Privacy Policy

Last updated: July 2026

My Thai is operated by Rowson Works Ltd, a private limited company registered in England and Wales (company no. 17253603; registered office: 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE). This policy explains what personal data My Thai collects, why we use it, who processes it on our behalf, and how you can control or delete it. For any question, contact hello@mythaiapp.com.

What data we hold

  • Account data – your email address, your name or display name, your time zone (used to reset daily counters on your local calendar day), and the authentication identifiers our auth provider and app use to recognise your account.
  • Learning data – the words you study and create, your confidence levels, favourites, review history, progress, streaks, and daily usage counts.
  • Generated content – text you enter for custom words, the Thai translation and phonetic Thai produced for it, and audio generated and stored for playback.
  • Billing data (Premium only) – records from our payment provider such as customer and subscription identifiers and payment status. We do not store your full card details; those are handled by Stripe.
  • Technical and security data – server logs, error reports, timestamps, and basic device, browser, and network information needed to run the service securely.
  • Usage analytics – privacy-preserving records of how the app is found and used (for example which features you open and when you start or finish a study session). Product analytics are tied to your account identifier; acquisition analytics are not linked to your account, though they do use a browser identifier. Analytics never includes your email or name, and never the Thai text, custom words, translations, or search terms you enter.

Why we use it

  • to provide your account and save your progress across devices;
  • to generate translations, phonetic Thai, and audio for your custom words;
  • to operate Premium subscriptions and keep access accurate;
  • to keep the service secure, diagnose errors, and prevent abuse;
  • to understand how the app is used, in aggregate, so we can improve it;
  • to measure whether our own marketing leads people to use My Thai;
  • to respond to your support requests.

We do not show third-party ads or sell your data. If we advertise My Thai, consented web analytics may be used to measure our own campaigns. We do not use it for personalised advertising or remarketing, and the free tier remains ad-free.

Who processes it

We use a small number of trusted providers to run My Thai. They process data only to provide their service to us:

  • Vercel – web hosting, serving the app, and storing generated audio files.
  • Neon – hosting the application database.
  • Supabase – authentication (sign-up, sign-in, password reset).
  • Resend – sending account and system emails, such as password resets.
  • Stripe – processing web payments and managing subscriptions.
  • Google Cloud Text-to-Speech – generating audio for custom words.
  • Google Gemini – translating custom words into Thai and producing phonetic Thai.
  • PostHog (EU region) – privacy-preserving product analytics that help us understand how the app is used.
  • Google Analytics – acquisition and conversion analytics that help us understand how people find and sign up for the app. It is configured not to receive your email, name, learning content, or search terms, and is never sent your account id. It is not used in the Android or iPhone apps.
  • Google Ads – when we run our own search campaigns, limited conversion measurements from consented Google Analytics visits help us understand whether those campaigns work. We do not use Google Ads for remarketing or personalised advertising, and it is not used in the Android or iPhone apps.

Some providers may process data outside the UK and EU; where they do, they are expected to apply appropriate safeguards.

Cookies and similar storage

Necessary – the session cookies that keep you signed in, plus two small cookies that record which region you are browsing from and what you chose below, so that your choice can be applied. If you arrive through an invitation link we also store a small record of that visit, so the offer can be applied when you create your account. These are always active and are never used to profile you.

Analytics – PostHog and Google Analytics set cookies and local storage to measure how the app is found and used. If you are in the UK or EEA, neither loads until you accept, and nothing is sent to either provider before then. Elsewhere they are active by default.

In the Android and iPhone apps we set no analytics cookies or device storage at all, and Google Analytics is not used. Usage is recorded against your account only. Some usage is likewise recorded on our servers against your account on the web – for example when a subscription starts. That does not involve cookies and we rely on our legitimate interest in understanding and improving the service. If you would rather we did not, email hello@mythaiapp.com and we will switch it off for your account.

We do not use advertising or remarketing cookies, we do not sell your data, and the free tier shows no ads. Measurement of our own campaigns uses the analytics choice above; advertising storage and personalisation remain off.

Retention and deletion

We keep your account and learning data for as long as your account exists. When you delete your account, your learning data and profile are deleted or anonymised and your sign-in identity is removed – see Account Deletion. We keep limited billing and security records where we are legally required to, or where we need them for tax, accounting, fraud-prevention, or dispute purposes. Residual copies in routine backups age out within a limited period.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can delete your account yourself in the app, or email hello@mythaiapp.com with any data request.

No sale of your data

We do not sell your personal data, and we do not share it for advertising.

Changes

We may update this policy as the service develops. The version shown here is the current one.