YohlingYohling.
Sign in

Privacy Policy

Last updated: July 7, 2026

This policy explains what information Yohling collects when you use our website, dashboard, and Chrome extension, why we collect it, and who we share it with. Yohling is currently operated by Geo Mathew, an individual based in India, trading as "Yohling" — not (yet) a separately registered company ("we", "us"). You can reach us at real.yohling@gmail.com for anything in this policy.

1. Information you give us

  • Account information: your email address and password, handled via Supabase Auth.
  • Content you save: words, sentences, and flashcard progress you choose to save while using the extension or dashboard, plus your practice test scores.
  • Billing information: when you subscribe, your payment details are collected and processed directly by our payment processor (currently Dodo Payments, or another processor we may use from time to time) — we never see or store your card number. We keep a reference ID linking your account to your subscription record, plus your subscription status and renewal date. If you choose the trial-skip option, we store a small on/off flag — no personal information beyond that marker — both in your browser's session storage and on your account itself, so your pricing choice survives even if you confirm your signup email from a different browser tab or device. This flag is cleared automatically once checkout begins.

2. Information the extension processes automatically

The Chrome extension is injected into every page you visit (because it needs to be ready when you want to use it), but it does not passively read, record, or transmit any page content. It only processes information when you actively trigger it — for example, by hovering over or selecting Chinese text. Nothing is sent anywhere until you take an action.

When you do use the hover-to-scan feature on a page:

  • A small cropped image of just the text region you're interacting with is sent to our OCR provider (currently Google's Gemini API, or a comparable provider we may use from time to time) to transcribe the Chinese text. We don't store this image — it's used to generate the transcription and then discarded.
  • If you use text-to-speech, the specific text (not your identity) is sent to a speech-synthesis service (currently Google Cloud Text-to-Speech), and the resulting audio is cached by the text content itself for up to a few days so repeat requests are instant — this cache isn't tied to your account.
  • We track how many scan, speech, and translation requests your account makes against a daily usage threshold, purely to prevent abuse — this resets every day and doesn't include the content itself.

3. Connection metadata

When you use the website or extension, our infrastructure providers (Vercel, Cloudflare, and Supabase) process connection-level data as a normal part of operating the service — this includes IP addresses, request timestamps, browser and device type, and response codes. We don't use this information to build profiles about you; it's retained at the infrastructure level for security, abuse prevention, and reliability purposes, subject to each provider's own data retention policies. See Section 4 for links to each provider.

We may use first-party, privacy-preserving analytics (such as Vercel Analytics or a self-hosted equivalent) to understand aggregate usage patterns — for example, which pages are visited and how the site performs. If and when we enable such tools, they collect only aggregated, non-identifying data (page views, Web Vitals) and do not use cookies or fingerprinting. We do not use, and do not intend to use, third-party advertising or behavioural analytics.

4. Cookies and similar technologies

We use a session cookie (via Supabase Auth) to keep you signed in. Separately, if you choose the trial-skip pricing option on our marketing site, we store a small flag (no personal information, just an on/off marker) — briefly in your browser's session storage, and also on your account itself, so the choice survives even if you confirm your signup email from a different browser tab or device than the one you started on. This flag is cleared automatically once checkout begins, and is never sent to a third party.

We don't currently use third-party advertising or analytics trackers, so there's nothing on the Site for a "Do Not Track" or Global Privacy Control signal to opt you out of. If that changes in the future, we'll update this policy and honor those signals where required by law. Because the cookie and the pricing-choice flag described above are both strictly necessary to provide functionality you've directly requested (staying signed in; completing the pricing flow you chose), neither requires a cookie-consent banner under applicable law — but we're naming them here for transparency regardless.

5. Who we share information with

We share information only with the service providers we rely on to run Yohling, each acting on our behalf:

  • Supabase — account authentication and database storage. (Privacy policy)
  • Dodo Payments (or another payment processor we may use from time to time) — our Merchant of Record for billing, tax, and payment processing. (Privacy policy)
  • Google Cloud — on-demand text recognition and speech synthesis, described above. (Privacy policy)
  • Cloudflare — hosts the extension's backend and a short-lived audio cache described above. (Privacy policy)
  • Vercel — hosts the website itself. (Privacy policy)

We don't sell your personal information, we don't share it with advertisers, and we don't share it for cross-context behavioral advertising.

6. How long we keep your data

We keep your account and saved content for as long as your account is active. If you delete your account, we delete your saved words, sentences, flashcards, and test history within a reasonable time, except where we need to keep billing records for tax or legal reasons.

7. Your rights

Wherever you're located, you can ask us to:

  • Access a copy of the personal information we hold about you;
  • Correct inaccurate or outdated information;
  • Delete your account and associated data ("right to be forgotten");
  • Export your data in a portable format;
  • Restrict or object to certain processing;
  • Withdraw consent you've previously given us, where processing relies on it.

To exercise any of these, email real.yohling@gmail.com. We'll respond within 30 days. We may need to verify it's really you before acting on a request.

7a. If you're in the European Union / European Economic Area

We process your personal information based on: performance of our contract with you (running your account and subscription), our legitimate interests (keeping the Service secure and working properly, and understanding aggregate usage and performance to improve the Service), and consent where you've given it. In addition to the rights listed above, you have the right to lodge a complaint with your local data protection supervisory authority. Where our service providers process your data outside the EEA (for example, in the US), we rely on the safeguards those providers offer, such as Standard Contractual Clauses.

7b. If you're a California resident

In the past 12 months we've collected the categories of personal information described in Sections 1 and 2 above (identifiers like your email, commercial/billing information, and the vocabulary/sentence content you save). We collect this to operate and improve the Service — we don't sell or share it for cross-context behavioral advertising. You have the right to know what we've collected, request deletion or correction, and not be discriminated against for exercising these rights. Contact real.yohling@gmail.com to exercise any of them.

7c. If you're in India

We collect and process your personal data based on your consent (for example, when you create an account) and as necessary to provide the Service you've signed up for, consistent with the Digital Personal Data Protection Act, 2023. You can reach out to real.yohling@gmail.com with any grievance or to exercise the access/correction/erasure rights listed in Section 7, and we'll address it directly.

8. Children's privacy

Yohling is intended for users 18 and older (see our Terms of Service), and we don't knowingly collect personal information from anyone younger. If you believe a minor has created an account, contact us and we'll remove it.

9. International transfers

Our service providers may process and store information in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

10. Changes to this policy

We may update this policy from time to time — for example, if we change our OCR or speech-synthesis provider, adjust cache durations, or enable new analytics tools. Material changes will be reflected by a new "Last updated" date above. Continuing to use the Service after a change means you accept the updated policy.

11. Contact

Questions about this policy? Email real.yohling@gmail.com.