Privacy Policy

1. Introduction

Welcome to Aha Translator ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and companion website (together, the "Service").

By installing and using Aha Translator, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register for an account, we collect your email address for authentication and account management purposes.
• Learning Data: Words and sentences you save for learning purposes, including translations you request and content you choose to study.
• Settings Preferences: Your extension preferences and customization settings.
• Paid Access: If you subscribe to Pro (monthly or yearly auto-renewal), we store your paid-access status, plan, and current period end. We do not collect or store your card number or other payment credentials — see "Payments" below.

2.2 Information Automatically Collected

• Feature Usage: Each time you use a feature (dictation writing, page translation, parallel reading, sentence breakdown, or Ask AI), we record which feature was used, when, whether it succeeded, and whether your paid access was active at that moment. These records are linked to your account — they are not anonymous.
• Page Address: When you use a feature on a web page, we record the full address of that page, including its path and query string. We use this to understand what kinds of content our users read, so we can prioritise the right improvements. Before the address leaves your browser, we remove the values of parameters commonly used to carry credentials (such as token, access_token, api_key, secret, password, session and email), and we discard the URL fragment entirely. We do not record addresses of pages you visit while not using a feature, and we do not record anything from browser-internal or local pages.
• Technical Data: Browser type, extension version, and general location data (country/region level) for service optimization.

We do not use this information for advertising, and we do not sell it or share it with third parties for their own purposes.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our translation and learning services
• To personalize your learning experience and track your progress
• To synchronize your data across multiple devices
• To communicate with you about your account and our services
• To detect, prevent, and address technical issues
• To comply with legal obligations

4. Data Storage, Security and Retention

Your data is stored securely on our servers using industry-standard encryption protocols. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Retention. Your account information, saved words and sentences, and settings are kept for as long as your account exists. Detailed usage records — including the page addresses described in section 2.2 — are automatically deleted after 90 days. Beyond that point we keep only aggregated daily counts (how many times each feature was used), which contain no page addresses. If you delete your account, your usage records are unlinked from your identity; the remaining aggregated counts can no longer be traced back to you.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information in the following limited circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our Extension and providing services (e.g., cloud hosting, AI translation services).
• Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.

6. Third-Party Services

We rely on the following third-party service providers to operate the Service. Each processes only the data necessary to perform its function on our behalf:

• Supabase: account authentication and database hosting for your account, learning data, and settings.
• OpenRouter, Groq, and ElevenLabs: AI-powered dictation checking, translation, sentence analysis, and optional text-to-speech playback of words or sentences. Text you submit is sent to these providers to generate a result and is not retained by us beyond what is necessary to provide the feature.
• Resend: delivery of account verification and login emails.
• Waffo Pancake: our payment processor for Pro subscriptions. Waffo acts as the merchant of record for your purchase, meaning Waffo — not us — collects, processes, and stores your payment details (card number, billing address, etc.) and handles billing, invoicing, tax, refunds, and automatic renewal. We only receive your paid-access status and period dates from Waffo, never your raw payment details.
• Google: Google Analytics 4 on our website (measurement ID G-SCTFQGDLF4), Google Ads conversion tracking to measure our advertising, and Google Sign-In if you choose to sign in with a Google account. Analytics and advertising cookies are controlled by the cookie banner; how that works depends on where you are, as described in 'Cookies and Tracking' below. The Chrome extension itself does not use Google Analytics or Google Ads.
• Cloudflare: hosts our website and API (CDN, DNS, and related security). Cloudflare may process technical data such as IP address as part of delivering the Service.

Additionally, our Extension may interact with websites you visit to provide translation services. We only process text content that you explicitly request to translate and do not collect or store website content beyond your immediate translation requests. We do, however, record the address of the page on which you used a feature — see section 2.2 for what that includes, how credentials are stripped from it, and section 4 for how long it is kept.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can view your saved learning data and settings through the Extension interface.
• Correction: You can update your account information and preferences at any time.
• Deletion: You can delete your account and associated data by contacting us at the email provided below. This includes the usage records described in section 2.2; you can also ask us to delete those records on their own while keeping your account.
• Data Export: You can request a copy of your personal data, including your usage records, by contacting us.
• Opt-Out: Usage records are currently part of how the service operates and cannot be switched off separately. You can limit what is recorded by not using a feature on a given page, and you can ask us to delete your usage records at any time using the contact address below.

8. Children's Privacy

Our Extension is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Extension, you consent to the transfer of your information to these countries.

We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

10. Cookies and Tracking

This section covers both our website (ahatranslator.com) and the Chrome extension.

Website. We use Google Analytics 4 (measurement ID G-SCTFQGDLF4) to understand how the site is used, and Google Ads conversion tracking to measure how many people install the extension or subscribe after seeing one of our ads. Consent works differently depending on where you are (Google Consent Mode v2). In the European Economic Area and the United Kingdom, analytics and advertising storage are denied by default and nothing is stored until you accept the cookie banner. Elsewhere, they are enabled by default and you can reject them at any time from the same banner; rejecting stops all further collection and clears the Google cookies already in your browser. We also use Google Sign-In if you choose that login method, and Cloudflare to deliver the site.

Extension. The extension does not use traditional cookies, Google Analytics or Google Ads. It uses local storage and Chrome storage APIs to save your preferences and learning data locally on your device. This data remains on your device unless you choose to sync it with your account. The first time you install it, it opens our onboarding page in a new tab; that page is part of our website and is covered by the section above.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: