Privacy policy
Last updated: 25 October 2026
This policy explains what personal data the Aguga app and website (“Aguga”, “we”, “us”) collect, why, and what you can do about it. We keep it short because we collect little: only what is needed to give you an account and keep your learning progress.
Who we are
Aguga is developed and run by Sarkhan Rasullu, an individual developer based in Azerbaijan, who is responsible for your data (the “data controller”). Contact: support@aguga.app.
The data we collect
Your account
- Email address: to sign you in, confirm your account and send you codes.
- Password: stored only as a secure one-way hash (scrypt); nobody, including us, can read it.
- Confirmation and password-reset codes: stored as hashes for a short time, with the time they were sent and the number of attempts, to keep your account safe.
Your settings
- The language you speak and the language you learn, your level, lesson size, chosen topics, daily goal and whether sounds are on.
Your learning progress
- Which words you are learning or already know, when you learned them, whether your answers were right, when each word is due for practice, and the days you studied (for your streak).
Your reports
- When you report a problem with a word (its picture, meaning or pronunciation), we store which word it was, the reason you chose and any details you write, so we can check and fix it.
Technical data
- When the app talks to our server, the server receives your IP address and basic request details. We use them only to deliver the service and to protect it against abuse (for example, limiting how many sign-in attempts can be made). Error logs may contain such details and are kept only as long as needed to fix problems.
On your device
- The app keeps a sign-in token in your phone’s secure storage, and word sounds in a temporary folder that is emptied every time the app starts.
What we do not collect
- No contacts, location, photos, camera, microphone, advertising ID or payment data.
- No analytics, tracking or advertising tools in the app or on this website.
How we use your data
- To create and run your account and sign you in (needed to provide the service).
- To save your progress so it is the same on every phone you sign in on (needed to provide the service).
- To send you emails with confirmation and password-reset codes (needed to provide the service). We do not send marketing emails.
- To check and fix the word content you report (our legitimate interest in correct, safe content).
- To keep Aguga secure and working (our legitimate interest in a safe, reliable service).
Who processes data for us
We share data only with the providers we need to run Aguga, and only for that purpose:
| Provider | What for | Data |
|---|---|---|
| Contabo (EU) | Hosting our server and database in the EU | All data above |
| Google (Gmail) | Sending code emails | Your email address and the code |
| Cloudflare | Domain name (DNS) | None of your personal data |
| OpenAI | Creating word lists, pictures and pronunciations | Only word content (words, languages, topics), never your personal data |
Some of these providers may process data outside your country, under their own data-protection safeguards. We never sell or rent your data, and we never share it for advertising.
How long we keep it
- Your account, settings, progress and reports are kept until you delete your account.
- When you delete your account, it is removed from our database immediately. Copies in our daily backups disappear within 14 days, when those backups expire.
- Confirmation and password-reset codes stop working after 15 minutes.
Your rights
You can:
- See and change your settings in the app at any time.
- Delete your account and all its data in the app (Profile → Delete account), or ask us to delete it.
- Ask for a copy of your data, ask us to correct it, or object to how we use it, by writing to support@aguga.app.
- Complain to your local data-protection authority if you think we handled your data wrongly.
We answer requests within 30 days, usually much sooner.
Children
Aguga is meant for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, write to support@aguga.app and we will delete it.
Security
All traffic between the app and our server is encrypted (HTTPS). Passwords and codes are stored only as hashes, and access to the server is limited to the developer.
Changes to this policy
If we change this policy, for example when Aguga adds new features, we will update this page and the date above. For important changes we will also tell you in the app.
Contact
Questions about privacy? Write to support@aguga.app.