact:

• Operator: Olha Shesternyak
• Shchebitka Support Team
• Email: [email protected]

By using Shchebitka through the website, browser extension, API, AI assistant, client integration, Action, tool, connector, or MCP-compatible app, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.