Privacy policy

Finlingo is an educational app for learning financial literacy and preparing for DECA and FBLA competitions. It runs on the finlingo.org website and as a Chrome extension. This policy explains what data each one handles, where it goes, and how to have it deleted.

The short version

• To use the lessons on finlingo.org you create an account with a name, email and password.
• Your progress (lessons, coins, your fish) is saved to your account so it follows you to any device you sign in on. A short summary is shown to a teacher if you join their class.
• Teachers only see students who joined their class with their code.
• We never sell data, show ads, or collect payment information.
• The website counts page views without cookies (see Analytics).

Trying Finlingo without an account

The five practice questions on the finlingo.org home page and the competition prep page work without an account. They only store a count of how many you've tried, in your own browser, so the "free questions left" counter works. Nothing about them is sent to us.

What an account collects

Student, individual, parent and teacher accounts are handled by our backend provider, Supabase. When you sign up we store:

• Account info: your name, email address, the type of account, and a securely hashed password. We never see or store your password in plain text.
• Groups: any class, chapter or family you create or join, and its join code.
• Progress summary (students in a class): lessons completed, day streak, coins, competition-practice totals and accuracy, accuracy by topic, and your fish's look. This is what a teacher sees on their class roster.
• Assignments: if a teacher assigns work, your answers, your score and any written feedback, so both of you can see them.
• Saved progress: your full game state (completed lessons, coins, items, flagged and missed questions, event progress), so you can pick up on another device. Only you can read it.
• Referrals: your referral code and any bonus coins from friends who sign up with it.

A teacher only ever sees this data for members of their own class or chapter. Our database enforces this with row-level security rules, so it doesn't depend on the app's screens hiding anything.

What stays in your browser

A copy of your progress is also kept in your browser's local storage so the app works quickly and offline, along with settings that only apply to that device (sound, reminders) and your sign-in session. Clearing your browser's site data for finlingo.org removes that copy; your account's saved progress is unaffected.

What Finlingo does not do

• It does not sell your data or share it with data brokers.
• It does not show ads or use your data for advertising.
• It does not collect financial or payment information. Coins are a game reward and cost no real money.
• It does not track the websites you visit or your activity on other pages.

Where account data lives

Account data is stored with Supabase, which acts as our data processor and doesn't use your data for its own purposes. See supabase.com/privacy. The website itself is hosted by Vercel.

Password reset

If you request a password reset, Supabase emails you a one-time link to set a new password.

Deleting your account

You can delete your account yourself in the app: Settings → Danger zone → Delete account. It permanently removes your login, saved progress, class memberships and assignment results. A parent or teacher can also ask us to delete a student's account by emailing mvkp.sai@gmail.com.

Analytics

The finlingo.org website uses Vercel Web Analytics to count page views. It is cookieless: it sets no cookies, assigns no persistent identifier, and cannot follow you to other websites. It records the page viewed, the referring page, and coarse device information such as browser, operating system and country. It never records your name, email, progress or answers, and it isn't joined to your account. The Chrome extension doesn't include it.

Fonts

The site loads its fonts from Google Fonts, so your browser contacts Google's servers, which receive your IP address as part of that standard request. See policies.google.com/privacy.

The Chrome extension

The extension saves progress with Chrome's built-in storage API instead of the browser's local storage, and signs in to the same Finlingo accounts. It asks for these permissions:

• storage: to save your progress on your device.
• alarms: to refresh the "keep your streak alive" badge and schedule the optional daily reminder.
• notifications (optional, off by default): only if you turn on the daily reminder, to show a "Question of the Day" notification generated on your device.

It doesn't request access to your browsing history, tabs, or the content of the pages you visit.

Classrooms and children's privacy

Finlingo is built for use in classrooms, with student accounts joined to a teacher's class. Schools and teachers who have students create accounts are responsible for meeting the student privacy laws that apply to them, such as FERPA and COPPA, including getting any parental or district consent those require. A parent who believes their child under 13 created an account without the consent required can email us to have it deleted.

Changes to this policy

If this policy changes, the "Last updated" date above will change too.

Contact

Questions about this policy? Email mvkp.sai@gmail.com.